Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214344.roa
File: AS214344.roa (raw, json)
Hash identifier: x1oUuiCOtJnkm4t1QJdvL08ciRWVuje7FdIyJDWDWEs=
Subject key identifier: 31:89:67:CD:EC:5A:B6:65:94:1D:D7:BD:BB:E2:C7:2E:BD:5A:60:0D
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 552243EEFA98D53D946E31FE4F101FF063929D50
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214344.roa
Signing time: Tue 30 Sep 2025 00:07:17 +0000
ROA not before: Tue 30 Sep 2025 00:02:17 +0000
ROA not after: Tue 29 Sep 2026 00:07:17 +0000
asID: 214344
IP address blocks: 2a0f:9400:6144::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:22:43:ee:fa:98:d5:3d:94:6e:31:fe:4f:10:1f:f0:63:92:9d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 30 00:02:17 2025 GMT
Not After : Sep 29 00:07:17 2026 GMT
Subject: CN=318967CDEC5AB665941DD7BDBBE2C72EBD5A600D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:83:eb:22:e0:66:f1:81:7a:9f:7f:dd:e6:
39:3e:bb:86:5f:90:5d:7a:25:a3:40:f5:ad:20:6e:
33:7c:0c:48:47:63:64:06:5c:25:b5:38:d9:ec:d9:
e7:c3:d6:f7:52:c9:d3:9f:93:74:2b:53:04:5a:9e:
dc:92:7d:16:da:50:ae:0e:77:40:c3:8d:ba:a4:11:
ef:86:e1:c6:08:99:c2:6c:0f:63:8a:df:c5:04:26:
6c:27:3e:58:f7:43:5b:ed:98:8f:0c:f7:af:2b:75:
97:da:f0:df:92:75:dc:35:7f:f7:92:17:8e:c6:5f:
c6:ac:53:5e:11:7d:f8:1c:3c:29:bb:de:ba:37:c8:
13:d7:c3:56:4a:55:fd:d7:86:81:e1:7d:47:26:23:
b9:03:f1:1f:c5:1b:ac:ad:ea:92:d7:dc:f1:c1:8d:
01:83:57:fc:71:e3:60:6c:7d:4a:ec:0e:fd:16:87:
94:00:a7:96:5b:84:ec:3b:94:60:ab:38:31:64:d5:
84:ff:29:f6:8f:1a:13:d1:da:86:7d:4c:3f:c3:f8:
69:e0:c1:50:cd:f4:6a:64:ff:e8:a6:d8:c4:df:f9:
a5:0a:23:17:12:5b:28:79:0d:5f:fd:e9:c3:0a:f2:
5f:6f:4c:dd:02:84:95:4d:f1:0e:49:d2:71:38:24:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:67:CD:EC:5A:B6:65:94:1D:D7:BD:BB:E2:C7:2E:BD:5A:60:0D
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214344.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6144::/48
Signature Algorithm: sha256WithRSAEncryption
67:23:7c:2c:f6:41:a2:64:3a:b3:62:0a:94:18:2c:36:c6:7c:
27:b1:fc:70:45:a3:df:17:da:72:4c:e8:c3:eb:90:96:58:79:
ac:db:7d:3c:84:a9:a4:e3:aa:0b:ef:34:f0:cf:8f:1f:1a:25:
5e:56:67:2a:dd:83:8e:fa:a8:e2:3d:4b:c7:9f:21:10:35:35:
82:bb:49:45:e3:2b:7c:b9:36:07:2c:4d:2e:0b:1c:81:dd:e7:
e1:06:4e:e2:64:53:65:43:4c:81:24:d6:6b:3b:1b:a6:c4:4a:
c4:4e:07:4c:45:e3:78:82:ac:7b:77:e5:3c:2a:f3:19:ec:f7:
51:92:9a:88:25:87:56:e3:9a:3f:ea:02:f5:1f:82:ac:fe:78:
db:e0:45:61:a1:d0:e8:90:d5:39:24:0f:aa:0a:f3:56:06:59:
eb:8d:4f:d7:a1:9f:43:69:ea:0b:34:89:54:c3:7b:40:f0:ea:
e3:8c:0c:41:db:38:e5:41:14:25:bc:b8:04:d2:7f:91:84:47:
0a:0f:4b:a3:7a:04:55:02:fa:02:24:d0:0f:3e:1e:33:96:21:
63:43:68:76:d5:38:00:98:4c:bc:94:7f:d3:eb:ff:43:c1:e6:
12:d0:a6:2d:91:f9:06:f1:ca:55:78:b1:66:60:01:7b:a2:56:
8f:68:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:59:36 2025 by rpki-client