Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
File: AS210254.roa (raw, json)
Hash identifier: izRmqA3Ke3EsjBhm/QkB9AkBXBm6Zu7FlIfAmwqhUNU=
Subject key identifier: 03:80:54:64:BD:FB:2D:60:7F:69:B1:A3:BE:39:00:39:A2:25:32:AB
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1FCB3E72539D3A977E33C21307A267D16AB9C3A2
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
Signing time: Tue 17 Jun 2025 03:14:59 +0000
ROA not before: Tue 17 Jun 2025 03:09:59 +0000
ROA not after: Tue 16 Jun 2026 03:14:59 +0000
asID: 210254
IP address blocks: 2a0f:9400:7360::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cb:3e:72:53:9d:3a:97:7e:33:c2:13:07:a2:67:d1:6a:b9:c3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:59 2025 GMT
Not After : Jun 16 03:14:59 2026 GMT
Subject: CN=03805464BDFB2D607F69B1A3BE390039A22532AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:b9:87:d5:b7:67:96:0d:eb:0e:b7:b2:0c:
e8:02:90:05:c4:61:38:9c:c2:79:8a:ec:1a:d1:39:
97:7f:ea:28:96:cc:b7:33:f6:b5:92:22:f5:ba:ff:
48:5b:29:59:92:cb:3a:64:2e:7b:fa:1b:c2:67:74:
a4:67:d4:64:10:ca:61:0c:3a:d3:66:b7:a3:f6:fa:
f1:8b:5f:2c:96:13:b5:c4:34:ef:ba:b3:7b:af:5e:
79:73:62:e8:41:58:da:29:e1:ba:35:d6:59:e8:e2:
84:9c:e4:51:9c:56:6a:fd:40:c0:61:28:91:f9:41:
9f:03:a0:e3:13:e0:c6:77:61:9a:a6:d9:4f:2a:d1:
c1:d5:fd:48:23:53:10:ac:98:8b:9c:23:92:24:3d:
5a:56:fd:b8:96:2f:06:fb:3b:67:cb:8e:d3:f8:e9:
de:cd:b1:37:3c:e9:4b:b6:39:41:34:fe:80:f8:50:
46:8e:97:34:4c:51:41:6a:c0:90:63:4c:65:bf:67:
42:b8:f9:d3:0f:83:6b:2b:f9:86:05:9a:18:d6:fd:
81:94:ef:ea:65:b6:91:9b:72:1e:17:6e:8a:58:a9:
bd:59:dc:2f:25:99:25:df:c7:fe:0c:77:9f:4d:fa:
94:99:be:17:d2:f9:cb:5a:8d:62:52:84:01:8b:f5:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:80:54:64:BD:FB:2D:60:7F:69:B1:A3:BE:39:00:39:A2:25:32:AB
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7360::/48
Signature Algorithm: sha256WithRSAEncryption
d4:77:ea:a4:42:66:f1:48:6a:11:0d:30:2a:ab:5c:5c:52:27:
3a:83:5a:f8:51:cf:0f:cc:bc:d4:83:85:15:a9:fa:6a:dd:7b:
12:5f:34:73:53:24:b7:c8:7e:5c:73:ca:dd:44:5d:a1:80:d3:
5f:2a:9b:ea:f3:97:c1:72:3d:b5:c9:77:8e:48:47:a6:ca:e7:
22:d9:4c:34:8a:d7:82:0d:de:1c:90:f7:46:65:50:8c:86:d3:
f8:58:6f:46:e0:49:28:61:80:f5:be:77:ff:1d:85:41:9e:34:
98:87:ef:b3:6e:fd:f2:54:b8:00:ce:57:82:74:12:df:5d:13:
88:da:47:22:52:63:4e:38:30:18:1e:42:57:a6:d1:80:d7:25:
ac:60:a1:56:4f:25:66:a5:d3:ad:c0:6c:24:d5:fd:f0:a7:b9:
ae:ad:42:7a:c0:af:4b:59:4f:17:f3:51:5c:82:83:49:3a:59:
b8:67:ae:49:0b:51:1f:2e:e1:bd:27:4f:16:63:dc:fe:5e:63:
b2:50:d6:81:d4:6a:2f:58:dd:55:d0:96:c3:6b:5b:98:18:1f:
dd:ff:81:b4:c5:3e:90:cc:1a:1c:2a:db:52:37:b8:08:a4:b1:
83:b5:a1:dc:14:af:bc:83:dc:1e:0e:5b:eb:50:e7:a8:04:45:
bc:ab:f9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:56:26 2025 by rpki-client