Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214209.roa
File: AS214209.roa (raw, json)
Hash identifier: lYdDW15vH7t2ILtRO/zWVUbL2BRDGsfLm4lwfNFH304=
Subject key identifier: 87:1A:B1:80:4D:A5:A8:64:C2:9C:08:43:A6:1C:2C:7B:F0:6B:72:4C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 409FDC87F988714AC93B0832CBF37FC1596221B2
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214209.roa
Signing time: Mon 13 Oct 2025 12:12:29 +0000
ROA not before: Mon 13 Oct 2025 12:07:29 +0000
ROA not after: Mon 12 Oct 2026 12:12:29 +0000
asID: 214209
IP address blocks: 2a0f:9400:7e11::/48 maxlen: 48
2a0f:9400:7e15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9f:dc:87:f9:88:71:4a:c9:3b:08:32:cb:f3:7f:c1:59:62:21:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 13 12:07:29 2025 GMT
Not After : Oct 12 12:12:29 2026 GMT
Subject: CN=871AB1804DA5A864C29C0843A61C2C7BF06B724C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:dc:6e:d2:d1:7b:72:c2:49:e1:28:26:61:
41:17:7b:ff:99:8b:8a:28:fa:83:e7:e6:71:0a:85:
65:f3:38:44:75:25:90:d5:d2:da:98:cf:0f:cb:61:
ee:7a:8d:e9:32:f0:7f:54:56:ce:f6:d8:18:a3:d6:
a6:ed:74:b2:80:35:96:f4:64:a0:20:93:7d:40:a6:
dd:e2:f7:e2:74:1c:2b:64:f8:7e:fd:21:4b:4f:a7:
2a:f0:0f:61:7f:f6:7b:a5:c0:06:8d:ee:b4:c2:78:
d4:d9:37:6f:ba:0f:07:2f:0c:75:cc:50:1a:58:4c:
d7:94:69:d3:9b:ec:72:28:03:9a:eb:62:50:7f:d2:
26:c3:75:4d:82:3f:b3:2b:20:82:b0:74:5a:c6:1d:
78:c4:1a:04:77:3f:d4:4d:54:34:fd:cc:7e:6a:f3:
a8:25:e9:58:3b:54:96:94:21:8c:25:70:b8:c3:80:
44:5c:5d:bc:d1:81:ac:39:18:b6:eb:25:aa:8d:d4:
66:30:ad:84:13:d0:50:fd:04:0e:09:fc:68:93:a5:
13:2a:f6:8b:64:b1:72:5d:1f:36:e7:5a:ff:c6:dd:
fe:7f:5d:b6:0b:72:9b:85:7f:cc:fc:2c:55:07:27:
48:29:b9:5b:4b:5c:f7:58:d7:4c:ef:4e:28:25:e4:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1A:B1:80:4D:A5:A8:64:C2:9C:08:43:A6:1C:2C:7B:F0:6B:72:4C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214209.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e11::/48
2a0f:9400:7e15::/48
Signature Algorithm: sha256WithRSAEncryption
cd:2b:48:9d:9f:25:3f:b9:9a:90:81:98:69:f6:29:c1:97:29:
3e:33:17:67:77:6f:a8:24:b7:4d:c6:b5:c7:08:1c:2c:f8:64:
cc:65:6e:81:88:ab:3a:36:31:dd:ce:b0:c6:54:47:d2:78:3a:
4b:d7:c4:47:7a:5b:20:85:bd:c6:8d:44:0f:44:61:9b:be:5c:
14:0d:7d:71:40:8b:fc:a3:0e:f6:98:cc:77:e2:97:df:a6:8c:
60:2e:c9:84:64:6f:ec:eb:29:1b:75:b0:ae:d1:d1:c2:13:e1:
cb:20:32:be:c1:69:f8:63:b3:16:8f:30:58:eb:b5:9d:2e:38:
6f:0c:68:2a:5d:b7:5b:da:41:3d:bf:7c:f8:a4:4d:ee:b3:14:
90:28:a9:b9:68:30:dc:2c:b3:e5:ab:53:93:0f:b3:41:0f:17:
ac:22:7f:0c:bb:97:6a:8b:8c:81:62:55:e0:ab:fe:b4:09:5c:
27:9a:bc:8a:2e:4d:df:3d:cd:12:06:b6:be:6f:70:e5:38:ba:
12:1e:fd:b3:15:fe:71:1d:71:ea:d2:78:c4:ce:e4:e4:84:9d:
b0:59:eb:c1:af:88:4c:6c:72:08:f7:06:15:88:7d:d2:b0:45:
22:a2:a5:bc:ec:b0:cc:98:54:c2:73:92:65:01:4f:ad:6e:d9:
c6:ae:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:47 2025 by rpki-client