Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53808.roa
File: AS53808.roa (raw, json)
Hash identifier: 91qsrTgMXoCgCJRs0uGFgNPd1zeg0nWIGeCtpbatAOs=
Subject key identifier: 0B:DE:43:23:11:6A:7B:02:6D:44:76:37:6A:3B:8B:28:2A:E5:93:3A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 480EFDB66E82083B232161F43A490A17972D5653
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53808.roa
Signing time: Thu 14 Aug 2025 10:40:40 +0000
ROA not before: Thu 14 Aug 2025 10:35:40 +0000
ROA not after: Thu 13 Aug 2026 10:40:40 +0000
asID: 53808
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0e:fd:b6:6e:82:08:3b:23:21:61:f4:3a:49:0a:17:97:2d:56:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 14 10:35:40 2025 GMT
Not After : Aug 13 10:40:40 2026 GMT
Subject: CN=0BDE4323116A7B026D4476376A3B8B282AE5933A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1c:47:bd:3d:e9:f3:02:65:cb:93:64:b9:33:
c5:30:62:ec:f6:cc:64:f9:6d:c6:68:6b:e2:64:85:
2d:28:ef:dd:84:05:ea:9c:dd:b6:8f:ed:f1:ce:73:
a7:f7:83:d1:4b:17:0f:78:c6:c2:f2:78:39:1e:2c:
27:ed:cb:92:fc:34:f1:0f:a8:09:24:ea:f0:48:69:
9e:9b:e8:d6:fb:f8:e1:45:9f:13:d5:c0:ea:86:ad:
23:c7:6e:b9:03:ea:09:46:21:41:8b:04:ba:63:4d:
b4:1a:51:81:e7:d6:5f:cb:fe:10:dc:c7:49:77:57:
e1:e4:49:95:60:0b:c6:a4:1a:cd:34:a0:d1:2c:b2:
7b:c3:34:86:74:ad:29:7b:d0:15:ec:b7:e3:33:a3:
ad:a1:e1:dc:10:b0:b3:38:71:35:11:93:0e:5a:cb:
21:9f:b2:80:06:db:e5:21:59:d3:e0:10:21:5c:55:
3c:4e:5a:34:d8:46:3e:9b:83:35:ef:41:bf:5e:31:
39:f8:a6:23:2e:a7:76:d6:05:6d:0b:2a:86:fc:ad:
ca:80:a9:82:95:32:6e:97:90:a8:e2:1d:53:2b:0f:
e7:13:07:73:8d:62:ec:20:0d:4f:a1:5b:b0:d0:8f:
0e:b9:77:fc:14:5a:9c:74:5f:85:f2:27:ef:b2:d7:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DE:43:23:11:6A:7B:02:6D:44:76:37:6A:3B:8B:28:2A:E5:93:3A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
c7:ef:f5:03:3e:74:72:9f:2d:bf:22:57:3d:e7:8c:51:5a:cd:
f5:e2:82:fd:d7:46:f6:30:0c:79:bf:41:ac:a4:b5:6d:04:f2:
eb:d9:08:90:2e:3b:34:33:01:8d:b1:a2:44:a8:d9:fd:f5:59:
62:f2:ca:42:10:8c:0f:a1:5d:66:02:f6:7f:ca:df:56:1a:70:
a3:92:95:8f:9c:9d:ee:da:f8:e5:61:c1:9f:db:f0:17:d5:0f:
2b:0e:2f:e9:80:48:ef:83:87:b1:f0:39:3e:f1:59:6c:83:fb:
33:f1:4d:10:5e:85:d5:2c:64:b9:0c:65:0e:53:49:8a:d2:00:
52:1f:f1:5a:34:d4:34:ac:ce:aa:59:22:d4:08:0e:22:66:53:
fc:d2:19:ef:90:98:c0:e7:39:1c:a9:34:78:14:8f:dd:bc:ee:
7f:cc:29:98:7e:d2:cd:79:94:64:a3:67:63:8a:25:df:d3:74:
19:ff:5a:f1:10:01:84:d5:6c:4f:ac:04:29:e4:2b:48:38:6a:
77:7d:3a:2a:67:fd:4f:96:2c:e3:8f:35:3d:a0:79:8b:35:af:
48:a2:cc:70:2d:76:70:6d:8c:ad:db:a7:7f:1c:df:f8:93:d6:
24:f0:a4:9d:3a:ee:20:f3:76:72:d7:ee:9c:89:9a:01:55:20:
b7:af:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:55 2025 by rpki-client