Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211066.roa
File: AS211066.roa (raw, json)
Hash identifier: fu49w5qZiCnQYSuITNZWcZ3zjewE58Y2wC+pV17/+6A=
Subject key identifier: B9:D4:F4:0A:15:7D:34:F0:D1:4D:B0:4A:7D:A9:2C:B0:25:1A:06:00
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2CDE838D776F13CD2844D6B8C33DAE65328EC78C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211066.roa
Signing time: Sat 28 Jun 2025 06:19:34 +0000
ROA not before: Sat 28 Jun 2025 06:14:34 +0000
ROA not after: Sat 27 Jun 2026 06:19:34 +0000
asID: 211066
IP address blocks: 2a0f:9400:7722::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:de:83:8d:77:6f:13:cd:28:44:d6:b8:c3:3d:ae:65:32:8e:c7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 28 06:14:34 2025 GMT
Not After : Jun 27 06:19:34 2026 GMT
Subject: CN=B9D4F40A157D34F0D14DB04A7DA92CB0251A0600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:f8:a6:30:3b:96:44:37:67:59:5c:55:49:
81:f3:5b:ee:0b:01:64:71:37:3a:60:a1:8d:91:f3:
55:eb:0a:c4:f2:05:ae:2b:47:de:1e:ff:ec:59:c3:
b8:55:2d:37:3f:e6:ce:81:f6:0a:ee:f5:47:25:21:
bf:bb:dd:60:f7:2e:f6:12:80:dd:0b:fd:d0:8d:2f:
36:90:8d:7a:19:b2:95:3c:3b:fc:38:f5:d6:66:72:
84:20:0e:f6:f8:5d:f6:33:0e:40:29:02:2f:fc:e1:
b2:57:5c:77:d0:fa:98:e6:d8:61:bc:1b:6e:8d:81:
18:96:c7:ba:2a:58:67:dd:f3:0d:6e:77:0b:b4:8d:
a0:f6:09:26:79:42:00:1a:76:35:54:ba:6d:8c:36:
cc:0d:be:e2:07:71:27:12:42:11:85:2b:91:77:77:
66:02:92:33:d4:26:11:e7:26:0c:f2:42:e3:be:41:
4d:00:6b:af:72:65:c5:26:35:93:46:29:83:d8:49:
78:1e:28:39:a6:fb:b3:8a:fa:49:76:71:0d:4d:6a:
e8:20:0e:35:65:13:6f:91:b8:54:32:28:57:de:4d:
bc:54:bc:cb:1d:b1:6e:70:20:f8:be:62:65:ff:c5:
a0:18:77:61:2b:c8:67:9a:2e:89:1b:fa:b3:fa:7c:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:F4:0A:15:7D:34:F0:D1:4D:B0:4A:7D:A9:2C:B0:25:1A:06:00
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211066.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7722::/48
Signature Algorithm: sha256WithRSAEncryption
3c:fa:d4:30:13:ca:4a:9d:0a:90:a1:1e:dd:cd:6b:51:93:eb:
b8:74:6c:e1:ef:91:94:45:eb:c6:75:04:e2:82:d5:2c:98:bb:
5e:7a:08:09:f1:6c:76:fb:af:51:0e:d5:5a:52:01:d8:a1:cd:
97:2f:57:d7:0c:62:62:5e:75:0b:66:80:34:b4:46:e6:87:5d:
5a:dc:08:97:17:b1:96:d3:11:7d:88:88:49:54:07:45:3c:6c:
71:60:ff:7f:d1:1f:10:bb:ef:c3:49:a8:9d:86:92:51:45:31:
44:04:ce:00:10:d0:e0:de:cc:0f:c4:21:38:83:06:31:f5:d4:
68:5b:79:a9:db:47:50:df:e8:98:b0:49:5d:d5:a7:76:dd:36:
bb:87:28:1e:ac:fa:c3:31:d5:1e:8a:89:42:30:cc:38:3e:a1:
06:5c:8e:21:63:7c:37:65:fb:11:54:46:53:54:6c:7f:52:e9:
c5:db:c1:41:43:2c:23:ff:90:f4:c5:4b:85:e2:90:b8:5e:15:
d1:54:94:f0:9f:0f:20:5d:29:36:bd:03:47:bc:4b:39:28:dc:
31:39:22:dc:13:82:2a:04:40:45:8e:a5:47:b8:e9:c8:cc:26:
18:5f:2e:18:8b:54:4f:f5:17:6b:d4:1f:94:1b:e6:e1:7b:26:
9e:28:cf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:42:38 2025 by rpki-client