Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
File: AS213312.roa (raw, json)
Hash identifier: ILe/Bw9V4GlzHxekClW8y559rG9T17lUwWEXRwOrMAc=
Subject key identifier: 75:0C:1C:C1:51:2C:66:12:17:77:84:4E:E5:EE:AD:19:18:D1:24:F8
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3C2A7AA7616A9678D9B0D12394201D374BA1F53D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
Signing time: Tue 17 Jun 2025 03:14:57 +0000
ROA not before: Tue 17 Jun 2025 03:09:57 +0000
ROA not after: Tue 16 Jun 2026 03:14:57 +0000
asID: 213312
IP address blocks: 2a0f:9400:7709::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:2a:7a:a7:61:6a:96:78:d9:b0:d1:23:94:20:1d:37:4b:a1:f5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:57 2025 GMT
Not After : Jun 16 03:14:57 2026 GMT
Subject: CN=750C1CC1512C66121777844EE5EEAD1918D124F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:39:73:60:76:ba:ba:9b:fa:62:dd:61:51:
bc:8f:eb:26:66:2b:a4:da:68:45:c2:5e:af:02:04:
ca:25:59:be:18:b5:5d:c2:0e:b2:a6:1c:81:d1:e1:
4c:d0:08:fe:91:a1:da:3a:d7:4f:66:30:2e:05:ee:
2a:14:2d:77:23:1e:27:68:e2:c7:e0:a4:e8:a2:16:
39:60:06:9a:21:05:c3:12:4c:fc:61:f5:60:4e:00:
de:39:fc:f9:42:7c:51:3b:b3:1c:72:28:f2:87:87:
56:90:65:b4:21:8b:5d:fc:f2:c0:cb:a3:1e:c7:05:
58:1f:89:d5:42:a6:47:79:29:67:0d:51:21:42:31:
6c:c5:50:29:78:5a:38:13:1c:15:d0:96:1e:cc:3c:
79:43:e8:a1:40:cb:56:7e:f1:db:eb:13:52:c0:05:
60:ac:3f:43:bb:8e:91:e4:f0:95:4e:b9:63:37:e7:
82:1d:81:40:a7:f3:5b:08:4e:51:ab:1a:85:33:63:
0f:95:c0:54:b8:10:83:0e:a2:22:ba:81:5e:87:76:
cc:f2:af:49:ea:bd:7b:82:18:0a:bd:df:79:0e:08:
02:94:37:14:da:59:63:ec:ab:60:fd:58:3d:3f:a2:
2a:f8:1b:95:3a:dc:2d:6a:75:b9:40:ac:43:8b:14:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0C:1C:C1:51:2C:66:12:17:77:84:4E:E5:EE:AD:19:18:D1:24:F8
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7709::/48
Signature Algorithm: sha256WithRSAEncryption
d1:b3:5f:de:ea:92:c7:51:24:75:78:60:81:38:87:f1:37:a6:
86:a0:a2:87:bd:a4:fd:43:1d:fb:f7:db:fe:81:43:b7:58:c9:
fa:8f:77:da:4d:4f:0a:f4:67:49:6c:c1:99:11:60:d9:aa:b0:
7b:97:08:d9:a0:bb:e7:f9:1e:29:55:7f:62:9a:b5:e5:6c:33:
69:ed:89:4f:d5:ef:6f:79:24:1b:f2:a0:06:46:64:39:91:09:
9d:54:e9:1a:d4:2e:91:44:f7:8f:44:2e:17:91:bd:f9:ba:6c:
f6:0f:8b:e0:38:4d:cf:78:fe:9b:d1:a9:6a:0a:7e:7e:93:61:
eb:56:c4:b1:27:52:48:ee:ee:f2:19:9b:5f:75:f0:b0:a7:a6:
ee:bb:8e:5b:b7:4b:96:fa:1d:e9:07:a0:5a:7d:5f:ae:b0:23:
03:60:57:9c:81:47:e9:5e:b2:9b:96:71:c3:7c:74:7a:ad:0f:
73:8c:d2:ee:7f:11:ef:07:46:f1:9f:85:aa:5a:cd:34:5e:04:
87:78:42:c7:30:4f:dc:37:57:9a:7a:81:45:60:62:68:23:37:
7f:a8:a9:bc:b0:f9:f1:60:33:b5:cf:80:0a:91:46:3b:27:70:
ca:6f:8f:8e:dc:21:26:0a:28:48:1e:66:f9:21:66:7d:0f:3b:
87:6d:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:11:22 2025 by rpki-client