Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211729.roa
File: AS211729.roa (raw, json)
Hash identifier: +plLEGJ0QE7Q/bF3kvJ7HR5ExoRFj2MPshdeHQwPlMc=
Subject key identifier: 93:C3:48:82:42:7D:37:75:37:A8:9C:57:C1:AC:C4:8B:AD:4F:4B:AB
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4EAAAC4830AEDE9EE5AEAC2C25A67BEA9012FB9C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211729.roa
Signing time: Wed 13 Aug 2025 13:55:19 +0000
ROA not before: Wed 13 Aug 2025 13:50:19 +0000
ROA not after: Wed 12 Aug 2026 13:55:19 +0000
asID: 211729
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:aa:ac:48:30:ae:de:9e:e5:ae:ac:2c:25:a6:7b:ea:90:12:fb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 13 13:50:19 2025 GMT
Not After : Aug 12 13:55:19 2026 GMT
Subject: CN=93C34882427D377537A89C57C1ACC48BAD4F4BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:5b:34:b7:59:c9:2d:3c:48:07:55:63:d5:
a0:b5:b9:c3:dd:4c:a1:d2:09:54:f5:67:e4:67:1a:
8c:25:71:5e:1a:dd:76:1c:f1:fe:61:8f:9d:b6:db:
7b:61:bd:c9:7b:6c:1f:f7:3c:05:22:35:95:f1:6c:
5a:92:c2:5d:30:8f:a0:56:9c:ee:74:c2:a6:44:13:
32:c2:87:76:d3:3f:d5:fe:00:3d:d0:37:20:46:8b:
39:a5:31:3b:1f:20:0b:a8:4c:c5:5f:ed:12:d9:a0:
34:b6:ad:54:63:37:70:bc:b8:af:ee:c5:18:2f:ed:
45:9e:bc:8b:13:db:d8:66:f7:50:98:d7:4a:f2:89:
30:d8:39:b4:0f:0a:56:7e:ab:0b:0f:a1:f4:b3:4d:
39:d6:88:5c:a0:07:ca:f4:a2:f8:81:b1:de:82:a3:
c5:b9:42:25:07:53:a3:85:d3:35:2c:a0:ad:8f:e1:
f4:d7:53:13:4c:81:0f:a8:f9:08:7c:db:9a:b4:5c:
d2:36:45:e7:bb:36:90:8e:ce:c1:b0:1f:b3:dd:4a:
f0:05:cf:5a:8d:28:8b:d5:f0:74:35:ca:35:6f:9e:
0e:bb:ea:fa:1f:3c:a1:d5:bc:ab:66:56:f2:a0:bf:
6a:f7:99:54:e8:e5:33:43:0e:34:89:75:0c:09:28:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C3:48:82:42:7D:37:75:37:A8:9C:57:C1:AC:C4:8B:AD:4F:4B:AB
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
69:51:54:ae:50:dd:d4:c4:db:6d:bc:e6:9d:a4:9e:07:45:d2:
e8:49:17:a2:01:e4:82:e4:53:aa:80:68:71:97:85:a1:7c:3c:
39:2f:a6:00:14:b6:97:86:b8:52:5d:ce:10:06:4c:22:18:18:
37:4f:56:e1:d0:9b:db:d5:a1:71:d3:53:85:24:2e:f7:07:1b:
e1:00:81:b3:eb:f8:cf:3e:24:17:8c:90:43:50:9a:51:b0:49:
e5:94:07:78:7f:d7:e2:e4:99:fc:14:5c:90:ab:28:ce:cd:df:
c1:05:95:7a:b7:14:24:2c:06:1b:d7:00:da:8a:a1:0e:2e:ee:
1d:45:6e:aa:d8:72:a1:3d:08:b0:b7:99:03:2c:93:21:ef:3d:
ea:85:53:36:d9:a1:8e:72:39:a9:3c:82:3e:e0:6d:99:18:32:
09:21:87:37:75:ff:f5:61:9e:01:45:b7:73:5b:35:cf:1c:ab:
27:bb:c2:ec:d8:2e:18:35:51:da:1f:57:28:b9:82:ea:b0:72:
df:9a:1e:f5:48:a3:a8:4f:f5:d2:e9:c1:37:41:24:9f:4e:b5:
59:d1:5a:4a:9d:bc:d5:ec:c6:00:d9:2d:5f:56:10:96:a6:d2:
29:7b:ef:c6:ec:a3:04:90:aa:28:4e:28:14:2f:05:99:51:6e:
bb:64:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:11:58 2025 by rpki-client