Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44992.roa
File: AS44992.roa (raw, json)
Hash identifier: 5Se2q1dTyfIlbbovBm+B4uLwFF+7yJCX//jYbDvCAQ4=
Subject key identifier: 76:8F:83:C2:00:58:21:ED:43:4A:20:3C:C3:5B:A6:EB:4B:AF:96:BB
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2E389A5C903D5716AD3D5C7531C0E98562766760
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44992.roa
Signing time: Tue 17 Jun 2025 03:14:57 +0000
ROA not before: Tue 17 Jun 2025 03:09:57 +0000
ROA not after: Tue 16 Jun 2026 03:14:57 +0000
asID: 44992
IP address blocks: 2a0f:9400:8005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:38:9a:5c:90:3d:57:16:ad:3d:5c:75:31:c0:e9:85:62:76:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:57 2025 GMT
Not After : Jun 16 03:14:57 2026 GMT
Subject: CN=768F83C2005821ED434A203CC35BA6EB4BAF96BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:82:bc:3d:12:c0:d6:2f:96:ac:de:7b:86:
eb:9f:b9:10:b5:ff:e9:7f:0c:41:b2:ef:95:21:fa:
e6:0c:f1:a4:fc:8c:4d:0b:74:a2:b1:8e:66:57:73:
1f:56:69:22:c7:8b:af:50:b0:b3:85:b5:84:61:0b:
aa:98:e2:a7:de:7d:5b:fa:29:b7:f2:b0:72:35:0f:
ca:62:00:6c:71:bc:f4:96:84:bf:95:e3:99:8f:9f:
9e:12:72:e9:c6:76:b4:28:2f:b1:a7:da:9d:0f:20:
2c:55:4f:f8:d7:fc:d1:73:63:c1:ab:dd:2a:c4:0e:
20:10:10:62:17:1a:f2:bc:00:a2:65:09:4a:83:ce:
f1:b1:e5:0b:48:b3:40:21:aa:14:30:31:b9:35:ac:
4f:8d:4a:20:7f:e7:cc:b8:35:59:5e:16:13:31:e3:
f0:c3:71:74:80:c4:02:54:dc:37:c3:fd:85:ab:c4:
45:7a:67:3d:c4:e7:b1:e9:b0:6b:4a:6a:88:f5:6b:
c9:72:92:c7:cf:2a:e4:13:cb:a8:63:8d:19:4e:27:
0e:59:f5:3e:13:f0:7b:21:2f:9d:65:47:96:58:1c:
b2:b1:bb:8e:cf:ff:98:3a:aa:77:e3:fb:8f:c7:78:
c8:60:23:0a:1f:25:32:24:2f:91:e9:bc:39:14:4b:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8F:83:C2:00:58:21:ED:43:4A:20:3C:C3:5B:A6:EB:4B:AF:96:BB
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8005::/48
Signature Algorithm: sha256WithRSAEncryption
04:e8:87:00:3f:61:d0:75:ef:ce:e6:85:ab:de:02:ee:3e:a2:
40:f8:8c:aa:bb:66:fc:08:ae:f6:b9:f7:3d:00:9a:f3:c1:a9:
30:ed:04:68:f5:ae:9d:9a:9b:6c:cc:e7:98:58:d5:80:99:06:
b1:d9:a1:5e:e4:a7:41:0e:ad:6b:55:1f:64:45:fe:a7:a3:a7:
a4:73:54:de:8d:19:cc:5c:4b:f5:54:9a:3a:a8:d5:50:60:c3:
84:c6:2a:22:68:2f:08:72:a5:3e:c1:b6:00:24:6d:c0:c1:2d:
b4:ae:b2:10:b4:ee:b2:79:b2:5d:b2:c8:93:fd:32:be:e4:60:
d3:5e:80:f3:18:1c:67:9b:d5:65:8c:c0:52:f2:8f:cd:92:61:
75:d9:16:15:f4:3e:99:e3:0b:84:ee:68:91:62:f6:d3:9b:b5:
73:f5:75:d5:5a:32:f8:07:d2:ec:06:62:a6:f0:a5:84:9a:cc:
a7:cc:36:a6:62:d3:05:5c:ff:bf:39:ab:c0:37:15:c7:e9:f4:
ed:81:c3:09:c0:58:32:fb:0a:94:a2:fd:54:18:6a:a0:34:e5:
98:0a:16:f0:bc:1c:ea:9c:0f:09:69:f1:6a:96:08:03:a5:ed:
4e:ca:e8:07:bd:5a:bd:2d:95:76:85:af:80:8b:f2:09:4b:1c:
8b:2d:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:23:36 2025 by rpki-client