Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216271.roa
File: AS216271.roa (raw, json)
Hash identifier: ub9OHm8mmqYvQYxKzF9NAJ8hn+HEwOPkpGLX/UCDyzk=
Subject key identifier: 29:35:DA:21:73:C9:83:FB:80:E7:20:05:0B:CB:9F:61:BF:A6:6D:15
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 35FC5C8E90BE4DC02548D29C647E12499E870114
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216271.roa
Signing time: Fri 18 Apr 2025 17:57:36 +0000
ROA not before: Fri 18 Apr 2025 17:52:36 +0000
ROA not after: Fri 17 Apr 2026 17:57:36 +0000
asID: 216271
IP address blocks: 2a0f:9400:6180::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:fc:5c:8e:90:be:4d:c0:25:48:d2:9c:64:7e:12:49:9e:87:01:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 18 17:52:36 2025 GMT
Not After : Apr 17 17:57:36 2026 GMT
Subject: CN=2935DA2173C983FB80E720050BCB9F61BFA66D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:2a:8f:15:5d:d0:c1:b9:b3:87:c1:d6:8b:
ba:35:7c:21:2c:0e:0d:46:09:fd:14:35:1e:92:52:
89:89:26:37:24:b0:57:9c:ae:42:76:d8:ba:8b:66:
23:8e:36:e4:01:94:07:ca:ca:1a:c2:2d:b3:1e:1c:
cb:e3:d6:3c:cf:d2:70:4e:a3:73:6c:b5:25:4d:bd:
06:86:b9:39:51:c3:9d:d8:85:9f:9c:f5:9c:d3:94:
e7:f6:bf:a9:3b:b3:fb:20:40:2e:0e:48:08:ac:5c:
97:b6:f0:d1:bb:0c:2e:cd:ea:e2:2f:03:cc:49:27:
de:59:30:a3:5b:da:17:55:2d:c8:ee:a7:0b:5f:11:
47:4c:7f:63:64:b8:70:a7:b9:88:ae:ad:9e:10:d8:
12:be:d0:33:63:3f:27:a6:c9:e6:64:64:32:1c:a7:
22:66:56:e1:3d:12:ba:98:c2:4b:3f:0b:da:61:32:
a9:c7:77:14:25:81:90:6c:54:7e:bb:22:73:32:a1:
7f:f4:45:5b:2c:bc:87:87:3b:b9:18:eb:65:2a:0e:
da:67:35:1d:64:cd:a2:36:60:cb:b2:9b:fb:ac:bb:
a4:1e:51:9b:53:d0:dd:4e:58:9c:9c:84:13:8b:83:
e7:6d:24:ea:3a:10:7a:c0:ef:06:93:d0:ee:15:fe:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:35:DA:21:73:C9:83:FB:80:E7:20:05:0B:CB:9F:61:BF:A6:6D:15
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216271.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6180::/44
Signature Algorithm: sha256WithRSAEncryption
6e:b3:e4:9b:c5:bc:ec:59:8e:61:71:81:81:db:76:bf:98:94:
ac:de:62:12:0b:7d:fb:ce:a6:02:3c:c6:d5:37:56:c9:ad:b7:
40:ef:dc:61:ce:89:bb:a6:d0:38:4b:46:54:8c:26:59:21:da:
41:09:08:7b:f2:37:ef:6f:9b:db:c0:ed:43:16:a4:02:56:d7:
7d:8b:f6:87:fe:ed:7b:aa:06:55:3c:c0:49:c5:c6:46:cb:b7:
f8:c1:82:9e:8d:37:1d:f2:6b:e6:ad:b8:d5:ec:18:dd:75:0c:
2a:22:41:b9:dd:ce:45:43:d7:12:45:be:eb:0c:6e:0d:a6:ae:
bc:cb:7c:39:10:e2:01:56:9f:cc:e5:73:b5:8e:b5:9d:69:c6:
e0:91:49:14:32:d7:6a:b8:4e:53:6f:68:a4:7a:03:46:3e:03:
85:58:94:2c:44:0a:6f:55:7c:63:1b:7d:bd:57:7e:84:27:98:
b2:d9:51:2c:e7:15:31:83:37:85:d2:e8:db:41:7c:a6:76:af:
c4:20:7a:a5:26:2a:f8:a2:0a:c1:0f:c7:29:40:8a:c8:0c:71:
20:7e:df:e8:18:f6:d8:c1:98:19:87:9d:a6:78:82:41:ed:46:
cd:8e:c1:69:37:9f:2b:73:cc:3e:40:06:a9:f2:be:cf:84:c4:
d1:27:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:37:19 2025 by rpki-client