Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
File: AS214669.roa (raw, json)
Hash identifier: 4xR/XyzSptvmU3zWREzuhrHgiXc6p0B8CmJUVTaVChY=
Subject key identifier: 2D:A7:4B:6F:8D:34:8E:68:FC:9D:D3:DC:30:98:19:4F:E4:08:AD:E4
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 19D3CDDAC238B9FAF6838E529FFB59A42046AFAE
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
Signing time: Mon 11 Aug 2025 07:38:16 +0000
ROA not before: Mon 11 Aug 2025 07:33:16 +0000
ROA not after: Mon 10 Aug 2026 07:38:16 +0000
asID: 214669
IP address blocks: 2a0f:9400:6150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d3:cd:da:c2:38:b9:fa:f6:83:8e:52:9f:fb:59:a4:20:46:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 11 07:33:16 2025 GMT
Not After : Aug 10 07:38:16 2026 GMT
Subject: CN=2DA74B6F8D348E68FC9DD3DC3098194FE408ADE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:f2:a3:a7:c6:7b:56:75:d2:b1:33:b6:f7:
73:ea:a9:8c:24:8c:aa:fd:c0:dc:8f:06:50:1a:2d:
6b:9e:ae:47:0c:39:66:96:ac:d5:77:a4:e7:9b:ea:
82:ce:3c:0a:28:3c:51:d2:74:47:2a:a6:ce:c8:96:
36:fa:54:72:f4:1f:b4:3d:bd:5e:88:c5:7a:d6:43:
58:5e:e8:43:fc:ee:b0:a7:6a:84:f7:d3:e8:77:3e:
d4:af:1c:ca:7b:4d:63:86:a5:90:61:ec:ae:fc:56:
24:e7:e4:9d:d1:b6:c3:1a:7b:4e:1a:8a:0b:4f:60:
0d:e4:23:04:36:54:6d:e6:c7:a9:da:13:ec:34:b8:
e9:0b:70:24:39:a9:a5:87:61:04:59:88:0d:1f:1a:
a0:48:7e:c1:e3:4f:a3:5c:e6:de:ba:a0:46:df:e9:
14:da:f1:46:77:ef:a9:d8:4f:de:d6:88:63:4d:00:
4a:7f:17:e0:91:1a:1b:97:c8:d2:0b:d6:04:8a:8a:
f7:77:48:f3:a2:ab:12:f2:05:3e:0e:d7:58:c6:c1:
c5:58:95:0e:6c:4d:3f:0e:fc:86:d4:a6:1c:5a:90:
5b:91:0c:df:ae:5d:19:5c:5d:95:17:30:0e:76:96:
80:3b:75:99:55:22:04:6a:cc:27:02:6c:f9:92:f3:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:4B:6F:8D:34:8E:68:FC:9D:D3:DC:30:98:19:4F:E4:08:AD:E4
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6150::/44
Signature Algorithm: sha256WithRSAEncryption
1c:c4:12:6b:65:33:de:4a:6d:90:09:df:12:ba:49:8d:93:1b:
9f:80:86:a6:70:11:cc:8b:77:29:df:46:c8:43:1a:a8:6e:47:
23:fb:43:82:da:49:19:ef:65:2a:5e:9d:2d:a4:a1:f1:3e:2c:
7f:26:e6:71:e8:c5:8a:e1:58:7a:e2:98:bc:8c:d8:f9:07:b1:
2e:d8:89:be:cb:fe:f5:c0:dc:c6:f5:97:c4:83:4c:3c:58:af:
4e:e8:ff:3e:ea:65:62:6f:3f:b0:47:c1:ad:90:5f:36:65:2e:
ab:6f:17:b8:ae:88:88:1a:38:cc:7b:a1:76:34:13:8f:81:c4:
d3:6e:d1:2a:64:ce:bd:0e:c9:0c:3f:28:08:9a:eb:d7:0f:c4:
12:e7:16:a3:2c:7b:82:01:de:9c:e1:28:0c:52:68:50:94:8e:
e0:c8:2f:13:c1:d5:c0:9c:1c:9a:ca:a0:fc:6b:ba:87:6f:ce:
23:fb:b7:52:5a:a6:d0:ba:63:3e:b2:57:9a:96:d0:b8:2d:69:
85:52:6f:70:e4:dc:7e:02:e3:45:0b:03:12:cc:59:ac:8b:8b:
14:2f:92:bb:bd:e3:35:0a:71:8f:1e:86:e3:fb:1a:02:c4:9e:
70:7c:aa:95:ba:4f:24:e8:73:a0:73:ba:81:2c:94:16:25:4a:
5f:14:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:12:38 2025 by rpki-client