Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
File: AS41255.roa (raw, json)
Hash identifier: Elj4vCy/p3rWlLkVH8xueU42G2yiJAwy26RFkfeQnyg=
Subject key identifier: 94:26:02:75:C3:C0:2E:DC:14:F8:1C:CC:68:DF:C0:5D:A6:B2:9E:F2
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 14F05A8CB24AB2B31F6E8FCEECFD92C184817640
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
Signing time: Tue 17 Jun 2025 03:14:57 +0000
ROA not before: Tue 17 Jun 2025 03:09:57 +0000
ROA not after: Tue 16 Jun 2026 03:14:57 +0000
asID: 41255
IP address blocks: 2a0f:9400:8016::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:f0:5a:8c:b2:4a:b2:b3:1f:6e:8f:ce:ec:fd:92:c1:84:81:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:57 2025 GMT
Not After : Jun 16 03:14:57 2026 GMT
Subject: CN=94260275C3C02EDC14F81CCC68DFC05DA6B29EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:ed:cb:1e:23:64:8c:a4:48:68:b4:ba:7b:
b0:08:1b:eb:7c:8a:d8:ad:3f:bb:bd:3d:f4:77:22:
2f:05:63:55:c3:34:66:36:79:54:4a:6e:0c:2d:e7:
97:b3:b5:b6:5a:75:f3:ca:a3:66:ef:17:a5:3d:47:
ef:9b:12:df:50:c1:f5:8c:2b:66:b3:6b:ee:9c:45:
f2:94:7d:57:5a:0d:eb:a5:d1:f4:72:43:95:0b:55:
3e:15:db:6d:39:0d:ef:64:0f:95:e2:3b:80:bb:d6:
1c:1a:e7:36:2d:34:83:17:0b:c6:8a:fd:e8:20:0c:
4b:18:1c:0c:38:27:5e:5a:7f:29:39:4a:e9:04:ba:
f6:ec:1a:b5:28:72:1d:87:0a:59:1b:fc:ce:cf:79:
f7:36:b6:b4:5c:77:65:26:4e:72:7d:43:3c:97:0f:
79:09:2e:b0:df:5f:b4:1f:3c:a2:a2:fb:69:a2:25:
70:95:f2:07:99:d2:62:ce:28:65:c9:fd:34:64:b1:
42:51:f8:89:60:45:63:3c:8d:5f:b5:c0:6d:6e:3e:
cd:fc:eb:d6:7c:63:49:af:54:11:bd:7a:d5:c1:e4:
ae:4e:90:72:31:00:43:82:1f:dc:44:09:b2:5e:d7:
04:68:24:5a:c2:8e:53:00:fc:c7:80:88:8a:f4:ae:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:26:02:75:C3:C0:2E:DC:14:F8:1C:CC:68:DF:C0:5D:A6:B2:9E:F2
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8016::/48
Signature Algorithm: sha256WithRSAEncryption
67:7e:ee:d1:fb:e8:ea:21:39:89:d7:fd:7e:fe:3c:69:72:c9:
01:db:b3:55:80:9c:f3:d7:95:be:01:3b:69:3b:b3:b7:78:6c:
f7:bb:ca:52:65:e7:0a:e3:46:a5:4c:4a:62:d8:ea:d9:dd:99:
2f:92:d2:23:68:33:05:35:f6:fd:f3:ef:15:6b:ee:98:54:78:
d8:f7:fb:5d:73:92:83:d2:41:3d:a4:b3:d6:89:cd:48:1d:37:
d3:ff:eb:33:b2:d5:5a:cd:53:ab:cf:a5:2f:fd:c2:59:91:76:
07:bc:7e:16:41:dc:ae:06:16:66:1e:46:cc:8f:93:47:3b:cb:
76:cb:bf:35:55:5e:36:59:c7:61:12:33:f3:ed:8a:c3:c1:21:
78:b7:e7:69:be:61:ae:4a:d9:59:60:b8:12:3c:ff:7a:0b:6b:
3d:35:7a:66:46:09:dd:d1:24:e3:93:5c:76:d6:11:0e:9b:5b:
a4:f0:40:1e:5a:14:49:e4:fd:1d:13:08:e5:51:04:18:72:6a:
1f:da:5d:a7:e5:2e:c4:cb:9a:07:4a:c7:af:de:57:5a:72:80:
da:e4:93:c6:e4:36:85:6a:bc:8f:48:0f:19:ab:02:af:d3:ae:
a6:35:ce:b5:45:3e:39:a6:18:74:fd:4b:ea:b5:92:5b:81:9b:
89:58:dc:76
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUFPBajLJKsrMfbo/O7P2SwYSBdkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA2MTcwMzA5NTdaFw0yNjA2MTYwMzE0NTdaMDMxMTAvBgNV
BAMTKDk0MjYwMjc1QzNDMDJFREMxNEY4MUNDQzY4REZDMDVEQTZCMjlFRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjW+3LHiNkjKRIaLS6e7AIG+t8
ititP7u9PfR3Ii8FY1XDNGY2eVRKbgwt55eztbZadfPKo2bvF6U9R++bEt9QwfWM
K2aza+6cRfKUfVdaDeul0fRyQ5ULVT4V2205De9kD5XiO4C71hwa5zYtNIMXC8aK
/eggDEsYHAw4J15afyk5SukEuvbsGrUoch2HClkb/M7Pefc2trRcd2UmTnJ9QzyX
D3kJLrDfX7QfPKKi+2miJXCV8geZ0mLOKGXJ/TRksUJR+IlgRWM8jV+1wG1uPs38
69Z8Y0mvVBG9etXB5K5OkHIxAEOCH9xECbJe1wRoJFrCjlMA/MeAiIr0rkZfAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUlCYCdcPALtwU+BzMaN/AXaaynvIwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzQxMjU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+UAIAWMA0GCSqGSIb3DQEBCwUAA4IB
AQBnfu7R++jqITmJ1/1+/jxpcskB27NVgJzz15W+ATtpO7O3eGz3u8pSZecK40al
TEpi2OrZ3ZkvktIjaDMFNfb98+8Va+6YVHjY9/tdc5KD0kE9pLPWic1IHTfT/+sz
stVazVOrz6Uv/cJZkXYHvH4WQdyuBhZmHkbMj5NHO8t2y781VV42WcdhEjPz7YrD
wSF4t+dpvmGuStlZYLgSPP96C2s9NXpmRgnd0STjk1x21hEOm1uk8EAeWhRJ5P0d
EwjlUQQYcmof2l2n5S7Ey5oHSsev3ldacoDa5JPG5DaFaryPSA8ZqwKv066mNc61
RT45phh0/UvqtZJbgZuJWNx2
-----END CERTIFICATE-----
Generated at Sun Jun 29 15:25:50 2025 by rpki-client