Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48024.roa
File: AS48024.roa (raw, json)
Hash identifier: SlLqHUt0dViegSqN4fpvoZbXXtQOsNJxAb6S6nb342s=
Subject key identifier: 8C:9E:43:E1:FF:C9:8C:C1:3B:B2:20:67:20:10:7C:03:3D:76:94:92
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7CC992B5E120D87B85F927C10C21E655D79CD541
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48024.roa
Signing time: Tue 17 Jun 2025 03:14:59 +0000
ROA not before: Tue 17 Jun 2025 03:09:59 +0000
ROA not after: Tue 16 Jun 2026 03:14:59 +0000
asID: 48024
IP address blocks: 2a0f:9400:6225::/48 maxlen: 48
2a0f:9400:6228::/48 maxlen: 48
2a0f:9400:6230::/48 maxlen: 48
2a0f:9400:6231::/48 maxlen: 48
2a0f:9400:6250::/48 maxlen: 48
2a0f:9400:6255::/48 maxlen: 48
2a0f:9400:62fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c9:92:b5:e1:20:d8:7b:85:f9:27:c1:0c:21:e6:55:d7:9c:d5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:59 2025 GMT
Not After : Jun 16 03:14:59 2026 GMT
Subject: CN=8C9E43E1FFC98CC13BB2206720107C033D769492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:06:5f:31:10:c1:af:42:51:22:70:08:57:
d0:de:79:0b:89:56:2e:c0:7f:c1:2b:58:26:2b:3c:
dd:46:a4:e9:fa:aa:ee:f7:49:1a:5b:24:3e:be:cf:
cb:50:95:5c:1f:1f:2b:8b:b7:03:23:19:bb:cb:71:
57:7a:bb:ea:05:00:de:e1:76:c9:01:6f:aa:7d:3f:
0b:0d:e0:ce:f9:b1:fe:98:01:43:5a:e3:a5:1d:17:
a8:f2:d2:25:1c:ec:2e:7f:46:54:1d:93:bd:80:4c:
dd:85:d5:b8:d7:40:f0:32:f9:72:37:ae:e4:07:19:
66:ef:5e:3d:c1:2c:c2:25:c8:ef:9d:16:13:3d:8f:
db:09:2b:8c:c3:a0:13:a6:27:95:ed:86:62:9a:e7:
bc:45:81:ac:e2:4a:c5:27:05:a3:da:cf:7d:d9:2a:
fd:80:f3:e1:ca:27:51:9c:3c:1f:e8:9b:93:ec:5c:
29:55:15:45:51:f5:05:2b:f6:51:bc:29:a3:c7:09:
7d:5a:4e:20:c1:ae:cb:f2:88:ac:b8:f9:d8:28:b6:
f5:8e:52:f9:b5:aa:4a:a8:69:90:9f:7e:60:cd:02:
ed:28:ea:4e:5a:4c:f1:aa:0c:2a:b7:67:fe:3d:6a:
8c:2f:9d:a2:23:bf:07:ab:e2:c3:91:b8:e2:6f:60:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9E:43:E1:FF:C9:8C:C1:3B:B2:20:67:20:10:7C:03:3D:76:94:92
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6225::/48
2a0f:9400:6228::/48
2a0f:9400:6230::/47
2a0f:9400:6250::/48
2a0f:9400:6255::/48
2a0f:9400:62fb::/48
Signature Algorithm: sha256WithRSAEncryption
70:9a:a7:f8:f6:bc:bf:a7:e6:33:49:71:2e:82:47:b7:d3:47:
be:08:c3:b6:54:3c:a9:25:ee:7b:a1:72:9e:be:b1:26:09:3b:
ca:f1:d2:e9:b3:21:21:0b:cc:e3:e4:92:05:55:1b:18:b5:ef:
df:1d:3b:d9:d9:01:30:f4:f4:1c:65:55:19:98:49:bd:ad:8f:
35:48:34:b0:de:30:48:cd:aa:f0:ce:3d:17:f1:fb:14:4a:93:
3d:8f:d9:81:77:c9:a3:57:e7:88:06:db:70:bc:0f:37:d2:8f:
b2:cb:fb:dc:3c:6e:ed:58:0e:3e:0a:fd:aa:ad:10:41:b2:35:
b9:20:15:63:7a:3b:64:9d:a5:3f:a2:f7:f5:4e:90:6b:28:bc:
5a:7f:e5:73:97:05:86:db:39:69:c0:67:6b:b1:a3:a3:1a:85:
c3:76:b2:f9:69:c1:94:32:79:8c:69:62:e2:0b:a0:e5:52:4c:
e2:a2:5d:75:e6:f5:9c:81:87:90:9c:de:9b:99:d4:b2:af:be:
c9:60:38:97:0f:45:fa:55:a3:3c:71:00:21:9a:4c:83:62:3f:
0d:61:fe:d9:c8:2d:af:33:bb:5e:04:5b:0c:f2:27:06:dc:c8:
d4:14:8a:22:21:d9:8a:20:60:a5:85:58:c2:b8:ec:37:a2:d8:
63:73:96:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:54:53 2025 by rpki-client