Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213001.roa
File: AS213001.roa (raw, json)
Hash identifier: X4ZkvqVX6DFmZZYYtTLv7x+j3BdYvXIOyfXzyTCXr6Y=
Subject key identifier: AC:0E:8C:FD:95:56:3B:8A:2D:BD:48:F5:E4:05:8D:CE:B8:FD:95:61
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2423879C925CF29C7E1B28287DBF54B70E97D15D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213001.roa
Signing time: Tue 17 Jun 2025 03:14:56 +0000
ROA not before: Tue 17 Jun 2025 03:09:56 +0000
ROA not after: Tue 16 Jun 2026 03:14:56 +0000
asID: 213001
IP address blocks: 2a0f:9400:801e::/48 maxlen: 48
2a0f:9400:801f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:23:87:9c:92:5c:f2:9c:7e:1b:28:28:7d:bf:54:b7:0e:97:d1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:56 2025 GMT
Not After : Jun 16 03:14:56 2026 GMT
Subject: CN=AC0E8CFD95563B8A2DBD48F5E4058DCEB8FD9561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:f2:8a:89:43:ff:97:9a:df:bb:70:5b:63:
2c:cd:7b:05:64:6e:2a:9f:85:1b:41:fd:39:48:6e:
1a:2d:94:7f:c4:88:0f:7b:78:3a:92:bf:10:3d:14:
a1:b1:d4:f0:29:e9:f2:eb:04:f2:b9:c5:2f:db:8d:
b2:4e:81:22:9d:de:b6:44:33:c5:d9:97:1b:71:a4:
96:74:20:2f:2f:83:2a:9e:d5:ba:ba:1c:13:3a:21:
12:ae:c4:87:5d:06:f1:16:d7:55:9c:95:fa:11:ce:
68:09:9c:50:e0:1b:53:bc:33:6e:50:22:98:c2:7b:
00:30:aa:c0:d9:12:72:54:f8:6b:95:4f:4b:09:07:
61:6b:3d:86:82:05:80:83:51:c1:f6:b7:bd:d3:49:
f7:8c:76:bd:b2:cb:18:72:42:63:88:e0:80:9d:5c:
18:82:c2:d9:7d:5e:ed:9f:dc:f2:0c:bb:1f:f4:c8:
4f:68:57:15:60:4d:2f:57:4b:b1:63:57:f1:2f:29:
f3:44:bd:fe:a7:fa:8c:1f:0d:3b:a6:33:00:40:75:
ab:f0:37:e9:62:d8:88:2a:cd:1e:49:95:17:f7:68:
4e:07:0d:e3:24:f8:d1:70:b5:f9:ff:35:a4:d4:56:
08:79:0d:90:3d:dd:da:0b:a9:18:f7:bb:66:3b:13:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0E:8C:FD:95:56:3B:8A:2D:BD:48:F5:E4:05:8D:CE:B8:FD:95:61
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:801e::/47
Signature Algorithm: sha256WithRSAEncryption
b1:ca:cb:e5:d0:5b:ec:f1:cc:e8:a2:98:7e:ae:45:7b:5e:5e:
39:68:e8:7b:04:43:0b:6b:31:11:33:d0:9d:47:1f:62:5f:c5:
92:b8:af:27:48:13:74:39:52:38:48:7c:82:05:28:32:d0:65:
41:a7:92:1a:d9:70:89:28:14:d0:da:07:60:0e:86:54:9d:c8:
c8:a2:1f:f7:30:a3:40:79:66:fe:b5:6f:c3:b0:c1:27:1e:5b:
dc:31:a2:1e:dc:57:b7:e9:2d:9f:8e:40:fb:07:9e:d9:bf:9d:
0f:0b:8c:4e:28:4b:5d:d4:1c:59:47:b4:6d:93:40:51:a5:f6:
c2:fc:7b:f1:43:75:de:b6:e5:e1:f0:93:d9:0f:c3:c5:1f:f8:
9e:a1:4b:96:5c:24:1a:ed:78:37:f7:1b:93:0b:56:48:6c:50:
0e:5b:24:16:7c:50:cb:46:1e:02:89:80:62:2f:c5:27:bb:11:
99:74:59:1a:d3:01:10:15:6f:27:c4:c3:9e:63:73:41:4d:2b:
cd:59:24:01:53:89:b6:b1:df:f2:ab:ea:cf:2a:8a:48:4b:83:
a0:b1:ec:20:4e:79:e2:8a:14:45:f3:61:c8:27:98:d6:5f:b5:
54:e1:c3:5e:4e:bb:eb:86:f3:b5:ab:26:2d:a6:73:68:64:b5:
2e:02:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:46:23 2025 by rpki-client