Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53667.roa
File: AS53667.roa (raw, json)
Hash identifier: 8eHd7BZktBrkgCErlG30IthGtddn5F4MMUvMoWJWqb8=
Subject key identifier: 52:B1:68:DF:50:04:95:24:BC:F5:56:4F:33:C6:37:C7:AA:94:E7:53
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 08F1E00C402508DDDD365AC607ADC8C8BEF4ED59
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53667.roa
Signing time: Fri 22 Aug 2025 00:55:52 +0000
ROA not before: Fri 22 Aug 2025 00:50:52 +0000
ROA not after: Fri 21 Aug 2026 00:55:52 +0000
asID: 53667
IP address blocks: 2a0f:9400:6904::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f1:e0:0c:40:25:08:dd:dd:36:5a:c6:07:ad:c8:c8:be:f4:ed:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 22 00:50:52 2025 GMT
Not After : Aug 21 00:55:52 2026 GMT
Subject: CN=52B168DF50049524BCF5564F33C637C7AA94E753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:32:57:6b:db:17:6a:45:93:42:31:2a:6a:
f7:a2:a4:07:f3:c6:b4:1c:18:7b:2b:d7:59:f5:25:
fc:fd:a3:8e:2e:a1:0c:bb:37:08:53:d8:0e:47:64:
f0:78:66:d0:2f:3d:43:6b:97:1e:f7:b7:ca:85:4c:
cc:aa:e7:c1:d3:18:7a:af:8a:4a:32:28:09:df:80:
54:e0:93:99:ee:1e:f2:96:26:84:30:0f:e6:3e:37:
3d:40:f2:ce:46:e6:ae:d4:da:dc:5b:83:e0:69:5b:
12:65:a3:75:96:e7:7a:14:08:95:96:3c:ad:03:df:
7d:26:fa:3a:3e:19:d5:1c:00:23:d9:9d:96:6a:64:
98:4e:d6:df:e4:ca:a5:5f:3e:7b:81:f9:a2:2c:c3:
83:8f:14:ad:2d:8e:f3:bf:a0:18:32:ed:cc:a8:89:
c0:fc:31:5f:01:c7:4e:27:73:af:c3:86:39:c4:24:
38:10:88:5c:4e:58:75:6c:06:ea:b1:61:f7:cb:3e:
2a:0c:99:95:93:76:49:30:5a:4e:60:2d:b1:2b:8b:
78:38:a4:48:de:6c:d9:25:17:e0:2d:ed:6c:c8:eb:
13:29:9e:85:ea:82:e9:ca:2a:5c:34:4e:3f:85:82:
d8:cd:b7:c6:91:c4:e8:c2:82:c4:a1:fc:51:d8:7a:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B1:68:DF:50:04:95:24:BC:F5:56:4F:33:C6:37:C7:AA:94:E7:53
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53667.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6904::/48
Signature Algorithm: sha256WithRSAEncryption
bc:46:a7:40:64:16:3b:73:9e:c7:8f:69:b2:f3:0e:3b:07:68:
de:9d:00:68:96:91:30:55:7a:28:d8:2b:e2:aa:fe:e8:16:15:
5c:34:93:2f:36:37:36:1b:1c:36:be:4d:e8:6f:10:a7:06:37:
6a:7e:07:97:06:a8:e1:29:e1:91:d6:b7:9d:a2:05:ab:ef:92:
ea:68:09:7b:99:78:ea:14:a2:99:ab:72:20:3d:5f:9b:c3:db:
4e:82:61:47:da:a2:04:c8:eb:9a:59:2a:25:e0:dd:b5:50:62:
d5:bf:9e:37:fc:ac:fd:4b:ff:ce:68:ec:40:00:a0:65:aa:e2:
5f:41:b5:a3:cd:6e:40:d7:72:f4:ba:30:30:63:ed:36:25:2f:
2d:ac:ed:1d:e4:16:a6:34:ac:ab:d6:1e:51:75:98:34:3e:12:
ea:f6:9d:8b:f1:f9:f1:de:dc:7f:b9:eb:e8:3d:ef:84:ef:df:
ab:91:de:60:fa:64:85:f8:41:01:60:5a:78:17:2e:0a:0e:a9:
22:9e:01:1a:6d:13:0d:cb:7f:7f:ea:04:8d:1e:91:48:6b:49:
14:a9:92:e6:73:9c:58:00:99:5b:cd:5b:d9:25:a9:39:c8:c4:
a7:a3:e4:1d:54:31:6c:44:09:b6:bf:0b:43:23:51:3d:57:45:
42:6e:c2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:52:25 2025 by rpki-client