Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211575.roa
File: AS211575.roa (raw, json)
Hash identifier: CDHdeGcL1jzklVA0iXrPnehpvNnLXWa8fPiesVY149M=
Subject key identifier: AE:2E:14:96:65:E0:45:B7:20:E8:1B:18:F3:72:73:08:42:2D:75:7D
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 40D564E9D3E0083AAC35837BDB3F82958E009FD4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211575.roa
Signing time: Thu 14 Aug 2025 07:07:43 +0000
ROA not before: Thu 14 Aug 2025 07:02:43 +0000
ROA not after: Thu 13 Aug 2026 07:07:43 +0000
asID: 211575
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d5:64:e9:d3:e0:08:3a:ac:35:83:7b:db:3f:82:95:8e:00:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 14 07:02:43 2025 GMT
Not After : Aug 13 07:07:43 2026 GMT
Subject: CN=AE2E149665E045B720E81B18F3727308422D757D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:6a:d2:a3:84:b5:9d:ff:91:46:98:69:e2:
fd:18:ff:da:94:b4:11:06:c1:0c:c1:bd:84:e6:d4:
50:27:1d:f8:2f:61:79:62:11:48:66:9f:a1:48:98:
58:32:f1:8c:ca:5e:d2:ac:6d:e7:78:ab:9f:f5:ff:
ff:35:d6:e8:3f:bc:7f:47:6e:23:fd:88:f5:cf:86:
a6:27:01:e4:fc:96:ad:c1:68:28:0b:b7:5a:20:7b:
d3:8d:2a:30:af:21:57:00:c9:c4:ae:78:ba:e1:37:
ec:ef:94:ba:5d:5e:00:4b:08:c4:5a:d1:26:82:90:
f6:70:ba:ed:bd:9d:0e:08:ee:40:55:58:82:cd:28:
ea:f5:d7:3a:2d:b9:93:45:44:40:15:d3:9d:28:4a:
3a:1c:94:05:73:b8:12:45:2a:e7:f6:88:a9:3f:82:
2f:f8:ad:db:31:d1:49:2a:57:78:f7:0e:b7:c2:79:
32:3d:9b:14:2d:17:15:af:7a:e7:8c:51:35:50:41:
99:11:0a:4e:77:28:7d:93:62:3a:8f:ad:22:eb:f1:
73:b1:97:e7:67:1b:a3:1e:2c:41:6c:d2:80:17:86:
5f:c7:55:84:bd:32:07:70:ab:3a:ad:1c:9d:b0:a6:
6d:be:30:a7:d4:34:b2:a3:00:22:34:d9:dd:85:10:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2E:14:96:65:E0:45:B7:20:E8:1B:18:F3:72:73:08:42:2D:75:7D
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
96:99:e7:ea:90:9e:e4:70:36:ea:4e:fc:b7:58:77:d9:37:bc:
e0:ca:24:5f:13:36:da:9e:8a:53:3b:d0:4c:da:fb:8e:f3:35:
45:32:19:a6:0a:d4:07:87:45:01:83:d4:87:f6:8b:1a:64:0e:
0d:f7:1d:39:c8:26:78:77:d9:ff:00:cc:af:c9:37:18:95:fc:
2c:49:c1:ae:0e:15:d8:ab:d6:d0:83:f9:f3:cc:c8:46:12:04:
36:82:38:17:77:c6:39:8f:48:91:59:21:0b:08:a4:2e:66:0d:
52:cd:57:37:63:53:19:91:a8:a6:10:8c:e6:f8:cf:c6:ed:fd:
4e:15:a9:49:f9:59:cc:ca:9f:f1:77:47:72:7c:6e:c4:78:cf:
b5:87:74:df:20:f3:5d:fd:aa:8c:82:36:0f:fc:70:0d:5f:63:
d6:c4:cb:74:cf:0a:29:76:24:45:ea:67:ae:1a:42:1e:d7:23:
ac:66:83:ed:5b:55:8d:3f:9d:c4:13:00:a8:a3:36:9f:b1:14:
f8:67:b4:67:92:62:f1:42:e0:26:19:af:64:9f:75:1c:b2:51:
7e:8e:0b:a3:76:d5:4a:74:25:9d:f2:60:42:65:1d:be:40:65:
de:03:89:78:65:44:2a:d7:73:36:ed:95:b9:28:b5:43:e2:aa:
ae:60:30:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:43:47 2025 by rpki-client