Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216056.roa
File: AS216056.roa (raw, json)
Hash identifier: 0xssehOILks7DHFw2Ons44PuHi0JqVYErejFsHJA9zA=
Subject key identifier: 10:D1:3D:EA:5C:9A:7D:D2:96:95:40:63:16:F0:EE:27:4E:E6:FB:B0
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 240DAD7DB5691C882CFC2AFAF44F801C8D01686A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216056.roa
Signing time: Sun 07 Sep 2025 05:08:53 +0000
ROA not before: Sun 07 Sep 2025 05:03:53 +0000
ROA not after: Sun 06 Sep 2026 05:08:53 +0000
asID: 216056
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0d:ad:7d:b5:69:1c:88:2c:fc:2a:fa:f4:4f:80:1c:8d:01:68:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 7 05:03:53 2025 GMT
Not After : Sep 6 05:08:53 2026 GMT
Subject: CN=10D13DEA5C9A7DD29695406316F0EE274EE6FBB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:bd:1f:4d:7b:f6:88:6d:8e:2a:45:bb:02:
e8:f4:c6:40:cc:b2:c5:96:11:e3:63:0a:0f:55:55:
1a:6b:bf:45:2f:ab:0f:1e:04:bc:c8:15:aa:90:39:
a4:25:e4:21:1a:70:d8:44:87:ad:08:1b:26:32:48:
2d:66:9b:11:30:19:c8:0e:db:8a:56:09:12:47:bf:
d4:cf:d5:8a:a8:cb:97:b5:7a:f4:f7:96:33:8b:0c:
3b:cb:d6:1e:45:33:61:b8:84:ff:73:60:cf:ea:c2:
01:fe:83:b9:d2:4a:7f:e3:81:cf:1b:bd:c8:12:da:
47:cb:40:15:e1:6a:e0:d9:aa:14:ff:e5:fa:21:7a:
6b:79:0f:e8:4e:ac:5f:c9:5b:9f:a4:20:ed:b2:8c:
a7:ee:7f:4d:ad:ab:ce:32:38:08:89:34:62:1e:8a:
15:06:6d:7e:ff:8b:87:7a:a0:c0:81:79:4e:08:fb:
68:90:7d:5e:55:1b:6b:9c:3e:5b:86:20:43:a6:29:
83:76:36:ca:e3:42:1d:68:4b:db:eb:0e:5e:76:e9:
59:cf:c1:22:03:cc:31:58:32:0e:2e:49:88:f3:f7:
f8:d7:0f:4e:f7:77:9e:46:aa:5e:1d:03:f7:65:56:
6b:0a:47:cf:12:38:99:e4:19:6b:d2:3f:b7:02:41:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D1:3D:EA:5C:9A:7D:D2:96:95:40:63:16:F0:EE:27:4E:E6:FB:B0
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216056.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
bd:65:c3:08:c8:70:ca:00:12:78:8c:71:b7:32:ca:8a:24:72:
f0:35:49:c8:0f:56:ad:66:20:f1:f3:09:0d:82:03:99:6b:15:
39:3a:7b:3a:fb:52:33:2b:e2:34:af:bf:3b:63:3a:94:18:de:
96:ee:f3:f7:22:57:4b:9b:00:3f:97:e4:20:7f:9b:ff:17:c0:
0b:50:7e:0e:90:ae:35:02:a0:4d:69:e0:ba:c0:64:21:36:1b:
6b:34:18:8e:66:12:e0:ed:a8:f3:d9:d4:a3:27:80:a5:e0:0a:
30:01:bd:f3:c2:48:8d:91:22:7c:87:ae:fa:da:79:ba:27:64:
66:0f:c8:f2:9d:66:a8:28:26:17:de:66:f2:d0:15:4e:50:fc:
65:b5:00:20:06:94:7b:c7:b8:f9:4c:bc:5e:34:5f:3a:bd:24:
6b:22:e0:01:f2:99:3d:a6:ca:77:4b:1a:a7:d1:06:05:57:35:
6e:2f:62:d5:43:b7:6b:5b:3d:74:d2:b6:5f:c9:4d:08:f6:e6:
65:41:36:f8:a5:55:be:1d:04:85:bc:88:d8:05:19:d5:d8:51:
d2:53:6d:20:52:20:fa:96:43:3c:b4:a9:1a:6d:07:2a:9b:f6:
df:22:78:7a:0f:e7:a5:19:62:5c:2a:e4:be:13:f0:8e:b1:98:
85:a1:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:11 2025 by rpki-client