Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214534.roa
File: AS214534.roa (raw, json)
Hash identifier: PtaiasD1F/eGvdROUaG/vaKaopmMKA6inn/yP+A8HFw=
Subject key identifier: E3:2E:A1:B1:AD:0B:70:33:06:6D:19:DE:FA:CE:02:75:A1:75:1E:D5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4CF50715890007FE736C0EBFBBA9A78054374BE6
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214534.roa
Signing time: Thu 14 Aug 2025 12:00:32 +0000
ROA not before: Thu 14 Aug 2025 11:55:32 +0000
ROA not after: Thu 13 Aug 2026 12:00:32 +0000
asID: 214534
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f5:07:15:89:00:07:fe:73:6c:0e:bf:bb:a9:a7:80:54:37:4b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 14 11:55:32 2025 GMT
Not After : Aug 13 12:00:32 2026 GMT
Subject: CN=E32EA1B1AD0B7033066D19DEFACE0275A1751ED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:b1:ab:f7:e9:ca:72:14:d3:5e:3a:ab:ab:
74:13:74:86:5c:83:d9:66:84:1c:2e:a0:48:9d:d5:
28:29:bc:a0:bf:13:40:43:b7:95:8d:41:f0:f6:06:
4a:ee:b3:63:97:66:da:ef:27:77:a2:72:04:c2:12:
52:09:80:82:07:dc:f4:2f:2c:47:05:ac:9e:57:2d:
a3:06:1c:85:07:8a:cd:7c:07:93:55:e1:37:3c:f4:
ae:fc:e1:7b:84:48:c1:07:d9:13:23:65:a7:71:88:
7c:98:55:ac:e7:33:90:4c:14:ed:03:8a:75:22:ee:
0f:09:aa:90:9d:b0:98:d5:14:50:50:5b:43:94:c9:
80:ed:68:85:e2:99:8b:65:5a:68:41:f5:d8:70:40:
6b:65:16:5c:46:52:18:96:a4:b1:47:76:20:78:63:
06:75:b7:84:1b:ae:b8:9d:93:e4:64:e5:05:8c:3e:
0e:c0:e5:c3:64:51:42:3a:1b:56:02:bf:8f:98:07:
fa:c1:30:22:95:76:53:62:c0:53:69:71:be:16:05:
16:11:d9:98:e7:54:32:27:e9:db:35:9f:29:ab:c0:
dd:e3:77:ee:a9:08:1e:0a:67:d0:bc:23:0c:e5:31:
03:00:2c:19:f8:e2:9e:89:8a:5c:fd:0d:77:7a:f7:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2E:A1:B1:AD:0B:70:33:06:6D:19:DE:FA:CE:02:75:A1:75:1E:D5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
89:c7:98:1e:88:15:f2:ca:56:cc:8f:ac:95:80:8e:a3:4d:82:
84:be:ab:dd:20:06:e3:20:aa:80:3a:39:3b:c8:44:51:51:40:
9c:7d:db:b8:d6:f3:65:54:88:42:a3:d1:30:f9:81:02:b3:97:
25:54:5f:0d:65:dd:b0:54:cf:f8:22:10:ab:0c:56:53:93:b9:
59:dd:9b:14:f8:ca:c8:36:96:f9:97:26:fd:3a:98:30:55:2a:
6f:df:2a:08:59:57:ef:1c:4e:8d:70:93:c7:8b:a9:ea:1a:34:
34:0b:40:a0:f9:b4:7c:46:e2:21:6d:a3:0c:02:27:c5:f1:3e:
ef:a2:9e:cc:95:5f:78:ba:e6:cb:43:38:61:8e:97:55:a4:51:
d4:75:43:51:e7:a6:2e:c4:a8:15:18:64:8a:13:ce:a0:1a:04:
0b:8d:a7:8d:cb:19:ba:4d:97:cd:c7:c7:bb:e3:d1:a7:78:78:
48:e1:82:7d:dd:35:5f:e0:ca:0b:1d:91:8d:8e:0d:7a:96:2b:
de:4d:50:41:ac:70:55:73:c3:c7:3d:71:bc:91:7c:08:42:5c:
f7:e9:dd:90:10:e3:e4:18:f3:85:30:c3:aa:49:ef:1f:f8:ba:
fc:3a:e9:10:a6:f9:c7:7d:f5:4a:29:7a:32:6e:8c:12:6f:52:
9e:83:c6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:12:17 2025 by rpki-client