Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: Dhgp/OxoJ9W4HT2OxzhNMATpZyIkb256HfzNVbuoadU=
Subject key identifier: 40:EB:78:D2:99:70:C5:0C:AD:38:0F:64:C1:0F:A0:52:8D:23:FA:F0
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0278024B07522A1B2767DFF42D9EECCFDA343F88
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time: Sat 23 Aug 2025 00:30:31 +0000
ROA not before: Sat 23 Aug 2025 00:25:31 +0000
ROA not after: Sat 22 Aug 2026 00:30:31 +0000
asID: 53356
IP address blocks: 45.148.76.0/22 maxlen: 22
2a0f:9400:5::/48 maxlen: 48
2a0f:9400:200::/48 maxlen: 48
2a0f:9400:fa0::/44 maxlen: 45
2a0f:9400:fb0::/44 maxlen: 44
2a0f:9400:6100::/48 maxlen: 48
2a0f:9400:6103::/48 maxlen: 48
2a0f:9400:6106::/48 maxlen: 48
2a0f:9400:6148::/48 maxlen: 48
2a0f:9400:614b::/48 maxlen: 48
2a0f:9400:6933::/48 maxlen: 48
2a0f:9400:6c00::/40 maxlen: 44
2a0f:9400:6e00::/40 maxlen: 40
2a0f:9400:7000::/40 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:7390::/44 maxlen: 48
2a0f:9400:770c::/48 maxlen: 48
2a0f:9400:7723::/48 maxlen: 48
2a0f:9400:7724::/48 maxlen: 48
2a0f:9400:7726::/48 maxlen: 48
2a0f:9400:7727::/48 maxlen: 48
2a0f:9400:7728::/48 maxlen: 48
2a0f:9400:772c::/48 maxlen: 48
2a0f:9400:772f::/48 maxlen: 48
2a0f:9400:8003::/48 maxlen: 48
2a0f:9400:8012::/48 maxlen: 48
2a0f:9400:8024::/48 maxlen: 48
2a0f:9400:8027::/48 maxlen: 48
2a0f:9400:802b::/48 maxlen: 48
2a0f:9401::/32 maxlen: 32
2a0f:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:78:02:4b:07:52:2a:1b:27:67:df:f4:2d:9e:ec:cf:da:34:3f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 23 00:25:31 2025 GMT
Not After : Aug 22 00:30:31 2026 GMT
Subject: CN=40EB78D29970C50CAD380F64C10FA0528D23FAF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:48:1b:d8:d7:85:38:79:cf:cd:b1:59:71:
dd:96:80:5b:4a:08:13:7c:d3:29:7c:eb:fa:f8:8e:
9e:7d:bd:46:0c:03:a8:24:4e:85:f1:00:a9:3b:23:
ac:57:4a:1b:d5:f5:cf:5a:13:5b:91:fe:fc:87:8e:
2a:0c:77:9e:eb:d3:11:f7:ee:18:c6:f6:4c:cf:c8:
41:85:5d:f0:c2:cc:11:18:b6:79:54:88:79:1d:0c:
90:50:83:1e:d7:a1:1e:fc:89:65:b7:5a:fd:0d:27:
d8:ae:c9:59:c4:dd:15:33:8e:6d:a0:54:88:8d:25:
e8:6c:ed:ca:21:8a:4c:a6:cb:50:11:c4:fa:0c:4b:
7c:28:5c:04:36:29:80:5f:62:85:c3:22:9f:7d:21:
31:8f:20:24:b5:33:ef:b0:56:0f:80:ce:e8:cc:9c:
b2:79:ce:01:e1:e1:ae:e5:7f:9d:27:c1:80:a1:d1:
d5:48:ac:6d:68:bb:e6:c3:36:8c:e0:1f:47:b8:85:
f9:6a:4a:ba:2d:e7:23:0a:99:83:49:b6:11:f8:d4:
a4:48:7b:0a:e0:c9:ee:71:0b:60:fb:b0:a0:a0:1e:
bc:ff:27:ac:49:71:ad:67:11:38:db:9e:3f:97:d4:
28:5d:62:70:32:1c:e7:68:8b:78:fa:9c:69:10:15:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EB:78:D2:99:70:C5:0C:AD:38:0F:64:C1:0F:A0:52:8D:23:FA:F0
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400:5::/48
2a0f:9400:200::/48
2a0f:9400:fa0::/43
2a0f:9400:6100::/48
2a0f:9400:6103::/48
2a0f:9400:6106::/48
2a0f:9400:6148::/48
2a0f:9400:614b::/48
2a0f:9400:6933::/48
