Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41732.roa
File: AS41732.roa (raw, json)
Hash identifier: zIC4ATFGHSWRzxNw0N7EsFDFlBy+zgCgJPhH+aaZVqY=
Subject key identifier: 06:E4:D6:72:E5:66:C7:EF:84:C7:E7:C1:E3:A2:CC:B5:A4:66:1E:B3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 03DA34B25308556EAFEDD48C76C48306DBF54BD8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41732.roa
Signing time: Tue 17 Jun 2025 03:14:59 +0000
ROA not before: Tue 17 Jun 2025 03:09:59 +0000
ROA not after: Tue 16 Jun 2026 03:14:59 +0000
asID: 41732
IP address blocks: 2a0f:9400:7310::/48 maxlen: 48
2a0f:9400:7311::/48 maxlen: 48
2a0f:9400:7312::/48 maxlen: 48
2a0f:9400:7313::/48 maxlen: 48
2a0f:9400:7314::/48 maxlen: 48
2a0f:9400:7316::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:da:34:b2:53:08:55:6e:af:ed:d4:8c:76:c4:83:06:db:f5:4b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:59 2025 GMT
Not After : Jun 16 03:14:59 2026 GMT
Subject: CN=06E4D672E566C7EF84C7E7C1E3A2CCB5A4661EB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:b3:0e:50:9c:83:a3:7e:c3:b4:c5:db:9b:
9a:62:e2:40:74:13:c8:a0:85:0b:93:45:ed:e0:99:
c6:bd:be:79:2b:86:bc:d9:3d:c2:4f:fe:99:7e:03:
d6:93:a3:5f:27:8d:0d:2d:a6:bc:83:8c:ce:8c:d0:
5f:d3:b4:f7:d8:98:7f:38:f1:b0:49:94:13:54:31:
d1:02:66:b3:50:84:33:1b:0d:75:a0:8f:23:1a:b8:
20:ed:da:f5:cc:e8:6f:3a:39:a2:cb:53:91:32:4a:
b3:f3:1c:56:78:bc:b5:2d:30:08:f4:1d:20:3a:ce:
e9:13:da:2d:67:c4:ea:2c:16:19:8a:0e:5d:22:f8:
30:5a:ff:6d:84:01:b4:61:a5:48:ed:e0:5b:f7:23:
ba:fb:41:c3:ec:84:17:cc:78:71:fa:6c:91:6e:f8:
4f:ea:7b:10:1d:8a:52:3d:eb:a8:b5:32:b6:ed:f8:
7c:43:22:d6:25:ef:5e:0a:98:1c:29:d2:4e:c1:74:
ff:22:52:64:14:c9:3e:85:89:77:74:89:9a:7f:aa:
23:00:54:57:be:ed:35:18:98:15:75:97:62:97:94:
99:e8:cb:d1:e6:94:41:b6:ac:11:54:4e:08:8a:de:
22:d6:ac:22:7a:ca:f8:4d:3d:ea:44:82:da:9f:a2:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E4:D6:72:E5:66:C7:EF:84:C7:E7:C1:E3:A2:CC:B5:A4:66:1E:B3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7310::-2a0f:9400:7314:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7316::/48
Signature Algorithm: sha256WithRSAEncryption
bc:6b:a0:cb:0f:56:62:82:ad:34:4f:fc:f4:2a:24:71:0e:f7:
d7:8c:38:61:26:41:14:8b:f6:f0:70:40:22:2e:ea:66:35:a5:
33:b4:fb:de:c2:58:e9:27:01:7e:07:15:68:53:0d:7f:bc:4c:
8f:8e:50:1a:e2:51:18:63:97:39:4b:b7:77:7e:f2:84:88:8d:
2d:5e:d7:6d:47:c1:0e:f2:4a:b3:3f:f7:5d:c0:bb:7a:e2:9d:
cd:d5:ff:31:c6:19:a2:19:61:46:a4:e7:84:a1:25:c3:c6:91:
87:0b:a1:93:95:f0:84:dd:3b:3b:d7:41:92:dc:d7:85:dc:36:
fc:3e:2b:43:67:bd:6b:0a:ae:f6:19:4c:70:5b:d1:0c:10:c8:
f7:d3:a3:be:82:d2:b6:4b:e1:54:04:fb:3e:e1:c2:bf:c1:7c:
e1:c7:7c:30:25:75:73:1e:3d:4e:e9:d5:25:52:ab:c6:bf:5a:
9d:1f:54:d7:5c:1a:9e:6f:8a:9f:81:4b:c6:61:46:fa:0f:89:
a5:4d:70:b7:03:93:39:8c:55:5d:be:99:e6:bd:bc:9d:ee:ca:
c8:5c:d8:e3:c7:9e:00:ac:9e:f6:95:23:f4:5f:2b:c5:58:ea:
57:1b:10:0f:8e:d4:82:7a:ab:3d:81:af:6e:dc:4a:b7:a1:48:
99:12:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:21:01 2025 by rpki-client