Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
File: AS38173.roa (raw, json)
Hash identifier: ha42epLNpicPQcYNOJdYVqchv5Bh9RWMqtoCinFT4dY=
Subject key identifier: 17:59:DD:F5:A5:AF:9F:25:9C:95:4E:A0:5E:FF:68:05:EE:A2:91:FC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 76425B2186180609D30BF7E3B381D4B7555BFB33
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
Signing time: Tue 17 Jun 2025 03:14:58 +0000
ROA not before: Tue 17 Jun 2025 03:09:58 +0000
ROA not after: Tue 16 Jun 2026 03:14:58 +0000
asID: 38173
IP address blocks: 2a0f:9400:8022::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:42:5b:21:86:18:06:09:d3:0b:f7:e3:b3:81:d4:b7:55:5b:fb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:58 2025 GMT
Not After : Jun 16 03:14:58 2026 GMT
Subject: CN=1759DDF5A5AF9F259C954EA05EFF6805EEA291FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:bb:52:e6:c1:19:19:1e:95:28:09:a7:11:
bb:07:18:ad:9a:89:5c:6a:90:60:b8:e3:38:7f:cb:
0b:58:ab:64:31:e5:75:2f:e8:2d:58:4d:39:57:34:
1b:37:e5:5f:13:ff:f3:1a:f9:6b:e6:c2:a9:59:04:
b1:6e:3b:4e:5c:43:37:44:ff:30:ea:22:e1:9c:9d:
48:53:3e:93:32:ea:3f:a2:1b:9a:a4:f0:51:fb:42:
58:90:df:5b:17:b9:8e:6f:fe:da:82:1a:e8:5b:4e:
3b:63:ae:86:89:b8:6f:88:61:8a:ad:c2:d3:40:80:
bb:9b:e5:e1:0e:17:ff:c1:44:d0:81:ce:9e:75:6d:
7c:a4:6f:8c:f8:49:bd:e8:07:38:34:bd:8b:72:30:
dc:67:17:4a:45:6d:ba:cf:3c:bc:04:5b:4b:ef:d0:
a6:fc:f0:d8:9d:02:df:09:f1:5c:1e:be:6d:6b:5a:
33:80:c9:84:d8:7f:92:8a:ae:4e:74:e4:7f:d9:ff:
0d:2f:f1:91:63:b4:61:a6:65:79:a8:98:97:b2:a5:
27:5a:70:58:d9:8a:e5:5c:20:52:77:12:56:64:2c:
b6:be:86:75:5b:aa:aa:ba:5e:e2:1f:3d:53:18:d5:
91:65:72:f9:43:83:9a:77:e7:eb:12:8b:f0:8a:3a:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:DD:F5:A5:AF:9F:25:9C:95:4E:A0:5E:FF:68:05:EE:A2:91:FC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8022::/48
Signature Algorithm: sha256WithRSAEncryption
b5:a3:09:f6:bc:d2:37:d0:e3:9a:47:85:f8:8a:ef:03:2e:bf:
a9:59:58:9e:c1:e8:57:8e:21:51:00:ea:62:b5:37:62:2f:00:
4c:73:40:83:22:01:26:ea:71:98:f7:3f:51:fc:cb:83:2e:a7:
48:50:c1:bc:81:8f:34:ed:2d:02:b7:d1:fb:9e:04:80:65:1b:
fe:0c:89:ac:f7:a3:73:75:77:06:e7:eb:18:f6:8f:b6:55:03:
a9:d0:7c:fd:5e:fd:88:e9:a4:1d:97:2f:7e:24:c9:63:6b:ae:
60:0a:5e:4b:9e:8d:ba:27:e4:bd:e2:19:ed:c5:fa:80:ec:6b:
b5:6e:02:c2:92:a8:23:27:aa:c5:12:0f:a7:15:84:bc:a7:77:
9a:1a:f0:3e:74:ab:7f:d6:71:8b:5a:05:59:d3:c7:c1:30:2e:
ea:0a:7c:d8:67:08:c5:b5:ca:99:69:a6:dc:e5:d6:50:fb:85:
56:d3:de:d4:9f:20:56:f7:7a:3b:a1:41:03:3f:34:44:03:cf:
d9:3c:d1:ed:d3:97:c0:86:d7:4e:2f:80:0b:97:75:80:5b:d6:
6f:33:3b:30:ec:65:36:46:df:23:7f:94:e4:28:ff:8f:55:48:
90:ba:2d:d7:59:52:35:22:b5:93:fd:b5:d3:a8:78:cd:31:9c:
86:c3:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:20:11 2025 by rpki-client