Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: Jl3s+aoX9tW5dRm7cadYIkNJ1gVMPQPju7In3zWbdks=
Subject key identifier: 5A:02:46:17:DE:BF:92:25:BB:9F:D9:9D:87:3B:73:1C:F9:FF:95:D1
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 529777872E11E7EBE8D94C1425019E21B54971E9
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS31898.roa
Signing time: Fri 12 Sep 2025 03:54:30 +0000
ROA not before: Fri 12 Sep 2025 03:49:30 +0000
ROA not after: Fri 11 Sep 2026 03:54:30 +0000
asID: 31898
IP address blocks: 2a0f:9400:614d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:97:77:87:2e:11:e7:eb:e8:d9:4c:14:25:01:9e:21:b5:49:71:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 12 03:49:30 2025 GMT
Not After : Sep 11 03:54:30 2026 GMT
Subject: CN=5A024617DEBF9225BB9FD99D873B731CF9FF95D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:be:b9:8a:97:05:6a:cf:50:f5:94:e7:a3:
a6:69:8b:fd:6a:4e:ea:f0:f2:be:6b:64:b0:59:65:
40:06:7b:06:df:28:e9:bb:25:9b:ce:c9:2b:f4:cb:
4e:dc:2c:3a:5f:c9:12:95:4c:f4:39:54:85:95:29:
26:ba:da:82:61:c2:85:66:12:a3:26:91:6f:8c:d0:
54:56:c5:25:b5:2a:47:2d:fd:98:f6:1d:3b:45:84:
c9:4e:ac:e5:01:55:40:c6:16:e8:47:5f:60:95:59:
f3:16:bc:59:58:c4:10:91:17:1c:1b:77:2b:9b:fd:
ce:bd:74:02:ad:45:2d:d2:d7:c5:a5:86:92:30:24:
75:4b:17:fc:a8:56:91:37:2d:98:21:4b:9b:ed:f3:
5c:74:d1:e2:c2:78:45:77:b5:6a:46:94:b8:74:82:
86:87:5d:6b:22:7d:88:81:a6:c8:1c:c6:22:94:78:
89:3e:46:6e:fa:3d:a8:d8:e4:da:ec:a7:92:2e:dc:
27:a2:a1:c5:8f:fc:65:95:30:63:77:c9:b4:b3:8b:
95:6a:9c:64:07:64:c3:50:86:90:33:0f:5a:df:05:
a6:65:83:22:97:fc:fc:ea:e3:1b:1b:3b:e0:84:6c:
08:bf:2c:a4:aa:5b:48:a2:f3:c4:51:2c:b6:bc:f0:
37:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:46:17:DE:BF:92:25:BB:9F:D9:9D:87:3B:73:1C:F9:FF:95:D1
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:614d::/48
Signature Algorithm: sha256WithRSAEncryption
6c:36:74:3b:00:4b:4d:c2:53:15:87:b9:09:df:46:cf:1a:f9:
7c:f0:49:95:65:85:49:34:c7:a2:ff:45:e1:52:6f:b2:c0:54:
61:e6:88:bd:aa:28:ec:fc:92:be:5b:00:e4:a4:5a:32:d2:a7:
68:be:d9:13:d1:74:ff:9f:c8:94:85:97:7f:3a:58:10:f6:05:
0b:9f:ac:25:6e:fc:c1:1f:89:c1:42:1a:de:38:c3:2f:27:6d:
2c:19:a6:18:ed:b9:e7:b6:37:d1:f4:35:8c:1d:db:9a:12:69:
62:57:40:68:ab:6d:b9:9b:a3:c0:0e:e5:9b:6f:14:d8:55:6d:
2b:2b:4c:bc:56:a4:33:3c:62:82:46:49:09:5a:5a:f7:c8:8a:
cc:c7:7c:75:39:d8:66:66:60:b6:de:43:35:65:87:e6:89:ad:
0e:df:0c:58:16:18:68:18:4a:20:07:40:55:33:4d:82:48:eb:
d4:01:14:3c:9b:12:e1:fe:1e:0d:04:f9:72:64:c2:66:09:82:
fd:5d:72:23:89:3d:af:8c:5e:8d:2c:d4:2d:7a:1c:f8:04:21:
39:02:81:8a:c0:53:2a:c2:2d:03:31:b4:ff:f8:2b:83:ba:5b:
38:99:d2:ad:17:94:41:52:2d:dd:7b:1e:2a:10:25:6f:47:90:
a7:1f:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:19 2025 by rpki-client