Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216216.roa
File: AS216216.roa (raw, json)
Hash identifier: dJoyqghMg3ZxKodzYIVnFvtOkLxWo7vCRyImfvHsOe4=
Subject key identifier: A0:22:FA:7E:DF:1C:88:B3:E7:4E:ED:A2:98:40:95:BE:86:60:3D:A9
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0520EF86DF09F495F983308C82A120F9016B62D4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216216.roa
Signing time: Wed 06 Aug 2025 07:36:14 +0000
ROA not before: Wed 06 Aug 2025 07:31:14 +0000
ROA not after: Wed 05 Aug 2026 07:36:14 +0000
asID: 216216
IP address blocks: 2a0f:9400:610b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:20:ef:86:df:09:f4:95:f9:83:30:8c:82:a1:20:f9:01:6b:62:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 6 07:31:14 2025 GMT
Not After : Aug 5 07:36:14 2026 GMT
Subject: CN=A022FA7EDF1C88B3E74EEDA2984095BE86603DA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:67:4a:2f:9d:23:af:b3:4e:b7:fc:31:a4:
4d:ed:71:b3:4f:b7:e0:4d:28:f0:04:ac:f2:a0:41:
7c:26:ce:d7:a0:83:88:65:b7:8b:49:e4:aa:86:ec:
12:cb:e8:6b:4a:4e:e7:62:b5:b7:3e:39:92:f0:5f:
e2:f9:f8:3c:e6:8b:91:f1:62:9d:62:7a:1d:80:ef:
f9:3e:b5:66:50:de:f1:67:ba:14:50:07:7b:f4:ae:
03:d0:19:44:67:c4:4d:a4:d7:df:1e:9b:db:cd:22:
71:28:20:00:c0:55:13:7f:0e:47:c0:00:fd:fa:43:
09:b5:b8:1b:2c:b6:8b:12:18:f4:e0:86:02:e8:96:
1d:6b:6d:d8:76:bc:80:48:45:9c:56:65:07:12:aa:
34:8d:91:32:ea:ac:53:1f:cd:29:01:80:ee:06:81:
64:57:8f:77:3e:69:7d:6b:30:57:d2:6c:d4:06:12:
a2:33:22:20:6c:80:ef:fb:6c:72:bf:54:a1:92:7e:
bf:d3:a8:f9:26:6b:c3:d2:cc:b0:74:08:5c:d5:54:
69:85:b0:d4:6a:2a:c6:a2:1d:35:ee:e6:38:f0:1d:
53:3d:85:4e:31:3c:59:4e:92:e6:5c:62:cc:4e:50:
82:2d:54:4a:e1:ab:6f:86:3d:05:2c:23:94:41:52:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:22:FA:7E:DF:1C:88:B3:E7:4E:ED:A2:98:40:95:BE:86:60:3D:A9
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610b::/48
Signature Algorithm: sha256WithRSAEncryption
96:88:0f:74:15:6e:ac:3e:25:92:1e:66:35:17:cd:9d:82:b2:
f0:92:0b:fd:f2:b4:53:be:cd:1d:f0:d1:48:ee:f4:0e:39:4b:
e2:9e:82:8e:d8:b0:b9:f1:5e:69:74:84:ad:6d:da:d0:cc:14:
a6:42:79:0f:73:69:85:ad:ac:d9:36:7d:9b:56:d9:f3:92:98:
2f:e1:fa:45:12:b9:4a:27:5e:91:80:5a:c8:54:bb:32:6b:58:
ed:24:6d:95:01:7a:cf:fc:ec:82:8e:ce:ca:5b:d4:92:ba:cd:
a7:3c:92:8d:b8:66:9a:54:a1:46:22:42:9d:05:df:bf:4f:cd:
51:c7:3d:35:a5:80:5f:09:66:42:d6:50:57:9b:fa:5d:b0:e4:
29:5c:62:45:e7:68:28:fa:a2:fb:db:18:5a:0f:61:a2:52:29:
f6:7f:55:3d:e7:55:32:63:bd:e7:93:fc:59:2d:cd:e4:f4:df:
03:ae:8b:9a:a2:f5:99:e6:37:2f:85:9b:cd:71:5a:b5:ce:ec:
fa:18:51:14:88:70:3d:c5:ec:c8:8b:07:16:01:bb:43:4d:37:
50:3b:f1:26:45:d8:06:76:38:ac:c2:f8:d0:1e:c2:c6:cd:6e:
2e:7e:54:e5:d5:03:ee:37:97:fb:e3:6f:ff:21:cc:bc:3d:39:
2a:b5:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:10:35 2025 by rpki-client