Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213404.roa
File: AS213404.roa (raw, json)
Hash identifier: MJVIjHJ5C5BHzInRAzgA1fr14A99YvPorvs1cRyu5VQ=
Subject key identifier: 0E:6F:7A:2C:F9:31:F4:75:F4:06:2C:8D:F8:26:C0:8B:57:D5:B4:89
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7D940CBF20E46C33CE0806F6212C1142EC83A72C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213404.roa
Signing time: Thu 14 Aug 2025 12:58:24 +0000
ROA not before: Thu 14 Aug 2025 12:53:24 +0000
ROA not after: Thu 13 Aug 2026 12:58:24 +0000
asID: 213404
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:94:0c:bf:20:e4:6c:33:ce:08:06:f6:21:2c:11:42:ec:83:a7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 14 12:53:24 2025 GMT
Not After : Aug 13 12:58:24 2026 GMT
Subject: CN=0E6F7A2CF931F475F4062C8DF826C08B57D5B489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8e:c2:c1:e2:e3:4b:0c:55:3a:ac:c7:60:d5:
cc:7c:97:67:98:4a:db:13:89:52:3b:b5:ee:b9:bd:
2b:bd:7d:8e:8c:b6:23:2e:2e:00:ad:7f:c5:b8:ee:
38:37:31:7f:b0:22:38:5a:05:10:03:88:5d:f6:94:
82:22:ec:63:71:1c:c6:63:58:8a:1e:4f:50:62:80:
52:06:7f:89:f6:e3:51:99:b6:90:53:e3:a1:2e:bc:
9b:a1:88:80:d8:43:4f:b5:46:f5:34:45:28:4a:94:
bc:8b:fd:f2:c0:e4:1a:62:ae:26:d1:8a:79:f0:58:
7f:ea:04:ff:1b:25:b1:1b:fa:e0:fa:2d:e5:f4:e7:
4e:77:23:36:8e:0e:fd:7b:99:72:8e:67:81:ff:68:
2e:ed:bb:06:90:92:dd:95:75:dd:71:80:7c:7b:91:
49:b2:7b:c3:0e:d4:e4:c0:4c:76:7c:4e:1c:13:2a:
55:0d:16:d6:ff:6b:0d:37:e8:89:92:14:39:01:4c:
f3:16:91:4f:ed:77:41:8e:5a:93:1d:bc:18:82:77:
19:f5:fc:ee:97:4f:fc:18:44:89:c8:d2:d7:f7:48:
e6:17:fe:2a:79:b1:3f:db:2a:dc:98:a7:7f:77:64:
6a:e5:0c:f0:2a:45:70:87:7b:be:81:5c:5e:ba:83:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:7A:2C:F9:31:F4:75:F4:06:2C:8D:F8:26:C0:8B:57:D5:B4:89
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
09:8a:ea:6b:00:c7:17:be:d4:7c:c6:03:a0:98:92:2e:04:54:
27:44:77:9f:79:5a:91:f9:4d:ad:6b:72:f4:64:1a:8b:e2:4b:
77:40:7b:c9:b5:cf:c5:cf:44:95:87:d9:6d:ae:ff:80:3b:d2:
59:a0:1a:c9:2b:ac:a1:64:5f:b0:51:88:06:e2:19:6c:be:23:
81:3c:57:49:d3:29:28:1f:dc:27:be:66:c3:2a:65:60:cb:9d:
55:c3:63:4a:22:78:8f:68:5b:65:cb:89:eb:15:98:34:be:00:
89:e7:8c:65:26:5e:cb:49:1a:7e:84:21:13:b6:ac:db:b7:e6:
cc:cb:0e:a4:34:94:ee:96:ac:1c:d9:f5:b9:c9:7e:1f:7d:d4:
2c:4d:b3:e8:ea:83:d5:35:fc:d1:46:ea:8d:90:9b:9d:e6:f0:
b1:b9:e4:82:db:92:15:c5:58:25:54:78:03:d2:61:3c:85:fe:
e1:da:10:e6:18:63:1f:2f:44:9d:79:b4:7c:f6:00:86:33:bd:
4b:14:5f:3b:79:c6:48:8c:61:d2:8f:dc:d1:3d:72:b2:00:52:
2e:90:d2:ab:3b:fd:ec:d3:ab:15:5d:4d:56:14:b9:dd:de:3c:
85:ee:9b:d5:f8:9b:b7:23:96:02:45:2e:11:c8:19:c3:ce:d1:
97:b4:27:f8
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUfZQMvyDkbDPOCAb2ISwRQuyDpywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA4MTQxMjUzMjRaFw0yNjA4MTMxMjU4MjRaMDMxMTAvBgNV
BAMTKDBFNkY3QTJDRjkzMUY0NzVGNDA2MkM4REY4MjZDMDhCNTdENUI0ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwjsLB4uNLDFU6rMdg1cx8l2eY
StsTiVI7te65vSu9fY6MtiMuLgCtf8W47jg3MX+wIjhaBRADiF32lIIi7GNxHMZj
WIoeT1BigFIGf4n241GZtpBT46EuvJuhiIDYQ0+1RvU0RShKlLyL/fLA5BpiribR
innwWH/qBP8bJbEb+uD6LeX05053IzaODv17mXKOZ4H/aC7tuwaQkt2Vdd1xgHx7
kUmye8MO1OTATHZ8ThwTKlUNFtb/aw036ImSFDkBTPMWkU/td0GOWpMdvBiCdxn1
/O6XT/wYRInI0tf3SOYX/ip5sT/bKtyYp393ZGrlDPAqRXCHe76BXF66g1O1AgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUDm96LPkx9HX0BiyN+CbAi1fVtIkwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMzQwNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC
AQEACYrqawDHF77UfMYDoJiSLgRUJ0R3n3lakflNrWty9GQai+JLd0B7ybXPxc9E
lYfZba7/gDvSWaAaySusoWRfsFGIBuIZbL4jgTxXSdMpKB/cJ75mwyplYMudVcNj
SiJ4j2hbZcuJ6xWYNL4AieeMZSZey0kafoQhE7as27fmzMsOpDSU7pasHNn1ucl+
H33ULE2z6OqD1TX80UbqjZCbnebwsbnkgtuSFcVYJVR4A9JhPIX+4doQ5hhjHy9E
nXm0fPYAhjO9SxRfO3nGSIxh0o/c0T1ysgBSLpDSqzv97NOrFV1NVhS53d48he6b
1fibtyOWAkUuEcgZw87Rl7Qn+A==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:15 2025 by rpki-client