Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214189.roa
File: AS214189.roa (raw, json)
Hash identifier: R2431MexOXw/mca1QwbJxpl+boUN2Y+R1hZJewn8F+A=
Subject key identifier: B2:60:41:95:A1:28:3A:F4:42:6E:C0:1E:22:8D:79:DC:7E:BE:9D:0A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2897001649BCA26A64F1D274D01D784C66D0C934
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214189.roa
Signing time: Wed 20 Aug 2025 08:42:05 +0000
ROA not before: Wed 20 Aug 2025 08:37:05 +0000
ROA not after: Wed 19 Aug 2026 08:42:05 +0000
asID: 214189
IP address blocks: 2a0f:9400:750d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:97:00:16:49:bc:a2:6a:64:f1:d2:74:d0:1d:78:4c:66:d0:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 20 08:37:05 2025 GMT
Not After : Aug 19 08:42:05 2026 GMT
Subject: CN=B2604195A1283AF4426EC01E228D79DC7EBE9D0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:45:5a:79:7e:f8:c9:6a:f3:f8:f3:cf:b0:
84:65:a2:1d:dc:31:aa:e4:0b:82:3b:6b:8b:1f:4c:
da:4b:1a:22:c3:ce:6f:61:b8:79:02:a3:ab:b5:03:
75:b0:26:4b:94:4a:4c:f7:28:2a:b1:ed:17:51:46:
55:82:4e:cd:bb:ae:90:2a:54:0d:7d:80:6c:78:9f:
61:b5:a8:8c:9a:1b:c0:ea:18:cc:b6:3f:de:59:29:
11:e5:78:36:b2:45:50:94:ac:54:18:6b:73:72:92:
25:59:a1:8e:39:e4:ef:74:0b:18:1f:94:63:8c:44:
1f:c0:37:71:bc:ad:c0:92:41:00:c1:9b:c5:a4:aa:
d2:5e:5d:e6:aa:69:6d:19:5e:7d:6e:ab:47:da:03:
3a:85:fd:a6:fb:44:6b:70:2c:94:28:7a:60:a3:40:
bf:75:bb:7f:8b:be:7d:77:35:b7:96:de:e6:e9:11:
9a:b3:a7:ac:35:18:6a:69:3e:0d:3f:c6:cf:ef:6f:
e4:e2:fe:da:67:a4:d5:19:e9:69:1d:76:00:d9:fb:
7c:7c:9f:bc:bc:4f:4a:e3:ea:76:6d:0b:54:c8:00:
1b:87:f3:96:e8:6b:67:5d:87:ba:94:20:70:07:d0:
09:56:d7:84:fc:ce:70:f9:ac:29:44:39:2e:0a:c9:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:60:41:95:A1:28:3A:F4:42:6E:C0:1E:22:8D:79:DC:7E:BE:9D:0A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214189.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:750d::/48
Signature Algorithm: sha256WithRSAEncryption
64:00:66:ba:9e:63:c3:96:55:ee:d8:c7:3e:fe:a1:09:13:0f:
70:0d:39:f4:ea:6b:a8:e9:7d:39:61:d0:02:77:4a:92:91:08:
5d:8f:fe:86:42:7e:5a:34:97:b4:c5:e3:30:4f:eb:57:da:c0:
d5:41:ed:ac:33:c6:fd:70:e8:e9:0e:ae:7e:97:d8:51:1a:a6:
cb:6f:4c:1e:21:63:3d:23:2e:c4:9d:d8:c3:d2:8b:d4:2e:75:
07:c9:c5:3d:db:31:93:db:80:4e:70:8f:9a:e7:aa:b3:cf:b5:
60:8f:36:23:65:c6:77:be:5e:19:d8:1f:20:cf:28:7c:66:e4:
13:cb:07:d0:6c:77:8e:07:e9:99:3d:77:8a:97:3f:77:e9:cd:
b4:e2:70:e5:6c:ca:18:fb:2e:56:41:c9:cc:e2:9d:b3:63:b7:
e4:8f:e2:02:05:e2:77:f5:79:c1:2a:da:7d:ae:f4:48:38:09:
6d:48:77:9b:9a:2a:ce:0f:e6:97:d0:1e:04:74:d2:0e:1f:0c:
bf:40:0c:b9:f5:1e:db:76:ef:40:6f:c7:3c:63:eb:82:0d:7c:
ac:e9:1d:bf:b1:00:3a:a3:91:74:b6:54:d6:e8:fb:05:9d:01:
42:4f:3d:ef:cf:6f:c4:36:4a:83:e9:0c:cb:d4:4e:5f:f8:52:
11:00:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:47:00 2025 by rpki-client