Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210352.roa
File: AS210352.roa (raw, json)
Hash identifier: vJyRJSptK8wkvGIab++iIF/pFjPDrrYdDjzOu+/Yr4g=
Subject key identifier: 2A:58:26:A5:FC:55:F2:D9:6B:3C:AB:26:C8:AB:7F:52:1E:06:96:4B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5E7883E10A8145005C9AE65C0AD8C86CD4B64C71
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210352.roa
Signing time: Wed 16 Apr 2025 14:46:16 +0000
ROA not before: Wed 16 Apr 2025 14:41:16 +0000
ROA not after: Wed 15 Apr 2026 14:46:16 +0000
asID: 210352
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:78:83:e1:0a:81:45:00:5c:9a:e6:5c:0a:d8:c8:6c:d4:b6:4c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 16 14:41:16 2025 GMT
Not After : Apr 15 14:46:16 2026 GMT
Subject: CN=2A5826A5FC55F2D96B3CAB26C8AB7F521E06964B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:4a:89:2e:81:d9:61:7a:e9:f7:b7:14:19:
7c:46:5d:35:f8:25:99:1c:71:21:9d:b1:25:92:45:
d8:06:bb:64:2c:0e:fe:f2:0c:fe:7b:19:12:dd:c0:
15:86:84:9c:f8:70:1b:7b:c2:74:80:3d:df:89:ee:
ab:ac:2b:09:f3:2a:d8:b2:01:ac:40:72:63:ae:2e:
b6:a5:f5:ac:92:58:0b:d5:8c:f3:b2:ca:2f:60:30:
09:a6:66:0f:81:36:89:d6:14:11:3d:7b:f7:b7:8d:
67:b9:c1:40:3d:cc:da:68:01:75:8e:32:fd:6a:89:
a6:9b:e8:7e:3d:fd:2e:f5:4f:68:5e:0d:50:20:82:
01:4f:c4:63:d7:c2:61:f7:d7:68:f9:6c:99:47:e7:
c4:dc:0e:bf:fc:52:39:39:fb:be:6a:38:33:69:f5:
f3:ce:c8:b3:74:85:c6:6e:a0:0f:9b:f1:e2:00:c5:
40:89:64:70:6a:ae:01:da:8a:1b:15:85:5f:90:fe:
16:ea:86:8e:ac:4e:f2:dd:e9:8e:d7:86:0f:ea:3d:
bd:49:9c:a6:81:a6:c6:7d:72:21:0c:23:fd:16:f5:
48:19:28:7e:7d:c3:19:6f:0f:db:eb:3c:ba:a0:5e:
7e:f6:d6:d3:0a:62:3a:e4:c2:72:90:91:3c:fb:a4:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:26:A5:FC:55:F2:D9:6B:3C:AB:26:C8:AB:7F:52:1E:06:96:4B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
3f:e3:6a:88:4a:7e:9b:ec:7f:fd:30:6d:f8:99:c0:69:cf:e1:
1c:5f:c0:6e:10:29:26:d0:10:a2:b0:5b:6d:9a:fb:98:15:3f:
49:5e:e4:e7:34:83:0a:91:11:13:a0:32:48:01:13:a5:d7:d5:
fe:b1:3b:bf:0d:56:f6:1e:c0:cb:44:88:6c:ba:ac:e2:46:30:
4e:76:91:d7:40:91:40:6b:f7:b4:34:cc:bd:5d:82:4c:8a:1c:
39:11:69:c3:e0:d2:f6:82:95:61:36:70:5f:55:d4:88:04:c2:
1e:cf:b3:eb:d7:3f:06:93:ca:d8:da:a4:ec:50:17:8e:31:62:
e3:1e:a7:e4:f2:9f:74:32:d9:98:3e:a1:42:11:42:44:6a:77:
9b:be:59:00:49:5a:dc:f3:8e:c0:fa:3e:19:c6:4d:ea:83:bc:
59:7f:de:d2:64:9a:67:a9:6a:e6:72:a7:e9:25:90:63:6e:0d:
04:b1:51:51:2f:c3:41:ad:e1:0e:ce:39:0b:25:ba:56:79:d4:
3f:9f:f5:1e:a2:01:00:4e:78:9d:fd:b9:be:b1:df:db:a8:af:
8e:4e:cb:64:50:90:54:6e:81:32:dc:0e:4e:f9:a6:62:bd:61:
fb:1e:2b:01:fa:bc:22:66:ab:f4:ed:b5:f9:5b:73:7c:a8:8a:
ef:c4:ca:a1
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUXniD4QqBRQBcmuZcCtjIbNS2THEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA0MTYxNDQxMTZaFw0yNjA0MTUxNDQ2MTZaMDMxMTAvBgNV
BAMTKDJBNTgyNkE1RkM1NUYyRDk2QjNDQUIyNkM4QUI3RjUyMUUwNjk2NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZqEqJLoHZYXrp97cUGXxGXTX4
JZkccSGdsSWSRdgGu2QsDv7yDP57GRLdwBWGhJz4cBt7wnSAPd+J7qusKwnzKtiy
AaxAcmOuLral9aySWAvVjPOyyi9gMAmmZg+BNonWFBE9e/e3jWe5wUA9zNpoAXWO
Mv1qiaab6H49/S71T2heDVAgggFPxGPXwmH312j5bJlH58TcDr/8Ujk5+75qODNp
9fPOyLN0hcZuoA+b8eIAxUCJZHBqrgHaihsVhV+Q/hbqho6sTvLd6Y7Xhg/qPb1J
nKaBpsZ9ciEMI/0W9UgZKH59wxlvD9vrPLqgXn721tMKYjrkwnKQkTz7pKt3AgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUKlgmpfxV8tlrPKsmyKt/Uh4GlkswHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMDM1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC
AQEAP+NqiEp+m+x//TBt+JnAac/hHF/AbhApJtAQorBbbZr7mBU/SV7k5zSDCpER
E6AySAETpdfV/rE7vw1W9h7Ay0SIbLqs4kYwTnaR10CRQGv3tDTMvV2CTIocORFp
w+DS9oKVYTZwX1XUiATCHs+z69c/BpPK2Nqk7FAXjjFi4x6n5PKfdDLZmD6hQhFC
RGp3m75ZAEla3POOwPo+GcZN6oO8WX/e0mSaZ6lq5nKn6SWQY24NBLFRUS/DQa3h
Ds45CyW6VnnUP5/1HqIBAE54nf25vrHf26ivjk7LZFCQVG6BMtwOTvmmYr1h+x4r
Afq8Imar9O21+VtzfKiK78TKoQ==
-----END CERTIFICATE-----
Generated at Wed May 7 22:40:04 2025 by rpki-client