Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: PNw6NDP32Dur9djwYG9cIN4jVEYZt+hiHIH2uAV1jk0=
Subject key identifier: 08:86:3F:68:C7:63:C2:ED:75:8F:58:C8:5A:C5:02:B7:1A:33:84:80
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4E22BBC9B2436115DF542BD7495FF82B7CCEE5AD
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
Signing time: Tue 17 Jun 2025 03:14:59 +0000
ROA not before: Tue 17 Jun 2025 03:09:59 +0000
ROA not after: Tue 16 Jun 2026 03:14:59 +0000
asID: 207941
IP address blocks: 2a0f:9400:772b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:22:bb:c9:b2:43:61:15:df:54:2b:d7:49:5f:f8:2b:7c:ce:e5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:59 2025 GMT
Not After : Jun 16 03:14:59 2026 GMT
Subject: CN=08863F68C763C2ED758F58C85AC502B71A338480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:9e:af:62:5b:be:0e:0c:e0:ba:71:e6:e3:
b9:15:c1:0a:1d:4d:23:b6:43:cf:80:da:a2:60:10:
5d:99:eb:9c:ce:a3:68:bc:5b:d0:2a:24:88:c8:45:
e0:af:ba:7d:f0:d5:fa:21:65:8c:3c:0e:66:40:a7:
22:07:7a:d5:ba:e2:ea:23:80:7b:da:e5:5e:e9:8d:
d7:db:e1:b7:ac:8f:b6:95:7f:da:37:f5:3b:26:56:
61:b3:fc:3b:ed:4c:b0:ba:33:89:50:d4:f3:8f:82:
f4:bc:a8:bf:a0:b9:23:99:d4:dc:7d:bd:91:b1:d4:
fb:6a:a5:36:1c:2d:4f:0f:1b:d1:ea:6b:80:4a:ac:
ba:0d:d7:5a:df:37:4e:93:a4:7e:5f:6b:6c:42:e2:
58:c4:1f:d3:96:b9:16:af:e8:b7:3d:c9:54:b7:e7:
e2:12:fc:ce:89:12:b4:4b:5b:3c:11:34:35:9d:1b:
07:1f:74:a3:29:f2:35:0a:5a:95:d8:d7:d1:d3:d5:
0e:45:49:29:30:6a:d9:9c:9a:78:40:d1:cd:2c:ed:
5f:bf:b1:f9:a6:99:f7:09:b7:58:2e:a3:44:8f:25:
15:e2:e4:a5:e3:3a:38:32:16:f8:f2:05:0e:72:b8:
56:08:f8:1d:cc:e7:6b:7d:ac:fc:1f:3b:90:82:9d:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:3F:68:C7:63:C2:ED:75:8F:58:C8:5A:C5:02:B7:1A:33:84:80
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:772b::/48
Signature Algorithm: sha256WithRSAEncryption
44:ad:ad:c6:d7:4b:99:93:1d:ad:f9:56:c8:d2:24:b0:7b:bd:
55:d1:bd:52:3a:37:75:89:3f:75:36:26:20:f9:46:56:29:7a:
54:14:d5:7e:2a:a4:2c:99:e1:0b:b6:4a:ab:0d:2b:98:c4:6b:
ef:07:0a:50:06:83:71:b5:ea:04:6e:57:41:24:44:8c:aa:0e:
bf:5b:58:e5:cf:bb:91:8d:cb:97:f5:c8:c8:7f:3a:c3:54:98:
80:bf:ee:6b:35:13:e3:25:89:5a:9a:8e:44:d3:fa:df:23:ee:
35:3f:b2:c2:14:e4:0c:b9:b1:cb:1e:50:67:78:6e:30:d4:67:
9d:90:82:0f:db:e8:83:3f:04:c5:43:70:b5:a1:f0:df:8b:62:
55:b4:0f:49:34:e3:0c:cf:4a:de:6a:a1:3a:2b:a6:f5:02:64:
c6:4f:26:2a:2a:a5:de:f0:dd:11:0d:88:46:21:69:b3:f9:4b:
5f:f4:4f:ef:90:39:07:99:b5:85:6c:68:c9:e7:74:a7:50:13:
b2:eb:c5:31:b5:10:81:07:62:95:e5:8e:8b:05:64:c4:14:0f:
ac:c6:85:b0:45:4d:97:90:bb:85:9b:cd:80:e2:bd:76:37:f2:
69:08:09:17:99:dd:54:10:0f:8a:94:87:6a:71:1a:c1:c5:cc:
83:6c:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:51:36 2025 by rpki-client