Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
File: AS398395.roa (raw, json)
Hash identifier: w/Tt3uvHR3TgY+lrZ6aTeRye0RhHTbpOBlU4c/L0Z1k=
Subject key identifier: C3:A8:E1:05:F9:79:A7:92:98:89:A1:58:4F:39:01:F2:3E:9C:3C:3F
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 12CEECAC93366D201ED9716E43C0080392F6DEDC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
Signing time: Tue 17 Jun 2025 03:14:55 +0000
ROA not before: Tue 17 Jun 2025 03:09:55 +0000
ROA not after: Tue 16 Jun 2026 03:14:55 +0000
asID: 398395
IP address blocks: 2a0f:9400:610c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ce:ec:ac:93:36:6d:20:1e:d9:71:6e:43:c0:08:03:92:f6:de:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:55 2025 GMT
Not After : Jun 16 03:14:55 2026 GMT
Subject: CN=C3A8E105F979A7929889A1584F3901F23E9C3C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:69:c6:e5:17:5c:ad:1c:e7:b4:81:94:87:
50:fb:ca:0b:85:e6:07:a8:db:de:2a:b3:a0:36:17:
35:2a:7b:63:68:1c:1f:ea:ed:62:b7:0b:98:a2:31:
4e:9f:f1:f2:2c:a4:d6:f2:20:0a:90:a5:b1:10:b9:
a8:d2:4e:ad:92:48:14:f2:fc:95:eb:cf:27:f9:93:
d3:f5:3d:41:99:3c:a8:7b:29:ff:14:f3:17:9c:11:
0d:a6:31:f9:83:90:3b:bf:c8:61:1f:11:3c:49:83:
91:1c:62:d5:d4:4f:78:f6:4d:23:74:db:9f:a6:1e:
a1:2e:44:71:6f:45:19:56:0d:ad:24:1d:7c:9b:2e:
a0:05:4c:72:17:17:9a:fe:8f:45:2f:3f:a9:b1:bb:
54:7c:27:ad:b3:48:61:9a:0b:c9:d1:a1:69:4a:79:
ea:59:84:b8:1b:c6:a0:bd:87:61:77:f3:04:ed:08:
8e:6d:05:f7:f8:19:47:a9:89:87:5e:63:c2:9b:5e:
47:57:8e:7f:e1:01:3c:7b:25:d2:c8:16:8b:83:a9:
b4:f8:b7:b1:3a:3a:dd:d0:97:7b:06:99:ac:ba:fe:
72:a5:e0:0e:5b:67:a6:c0:05:c9:29:a0:44:b0:eb:
d0:81:47:8e:16:3a:a0:6e:78:7b:01:7f:28:b4:0e:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A8:E1:05:F9:79:A7:92:98:89:A1:58:4F:39:01:F2:3E:9C:3C:3F
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610c::/48
Signature Algorithm: sha256WithRSAEncryption
81:7e:1c:3b:43:94:a4:51:0b:3a:94:0c:04:1c:16:e0:ba:ac:
91:3e:ba:c5:ff:b8:21:4f:87:0b:a8:bd:b9:15:39:c2:8b:b3:
5b:89:bf:3a:19:fe:f3:fc:30:4e:e8:2d:6a:6c:88:7b:a0:0c:
ba:dd:cd:e5:06:84:78:7a:c8:80:79:bd:50:2e:42:32:2d:49:
44:d3:d2:2a:1d:2b:3d:8a:a2:c3:41:f7:4c:ac:ee:22:e1:50:
ae:43:c7:82:5c:5d:0c:47:9d:fd:bf:00:bd:44:be:9e:43:d1:
ff:ab:e0:67:32:4a:8c:5f:3a:83:07:35:64:9a:40:43:be:60:
51:d2:b2:e3:3c:d8:a2:82:8f:4c:3f:32:5a:4b:af:53:fb:e2:
aa:b6:8d:98:cf:49:26:98:61:b4:76:46:e1:48:ed:97:5f:9d:
05:00:d9:b1:cb:80:7f:fd:3f:5f:eb:7f:2a:92:05:89:31:f1:
a1:07:aa:a4:af:1f:41:02:93:02:ad:9f:2a:16:7d:3b:14:86:
d7:0d:2b:cb:12:b8:4f:46:e4:ad:2b:59:b8:06:b2:e6:b1:60:
9a:b2:3c:0e:94:4a:cc:f8:53:70:36:62:4a:56:fa:bb:80:7e:
99:8e:ff:ba:b2:21:e4:5c:49:17:61:e3:15:da:82:24:91:79:
26:74:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:39:30 2025 by rpki-client