Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
File: AS212793.roa (raw, json)
Hash identifier: ezz2FQ6umoLfXQUlZWefsBCUpiNOS01GQKNWkQyFZFU=
Subject key identifier: 5A:F3:51:A1:C9:E8:1B:46:FC:0C:B4:DE:59:0F:39:DC:17:92:2E:23
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7EF60100258ECEDE38931FC6FE53F925BC93E4CC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
Signing time: Tue 17 Jun 2025 03:14:55 +0000
ROA not before: Tue 17 Jun 2025 03:09:55 +0000
ROA not after: Tue 16 Jun 2026 03:14:55 +0000
asID: 212793
IP address blocks: 2a0f:9400:800b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f6:01:00:25:8e:ce:de:38:93:1f:c6:fe:53:f9:25:bc:93:e4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:55 2025 GMT
Not After : Jun 16 03:14:55 2026 GMT
Subject: CN=5AF351A1C9E81B46FC0CB4DE590F39DC17922E23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:3e:a4:ad:15:a7:54:6f:fd:84:0b:dc:09:
8a:f5:76:e7:12:67:14:f2:0e:41:88:79:14:76:b8:
ef:ee:fe:c2:8d:99:89:11:5d:13:f5:fd:a1:5a:d0:
fd:f6:56:d3:ae:bc:7e:eb:32:e8:fe:f5:93:1d:4d:
57:47:ba:14:7e:90:b0:0f:e7:34:17:b6:54:eb:a2:
f5:ea:06:f6:30:f8:d9:42:b5:8d:14:01:3f:f8:ed:
48:12:7a:0e:61:c6:78:55:01:66:83:d2:b0:16:fe:
79:80:0e:b2:57:c2:ca:e9:0e:72:ea:83:05:ab:2f:
35:c8:75:7b:f0:ec:3b:48:6c:b4:37:8b:d5:a8:1f:
3b:fd:58:1d:18:05:12:67:bf:1e:b0:87:76:9a:b3:
82:d1:8c:82:61:aa:f8:b4:f3:10:9b:f3:fc:32:b8:
77:e3:79:fd:d4:39:df:cb:78:cd:6e:09:a8:c4:f9:
3e:aa:c9:96:75:64:74:c9:54:f5:47:86:53:c2:bf:
1a:be:b6:40:b9:cf:5b:c5:60:70:32:d6:76:c7:45:
70:c1:75:1b:85:ee:9e:cf:4a:19:88:12:27:d3:07:
66:83:c7:ca:65:87:bc:7a:98:32:f8:2f:94:29:3a:
75:18:53:e5:fd:53:57:47:6c:69:b1:1d:5e:32:e7:
39:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F3:51:A1:C9:E8:1B:46:FC:0C:B4:DE:59:0F:39:DC:17:92:2E:23
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:800b::/48
Signature Algorithm: sha256WithRSAEncryption
39:14:84:3d:7a:a2:8a:bc:97:5b:11:23:63:e8:07:f9:eb:2a:
f8:df:76:d1:6a:6a:d4:09:ad:ef:51:a0:7c:e4:ac:61:d4:e3:
c5:0b:4e:a3:bc:d9:7b:aa:d2:d6:5e:82:46:3b:d8:ce:11:31:
42:a6:91:e3:6d:2e:ed:d8:76:8d:7f:71:e7:df:89:4a:dd:e9:
13:29:1c:05:42:39:94:58:a0:88:50:fb:31:17:e9:a0:b9:82:
17:cb:f3:b3:2d:12:2f:0b:58:bf:a7:8c:ba:9e:9d:97:ec:f2:
7f:47:fe:e0:f0:ec:f7:8b:79:c5:a7:db:fe:d9:63:df:72:e7:
32:24:9f:c1:86:f1:c2:37:5b:78:22:2c:25:af:09:66:ab:00:
dc:1a:f7:f1:5c:71:fe:65:0b:71:ed:c5:d2:1c:76:80:49:ab:
30:4c:5e:6d:73:d4:dd:75:5b:7a:75:ad:dd:d5:5c:ef:40:64:
e4:9f:2a:fa:ee:08:d8:e5:3c:81:52:9e:bd:f7:83:3b:a4:62:
07:10:1b:2d:64:af:f4:31:9a:0f:c5:d4:ed:a1:a3:34:f1:8f:
77:50:13:6f:b3:85:37:bb:1b:fb:c0:ca:bf:63:cc:a1:d4:08:
bb:85:c6:f9:34:e6:2d:c9:e7:77:5e:3c:a2:54:a0:f7:f2:73:
4c:27:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:39:55 2025 by rpki-client