Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209642.roa
File: AS209642.roa (raw, json)
Hash identifier: +72XgwBWvrMu+KC1RiooevxH4Dpdiaxh5NN8Csg9aRs=
Subject key identifier: 90:F3:07:35:75:53:87:01:0B:4D:0E:7E:41:3F:3B:92:E5:D2:9D:81
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 171D1E91B71BF7811B669DCE093CFB6B9D8B8216
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209642.roa
Signing time: Tue 17 Jun 2025 03:14:56 +0000
ROA not before: Tue 17 Jun 2025 03:09:56 +0000
ROA not after: Tue 16 Jun 2026 03:14:56 +0000
asID: 209642
IP address blocks: 2a0f:9400:6107::/48 maxlen: 48
2a0f:9400:73b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1d:1e:91:b7:1b:f7:81:1b:66:9d:ce:09:3c:fb:6b:9d:8b:82:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:56 2025 GMT
Not After : Jun 16 03:14:56 2026 GMT
Subject: CN=90F30735755387010B4D0E7E413F3B92E5D29D81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:18:3e:67:fe:85:e7:6b:43:c3:e4:d3:f0:
e6:9d:41:1b:33:ea:d8:8f:1c:d6:fa:11:17:79:b9:
fc:7b:e4:0b:d8:50:21:f4:e1:1e:78:e8:2a:e7:43:
25:ab:42:d0:d4:ab:fd:5a:c7:b0:54:76:56:4f:f1:
a9:7d:b7:a2:82:b0:b4:45:f2:98:6e:2f:42:62:ba:
7d:e6:a7:a9:01:e3:f1:00:db:55:75:e2:b9:45:89:
e0:42:59:d0:e8:30:fa:03:69:79:17:ce:c3:ba:c2:
a9:17:0a:ff:65:7a:51:e7:a2:89:b4:ed:b9:d8:a9:
84:a1:56:3e:19:5d:d9:b1:35:16:a7:e2:28:d5:00:
31:d6:77:1b:6c:cd:f2:ae:6f:d9:06:09:a0:a1:b1:
ac:87:2a:47:08:39:c5:fa:4f:2b:9a:cd:1c:0b:97:
c8:33:d1:38:06:e5:9b:e6:a7:11:a3:cc:01:0e:a9:
e2:e6:62:50:ce:7d:39:16:d1:36:b8:f8:ac:cd:16:
18:ea:cd:af:7d:3f:e8:3d:36:0c:62:9e:2f:71:67:
d5:e6:52:9b:7a:44:10:04:10:d8:f1:7b:8d:b2:2d:
f9:74:07:6b:e8:4e:f9:27:35:02:86:85:06:60:f5:
c2:e0:58:69:fa:d5:d6:14:05:8b:3c:88:0b:3c:48:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F3:07:35:75:53:87:01:0B:4D:0E:7E:41:3F:3B:92:E5:D2:9D:81
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6107::/48
2a0f:9400:73b0::/44
Signature Algorithm: sha256WithRSAEncryption
cb:ec:8b:26:79:0e:cf:7d:3f:2b:8c:6a:42:57:c7:24:ac:ba:
97:fe:60:c6:3b:c0:e6:aa:a5:31:12:da:2a:07:37:a0:58:3c:
6b:49:07:83:70:91:69:9c:b6:99:26:a8:ed:2f:21:6a:76:4d:
db:ed:92:b0:87:2a:ac:17:be:06:12:36:76:9f:7c:f3:55:a5:
39:1c:5a:7f:33:bd:03:da:4b:38:2f:ae:ea:ad:ad:c1:78:ac:
17:4c:39:b6:ff:64:3f:c4:7f:ee:43:38:1e:27:95:8d:a9:2f:
d6:bc:de:fb:61:dc:c9:2b:8a:c6:d8:fe:85:bd:b3:86:ee:71:
1c:11:b0:0d:93:dd:88:f2:38:8b:df:39:b7:7f:e2:6d:eb:af:
58:cb:73:97:ee:9d:ca:3e:f5:6c:c8:b2:70:57:28:39:15:bc:
ab:25:02:99:5d:8f:f2:9d:b7:5b:f9:a6:02:0b:1c:b1:3b:8c:
84:53:5f:04:1e:8d:6e:99:2d:7d:3c:fa:f2:9b:46:66:5b:78:
e8:a6:69:c0:66:60:4a:7d:3d:8c:51:1a:32:5b:75:46:50:e4:
7c:c9:f1:01:7c:87:0c:90:14:d9:91:27:83:ed:c5:21:ca:ba:
d8:f9:8b:78:db:c2:8b:a2:f7:3b:0b:3b:4c:f6:cc:6b:15:a0:
ae:17:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:42:02 2025 by rpki-client