Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
File: AS213347.roa (raw, json)
Hash identifier: ITyTZaU7S7hNUHcgJCUj6w3udFrq0Iy53bp8adaVXiY=
Subject key identifier: 98:87:24:DA:9B:2A:8E:C1:80:C8:47:DA:F1:C6:EF:D5:99:BC:C6:BD
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7E643CC2761058C020058015F82DACAF4DC66A48
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
Signing time: Tue 17 Jun 2025 03:14:59 +0000
ROA not before: Tue 17 Jun 2025 03:09:59 +0000
ROA not after: Tue 16 Jun 2026 03:14:59 +0000
asID: 213347
IP address blocks: 2a0f:9400:8014::/48 maxlen: 48
2a0f:9400:8015::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:64:3c:c2:76:10:58:c0:20:05:80:15:f8:2d:ac:af:4d:c6:6a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:59 2025 GMT
Not After : Jun 16 03:14:59 2026 GMT
Subject: CN=988724DA9B2A8EC180C847DAF1C6EFD599BCC6BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:1c:b0:e5:8f:54:a2:9b:33:48:b9:06:30:
ef:73:fe:66:61:3e:33:4a:2b:02:c7:29:b3:70:3d:
e5:e9:2c:b0:3b:e2:61:6f:26:b6:03:39:b3:5c:74:
a2:77:e8:72:be:29:47:82:6d:6c:d6:ca:84:bb:3e:
13:2f:b1:fc:88:cf:72:b8:be:72:cd:8d:7c:f1:a8:
c0:b5:2e:75:7b:f8:3a:4c:74:e9:49:dd:b0:02:10:
21:93:10:75:4f:d1:53:53:08:f9:8c:d9:7f:f7:e4:
90:2c:91:95:33:35:67:8d:d4:b7:5f:4c:36:3f:0a:
91:c3:be:ba:29:d9:24:91:a6:ea:55:30:2c:7f:01:
46:7a:27:f4:47:dd:db:82:76:7e:ac:fc:e5:8a:9c:
44:fa:fd:62:69:f5:8a:10:28:15:dd:d2:7d:07:ef:
06:ee:7e:30:83:c6:f8:cb:98:49:d7:aa:f7:ef:7e:
cf:3a:29:52:11:3f:b7:3c:5b:ec:f2:6f:52:51:7f:
27:1f:67:1a:77:b7:1b:72:12:a8:05:79:8c:c1:85:
21:71:c1:bb:31:d3:73:27:0b:81:80:9a:02:fe:cb:
66:e0:b9:31:39:11:e7:0c:b3:1f:f4:9e:f6:e3:22:
a7:6d:1f:59:d8:66:57:d7:08:6f:bd:3b:29:39:5a:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:24:DA:9B:2A:8E:C1:80:C8:47:DA:F1:C6:EF:D5:99:BC:C6:BD
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8014::/47
Signature Algorithm: sha256WithRSAEncryption
9b:aa:bf:31:67:38:aa:7c:1a:f5:5f:e1:4d:3b:9b:99:76:29:
18:cc:7b:82:d0:16:46:d8:88:73:ca:2b:45:74:6a:32:df:bf:
a2:ac:bc:5b:af:8b:82:d4:8e:6a:92:a7:95:46:95:a7:d5:e3:
ad:ab:c7:b1:5d:b4:0e:e8:0c:0c:4a:e4:ca:8d:c2:15:a1:2a:
90:a4:dd:58:d3:63:97:a1:53:e7:06:6f:bf:32:14:50:91:90:
88:d3:34:89:f1:d0:73:ec:3c:9d:66:ae:85:bc:1a:44:1d:20:
a3:15:af:f5:7d:73:f8:cf:5d:74:9e:bf:46:0e:fd:98:91:71:
e3:f8:21:1e:0f:27:da:b7:91:c9:2f:a9:8f:7f:fd:cd:de:08:
76:12:05:83:fc:7f:d5:52:13:9e:9f:38:cf:35:49:be:57:dd:
09:93:39:13:9a:c4:17:c0:60:4d:4d:67:fc:c0:f7:a4:3e:b0:
00:c9:84:63:54:56:2b:48:a3:b8:e5:1e:30:b4:39:f7:83:80:
20:b2:e4:74:1d:e7:ad:61:26:6c:12:d7:46:fd:13:53:f1:52:
33:8a:3b:77:2f:67:56:b9:33:ba:dc:7d:3c:c7:99:7a:ad:7a:
85:1d:8a:24:e5:ea:8c:66:92:94:c3:67:16:68:37:3e:1a:23:
c3:f4:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:20:16 2025 by rpki-client