2a0f:9400:6c00::/40
2a0f:9400:6e00::/40
2a0f:9400:7000::/40
2a0f:9400:738c::/48
2a0f:9400:7390::/44
2a0f:9400:770c::/48
2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
2a0f:9400:772c::/48
2a0f:9400:772f::/48
2a0f:9400:8003::/48
2a0f:9400:8012::/48
2a0f:9400:8024::/48
2a0f:9400:8027::/48
2a0f:9400:802b::/48
2a0f:9401::/32
2a0f:9405::/32
Signature Algorithm: sha256WithRSAEncryption
8b:93:2b:86:8b:76:5b:04:4b:40:7c:a9:79:8c:a5:a8:3d:92:
05:c6:e9:0f:aa:87:fd:05:4f:00:32:66:46:24:58:96:87:3e:
6c:50:78:02:e0:83:6c:66:06:1e:ad:51:1d:4f:0d:88:e0:00:
b2:84:5b:62:ec:28:96:b8:0d:e9:ee:3f:80:67:71:3e:40:37:
c2:20:a9:ad:05:08:9f:55:90:71:f5:d5:e2:1b:68:7d:36:65:
5b:87:cb:fa:df:a2:2e:e0:18:b2:c1:13:66:d3:75:2e:ca:f4:
9f:ca:70:ef:5e:db:5e:f3:41:ba:8e:3b:a2:83:e9:8b:ae:78:
03:a2:f2:ac:a7:cb:7c:22:d0:b3:02:61:61:13:03:85:06:34:
84:e0:59:a4:fb:ba:d4:20:92:bb:6f:bd:4f:5f:fc:61:a4:c1:
ae:e2:97:9e:38:87:bb:96:9b:4b:cd:fa:c8:15:be:ac:8a:1c:
d4:eb:f7:68:23:92:3c:4c:7d:b3:e5:fd:ad:2b:1c:95:ad:02:
8b:da:5e:7f:77:5e:08:32:83:0e:3d:3e:8c:28:ad:b1:1a:6d:
67:5f:14:74:89:83:82:ef:7d:13:44:1f:0f:1b:7a:5c:9e:55:
76:33:0d:99:76:d8:56:67:e6:e1:d9:1d:56:7d:57:a1:11:26:
b1:7e:85:8c
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUAngCSwdSKhsnZ9/0LZ7sz9o0P4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA4MjMwMDI1MzFaFw0yNjA4MjIwMDMwMzFaMDMxMTAvBgNV
BAMTKDQwRUI3OEQyOTk3MEM1MENBRDM4MEY2NEMxMEZBMDUyOEQyM0ZBRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Bkgb2NeFOHnPzbFZcd2WgFtK
CBN80yl86/r4jp59vUYMA6gkToXxAKk7I6xXShvV9c9aE1uR/vyHjioMd57r0xH3
7hjG9kzPyEGFXfDCzBEYtnlUiHkdDJBQgx7XoR78iWW3Wv0NJ9iuyVnE3RUzjm2g
VIiNJehs7cohikymy1ARxPoMS3woXAQ2KYBfYoXDIp99ITGPICS1M++wVg+AzujM
nLJ5zgHh4a7lf50nwYCh0dVIrG1ou+bDNozgH0e4hflqSrot5yMKmYNJthH41KRI
ewrgye5xC2D7sKCgHrz/J6xJca1nETjbnj+X1ChdYnAyHOdoi3j6nGkQFeEhAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUQOt40plwxQytOA9kwQ+gUo0j+vAwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzUzMzU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBJwYI
KwYBBQUHAQcBAf8EggEWMIIBEjAMBAIAATAGAwQCLZRMMIIBAAQCAAIwgfkDBwAq
D5QAAAUDBwAqD5QAAgADBwUqD5QAD6ADBwAqD5QAYQADBwAqD5QAYQMDBwAqD5QA
YQYDBwAqD5QAYUgDBwAqD5QAYUsDBwAqD5QAaTMDBgAqD5QAbAMGACoPlABuAwYA
Kg+UAHADBwAqD5QAc4wDBwQqD5QAc5ADBwAqD5QAdwwwEgMHACoPlAB3IwMHACoP
lAB3JDASAwcBKg+UAHcmAwcAKg+UAHcoAwcAKg+UAHcsAwcAKg+UAHcvAwcAKg+U
AIADAwcAKg+UAIASAwcAKg+UAIAkAwcAKg+UAIAnAwcAKg+UAIArAwUAKg+UAQMF
ACoPlAUwDQYJKoZIhvcNAQELBQADggEBAIuTK4aLdlsES0B8qXmMpag9kgXG6Q+q
h/0FTwAyZkYkWJaHPmxQeALgg2xmBh6tUR1PDYjgALKEW2LsKJa4DenuP4BncT5A
N8Igqa0FCJ9VkHH11eIbaH02ZVuHy/rfoi7gGLLBE2bTdS7K9J/KcO9e217zQbqO
O6KD6YuueAOi8qyny3wi0LMCYWETA4UGNITgWaT7utQgkrtvvU9f/GGkwa7il544
h7uWm0vN+sgVvqyKHNTr92gjkjxMfbPl/a0rHJWtAovaXn93Xggygw49PoworbEa
bWdfFHSJg4LvfRNEHw8belyeVXYzDZl22FZn5uHZHVZ9V6ERJrF+hYw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:49:34 2025 by rpki-client