Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
File: AS210542.roa (raw, json)
Hash identifier: CCgbwA58gkpjecXwwsPKb9QQCQ4B5INkgDKmxYJi0Oc=
Subject key identifier: 6C:AE:2E:FE:10:F4:95:59:CE:46:EE:C0:F0:01:1B:F5:3A:C0:51:88
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 665F06DFC5490C125CC47EF4C29F338DA76C6988
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
Signing time: Sat 28 Jun 2025 06:19:34 +0000
ROA not before: Sat 28 Jun 2025 06:14:34 +0000
ROA not after: Sat 27 Jun 2026 06:19:34 +0000
asID: 210542
IP address blocks: 2a0f:9400:7722::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:5f:06:df:c5:49:0c:12:5c:c4:7e:f4:c2:9f:33:8d:a7:6c:69:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 28 06:14:34 2025 GMT
Not After : Jun 27 06:19:34 2026 GMT
Subject: CN=6CAE2EFE10F49559CE46EEC0F0011BF53AC05188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:fc:63:96:54:c3:a7:c2:6d:df:3a:c7:23:
75:b2:a9:23:e5:e6:7a:fc:cc:60:2b:1f:85:c9:0e:
4e:dc:ee:92:48:4d:9e:2a:61:18:a2:3a:a9:5a:f5:
e7:a3:72:9f:e8:88:3f:45:e2:5f:39:16:aa:29:02:
4d:13:1a:fc:45:26:b0:de:d1:9a:29:b9:49:e8:67:
73:9d:b6:90:1d:0d:a2:f3:70:6e:15:e0:15:0b:bc:
bb:b1:ac:51:43:66:dd:31:da:7e:7b:a5:6d:e0:ad:
f0:35:18:20:9d:a1:33:55:e1:63:15:ba:f5:8a:93:
91:99:0f:a6:4e:2f:11:e5:fb:d6:22:b0:d7:b1:ea:
0e:4b:ef:61:84:62:22:7c:e9:f6:19:f5:67:ae:61:
45:9c:07:35:2c:f9:30:1f:8a:d8:c7:e2:68:c9:3b:
c3:9e:69:c5:b1:8e:4c:35:17:59:55:a6:22:83:57:
84:55:a3:47:17:23:b2:cf:43:59:83:d3:29:6d:9c:
66:b5:56:92:72:71:19:49:14:f3:00:4f:8e:1d:ed:
c4:70:78:e7:6a:c1:c6:b7:de:11:2d:c9:c6:1b:cb:
ff:bc:59:e7:18:e4:3f:0d:bd:da:76:5c:c8:28:e3:
74:a1:d6:9f:e2:69:9a:6d:c8:4e:d4:83:ff:52:36:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:2E:FE:10:F4:95:59:CE:46:EE:C0:F0:01:1B:F5:3A:C0:51:88
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7722::/48
Signature Algorithm: sha256WithRSAEncryption
c3:a8:ff:98:a4:35:c8:4f:65:09:ca:3f:1d:ad:5f:a6:79:2a:
9b:93:88:2e:16:f3:3b:ea:dd:df:09:70:ef:6f:22:dd:31:a8:
d7:9a:50:da:9a:df:50:8d:77:e1:fd:20:e1:e8:c3:4c:18:45:
90:6a:d3:8a:45:bc:48:a7:b2:82:90:9f:c9:23:04:7f:1c:a0:
e4:04:6c:80:e6:3e:64:90:69:1d:37:77:23:40:eb:9c:23:10:
55:79:00:be:d4:c0:a4:b4:dc:fc:87:5f:b9:21:df:66:5d:07:
9d:99:4f:87:66:07:99:57:7e:e1:3e:0a:9a:a0:01:df:c2:f4:
25:8a:3b:2a:2f:95:96:8a:29:20:e6:ef:0a:9c:7a:cc:27:2e:
56:24:87:20:e9:1d:54:88:40:17:30:f3:26:d3:36:7a:33:c6:
94:9c:db:05:ab:3d:6c:91:be:34:c3:da:ea:90:85:4e:29:a7:
f4:22:c7:12:95:af:bc:00:5a:4e:48:a2:c1:9b:27:aa:12:30:
8a:0c:68:e8:5b:1c:27:08:2f:0f:d3:6c:2d:77:be:db:88:ca:
5d:38:cc:d0:d5:ea:3f:0c:30:ce:be:d0:c0:76:e1:db:15:be:
77:d7:f7:63:66:8d:73:4c:2b:3c:2d:22:68:9e:ae:ae:10:57:
b2:fa:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:12:54 2025 by rpki-client