Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
File: AS205794.roa (raw, json)
Hash identifier: zsW7JzWhxG/prwrb5HB+PH0yjkAdy/mZuwkBfHAQOjk=
Subject key identifier: C2:6E:6F:2D:9E:6E:12:89:FE:96:3D:39:62:DE:4F:93:02:EF:25:13
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 57A2C4AAEB356BBA1C638C8088160604AEE5306C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
Signing time: Tue 17 Jun 2025 03:14:58 +0000
ROA not before: Tue 17 Jun 2025 03:09:58 +0000
ROA not after: Tue 16 Jun 2026 03:14:58 +0000
asID: 205794
IP address blocks: 2a0f:9400:7700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a2:c4:aa:eb:35:6b:ba:1c:63:8c:80:88:16:06:04:ae:e5:30:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:58 2025 GMT
Not After : Jun 16 03:14:58 2026 GMT
Subject: CN=C26E6F2D9E6E1289FE963D3962DE4F9302EF2513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:48:bd:6b:c7:48:59:38:37:cd:44:09:62:
30:23:ce:42:5a:75:45:87:db:f3:74:e1:1e:c1:bd:
27:42:96:84:9f:fd:7e:91:16:1c:52:19:f2:81:af:
4f:14:73:a3:64:f3:dd:3d:fa:de:3b:8f:48:c7:44:
85:73:ad:f8:82:08:02:45:f3:de:a9:f5:f1:85:60:
7f:31:72:da:bf:42:81:27:35:c8:33:1d:09:95:72:
c1:1d:3c:72:55:77:f5:a1:d4:bd:87:d4:37:64:96:
f2:fa:92:65:34:b5:fc:c7:e7:e6:3c:de:53:6c:70:
9a:3f:da:9b:ed:1c:50:f7:32:3d:f3:c5:db:bf:9f:
85:8b:56:8a:6b:fa:c5:81:d8:fa:6e:20:66:e6:3d:
b1:59:eb:cd:d2:e8:d1:61:2f:4e:d0:b6:1f:91:86:
cf:e1:e9:ba:2e:87:88:58:7d:ad:b8:07:87:23:72:
ef:b1:77:38:d2:9e:da:7b:e5:94:ab:b6:98:bc:cc:
cf:3e:b7:dc:62:69:09:57:fb:5a:6c:44:57:db:5f:
07:97:72:b9:c9:82:ee:c3:b6:7f:75:11:a3:00:bc:
e2:c3:35:ca:0a:ac:d4:c6:ec:3b:c1:5f:2d:33:14:
00:4e:23:a8:6c:9a:06:e8:88:56:e4:b0:ac:1d:3e:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6E:6F:2D:9E:6E:12:89:FE:96:3D:39:62:DE:4F:93:02:EF:25:13
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7700::/48
Signature Algorithm: sha256WithRSAEncryption
c1:93:bd:af:ee:2f:db:92:81:ab:a1:dd:ad:82:fa:90:1f:2d:
b5:03:11:f3:54:ba:6d:7e:51:3f:d4:d0:c4:3e:ae:f1:b4:9d:
11:72:b2:16:49:8c:3e:0c:b5:23:4f:ed:89:5d:d8:d1:3a:44:
35:ec:54:56:7b:34:67:4f:ba:d3:f9:2e:c1:36:e5:1d:80:4c:
01:9b:d0:ef:a1:b3:bb:ef:67:e4:fd:0f:1b:b1:1d:ff:d2:ae:
9d:ff:32:41:e1:67:da:48:6b:84:3f:1c:3f:be:8b:ed:40:73:
25:66:74:b8:b1:45:23:5f:6a:88:7f:ca:86:11:45:fe:c6:8b:
1b:e1:41:01:ed:06:6f:ec:96:79:6d:d7:4b:e6:f0:da:b3:d8:
66:1a:55:87:44:db:f0:c0:ad:2e:5e:76:6d:c1:78:d2:00:80:
29:4a:71:bd:8c:6b:8a:67:09:9d:9a:24:a2:8b:5f:5b:a0:a2:
4f:e5:96:36:23:9d:4b:74:e1:cf:d2:49:78:bc:0c:95:51:c7:
c6:1f:a6:27:dc:72:5d:a6:b7:c9:9b:bc:1d:36:4c:b3:d7:1e:
3a:49:f3:ab:71:80:d8:24:c0:83:90:4a:0f:4e:a1:9b:76:9b:
9f:35:5d:98:da:ef:f0:88:da:01:be:b8:a0:09:42:27:7a:5d:
4c:d8:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:40:41 2025 by rpki-client