Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214199.roa
File: AS214199.roa (raw, json)
Hash identifier: wJfM9K6Y5ypiVcpWpl6+aWQ7LIwk+3QoXNm9e3w1Pxs=
Subject key identifier: DD:72:FC:C5:C3:D8:4A:2E:27:09:83:49:EB:C6:F3:41:5E:A3:86:4B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 216ABCEB22DAEBF9CF4B22786367698DEE173879
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214199.roa
Signing time: Sun 17 Aug 2025 00:40:41 +0000
ROA not before: Sun 17 Aug 2025 00:35:41 +0000
ROA not after: Sun 16 Aug 2026 00:40:41 +0000
asID: 214199
IP address blocks: 2a0f:9400:7e16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6a:bc:eb:22:da:eb:f9:cf:4b:22:78:63:67:69:8d:ee:17:38:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 17 00:35:41 2025 GMT
Not After : Aug 16 00:40:41 2026 GMT
Subject: CN=DD72FCC5C3D84A2E27098349EBC6F3415EA3864B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:a6:1d:96:7a:56:99:f4:4a:9e:db:e4:28:
30:12:99:31:d7:87:74:49:70:9d:e2:fe:45:07:e5:
c4:d4:6b:99:8b:39:80:2b:60:43:a2:63:f6:f6:ad:
9e:8d:2e:d9:3e:84:11:a0:2e:f7:ce:35:3e:69:eb:
58:e3:d6:c1:d3:d9:ac:ca:b0:e6:e0:58:1d:61:02:
d3:a5:f3:35:cf:02:ac:19:82:e3:b1:72:da:ed:0f:
25:00:38:99:06:91:d2:e3:dc:b4:01:8d:8a:a4:15:
ad:f6:96:e7:29:5f:60:89:c5:d7:47:20:d3:87:a8:
0a:39:10:8d:2b:23:16:72:db:08:93:01:76:0e:01:
57:29:1b:37:17:4f:40:da:82:1a:76:08:1f:c6:a1:
bd:02:54:7c:df:97:fb:90:d9:b3:d6:9b:c3:53:7a:
34:d4:0e:39:86:49:4d:63:e9:dd:9a:a3:d9:ad:65:
d8:70:e4:38:6b:b5:af:d6:35:35:b0:d6:8c:51:37:
ca:06:af:47:54:bf:a9:83:eb:a7:ce:65:5c:aa:e6:
37:0d:64:8c:4e:4f:d1:56:73:00:7e:8f:2a:8e:51:
73:dd:af:ae:c4:57:e9:5b:ae:12:ff:86:56:71:d9:
fd:b6:c8:fe:b7:64:74:13:fc:c9:30:9b:f9:b4:31:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:72:FC:C5:C3:D8:4A:2E:27:09:83:49:EB:C6:F3:41:5E:A3:86:4B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e16::/48
Signature Algorithm: sha256WithRSAEncryption
1f:dc:54:f7:da:2a:55:63:0b:29:02:34:c8:66:5e:b2:10:76:
b1:71:4e:cb:9b:21:ff:e3:9f:9a:73:0f:c4:08:12:7c:d7:8c:
05:d4:08:89:f2:fa:8c:a6:0f:56:7c:c7:31:18:de:fe:71:86:
c9:f3:74:96:fe:cb:2d:a6:8b:51:ca:91:48:80:36:c1:39:ba:
4b:61:46:9c:9b:0b:0c:99:89:4f:51:8e:b0:29:f7:52:30:3c:
eb:28:b4:4e:cb:82:09:94:c8:26:94:73:5b:bc:86:6f:76:b6:
bd:18:38:94:ff:c7:e2:bc:13:c9:88:e8:2c:c9:ef:e7:6c:d1:
00:1f:95:12:ee:4b:34:5e:53:ae:56:20:57:c8:f5:19:98:99:
81:23:6b:7f:41:61:dd:29:6f:db:12:c4:17:85:48:9b:2e:81:
d4:50:cb:b3:da:14:ce:78:2c:12:11:ec:d9:e9:94:fb:e0:00:
43:00:2b:d9:1d:26:23:64:49:7c:10:8e:0e:cb:7e:26:32:98:
37:67:a3:6f:14:9e:47:bd:88:ed:c9:69:f5:8b:f6:4e:97:d6:
41:9f:9f:e6:e1:88:5f:2f:b8:33:33:89:cf:ad:6a:47:94:d6:
e1:f2:92:cc:f3:e0:4f:27:19:5d:a8:9a:ed:14:50:8d:2b:d4:
a9:cd:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:02 2025 by rpki-client