Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
File: AS210714.roa (raw, json)
Hash identifier: Bo1OsFFkgAnEEWE5vkNx2hCfn0KlDVCeSJs1A3fOV0Q=
Subject key identifier: F5:AF:96:27:B9:3C:FC:18:08:48:32:95:E1:CB:EE:14:95:C1:A5:69
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 029ED7F01F1EA925B48461DFD554368F83AC53C5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
Signing time: Tue 17 Jun 2025 03:14:56 +0000
ROA not before: Tue 17 Jun 2025 03:09:56 +0000
ROA not after: Tue 16 Jun 2026 03:14:56 +0000
asID: 210714
IP address blocks: 2a0f:9400:7862::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:9e:d7:f0:1f:1e:a9:25:b4:84:61:df:d5:54:36:8f:83:ac:53:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:56 2025 GMT
Not After : Jun 16 03:14:56 2026 GMT
Subject: CN=F5AF9627B93CFC1808483295E1CBEE1495C1A569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:c4:27:f5:9a:03:29:aa:8e:92:9c:17:a6:
6d:91:d5:1e:15:94:aa:83:12:91:0b:fe:51:27:c8:
53:78:6b:9e:eb:3e:84:dc:51:f6:e0:07:b0:de:4f:
ec:16:ce:4c:96:6c:37:8d:bb:65:51:62:0a:36:81:
eb:b6:e4:b9:94:35:1b:d6:49:51:c0:cb:d4:60:b3:
0b:ca:d6:44:37:7c:76:08:ca:d1:8e:e2:22:fb:5e:
1f:f1:d7:8e:de:75:0e:1f:1a:1c:61:f0:12:93:11:
18:89:b2:4a:4e:4c:79:9c:e2:19:22:b3:b5:db:32:
12:eb:72:32:17:e4:86:1b:04:c6:81:a9:3c:fd:cf:
fb:75:53:b3:44:49:85:87:85:a3:5e:38:28:37:0c:
e1:6f:de:44:a9:49:45:e8:54:c2:20:ec:c0:66:af:
a5:54:a1:1b:53:1a:26:06:3b:05:88:c8:72:21:ae:
e0:a3:42:a2:ac:b6:d7:6d:8c:8c:27:e0:44:5f:60:
bd:4a:4c:2a:54:f5:8d:84:f5:41:7e:d4:6b:1c:e6:
32:92:e7:48:e8:1c:00:56:01:04:29:53:cf:bf:08:
7f:4a:11:4e:59:fc:6e:09:a5:1f:46:d1:b6:74:ff:
ed:44:76:54:76:e2:76:1f:d3:de:4d:6a:5c:6c:7c:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AF:96:27:B9:3C:FC:18:08:48:32:95:E1:CB:EE:14:95:C1:A5:69
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7862::/48
Signature Algorithm: sha256WithRSAEncryption
9a:73:50:ff:50:1f:b4:72:d1:1e:70:57:b0:6d:ca:ec:25:12:
40:92:46:9b:de:a5:9d:d1:d0:74:85:44:b0:c4:dd:fd:f3:4b:
34:89:15:57:55:28:52:d7:a1:3e:67:59:a4:3d:6b:24:64:05:
e1:1e:8d:e1:0f:13:6c:a4:58:64:5d:e5:a9:b7:74:7f:35:1f:
9d:7b:3f:85:f6:fa:fe:73:18:85:0c:11:c5:c3:43:b4:d3:7f:
ee:25:50:9d:04:f5:36:a6:4d:84:87:a9:25:e4:f9:11:72:00:
cb:7f:56:0b:6e:53:0b:d9:4f:7d:8f:ac:33:72:a5:b4:22:d0:
5a:e4:5e:2f:b4:28:5f:28:68:fe:0b:99:e6:d7:a2:16:fd:09:
63:36:23:b5:6c:7d:17:e6:57:b8:f1:af:5c:3b:89:13:12:90:
f4:99:6d:ea:09:89:67:58:fa:ed:02:cd:da:98:8b:21:5b:2d:
f8:1e:d3:ca:39:e5:58:b0:a8:1e:e1:d5:e0:c3:ce:5a:28:0a:
7a:2d:db:a1:54:07:28:c9:b0:1e:9e:56:c7:6e:d2:82:ec:11:
25:a2:fe:c0:b1:bc:b5:17:b1:c9:c9:35:6d:4e:73:4f:47:2e:
3f:35:8d:8d:f7:48:e7:48:c9:fa:7b:c0:23:d7:91:2b:23:e3:
84:90:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:00:45 2025 by rpki-client