Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
File: AS59893.roa (raw, json)
Hash identifier: oAlBLeNmsWEwYmZpy1sdmoNoT6kxB/nR24rkDBNKgmo=
Subject key identifier: 9F:97:B3:A2:58:13:1A:2E:2C:1A:71:97:5B:E9:D7:A7:72:F8:E5:92
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 35F532ACE5B5D898D16DF68AE9442D25E1D74739
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
Signing time: Tue 17 Jun 2025 03:14:58 +0000
ROA not before: Tue 17 Jun 2025 03:09:58 +0000
ROA not after: Tue 16 Jun 2026 03:14:58 +0000
asID: 59893
IP address blocks: 2a0f:9400:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f5:32:ac:e5:b5:d8:98:d1:6d:f6:8a:e9:44:2d:25:e1:d7:47:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:58 2025 GMT
Not After : Jun 16 03:14:58 2026 GMT
Subject: CN=9F97B3A258131A2E2C1A71975BE9D7A772F8E592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:67:b6:1f:79:e6:75:44:5e:eb:96:b8:90:
77:15:aa:4a:f4:ff:c4:21:55:d6:fa:d0:d2:d5:41:
71:d4:16:f3:52:48:87:c2:dd:da:23:08:4e:5a:9b:
01:60:82:7d:44:fe:c8:0d:56:d1:92:86:31:42:68:
f9:22:03:68:ef:87:45:e9:46:1d:66:e7:e7:25:5e:
e0:41:e1:e4:60:90:6d:7a:b9:f2:a6:9f:6c:4a:c5:
dc:27:a8:f6:f0:d9:09:b1:77:9e:d2:12:ef:cb:d1:
a9:f1:8f:28:ae:6b:a3:a6:17:c0:31:09:59:b7:32:
b9:91:9d:b3:da:45:2e:7c:0f:4e:88:e2:60:36:8d:
b7:9e:a3:07:8d:8e:8c:93:92:2c:34:33:11:7d:43:
57:4a:80:f0:4e:f0:42:52:aa:f2:85:87:2f:81:d9:
7f:72:cc:3b:62:e6:ca:c1:1d:1e:92:0f:3b:8f:75:
11:81:fa:c4:98:e8:d9:32:e9:aa:57:67:b3:79:36:
6e:e7:5c:61:92:7e:7b:71:ec:8a:9a:df:04:c6:dd:
1d:c3:ed:81:fa:f3:be:79:ef:29:a2:c4:49:c7:ba:
84:1a:a9:95:a1:68:88:ab:7c:41:0f:2b:f8:95:e8:
a3:51:29:d7:24:fd:b1:d3:d6:8b:21:fb:cb:de:7a:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:97:B3:A2:58:13:1A:2E:2C:1A:71:97:5B:E9:D7:A7:72:F8:E5:92
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:100::/44
Signature Algorithm: sha256WithRSAEncryption
67:1b:4d:b0:2a:61:2e:f5:88:74:c2:c9:65:4c:a6:71:fb:d1:
ae:27:b8:dc:78:7c:5e:eb:c5:9c:b8:81:b0:f0:00:b5:48:f9:
8a:ef:71:61:c7:87:64:d0:f2:f6:81:84:85:a4:af:e0:7d:46:
f9:61:bd:e4:c8:29:65:1f:f7:6a:0d:39:03:2f:fd:bf:4a:40:
3d:b7:ad:55:4e:90:fd:2c:39:b2:81:71:11:55:9b:ed:a4:01:
c1:83:8f:54:00:cb:c4:01:e1:71:a0:e8:e4:88:b9:59:7c:1e:
0b:0e:51:5d:b7:cd:eb:7f:19:5f:14:c6:ed:78:c6:10:29:f9:
2c:07:77:12:a4:1b:d9:90:c1:ae:b2:2c:db:ea:71:ee:88:a8:
c1:84:44:b7:7c:b6:d7:c1:ca:79:e8:aa:31:9c:79:56:76:47:
50:68:d0:e7:95:a6:64:aa:45:fe:66:3a:11:fc:95:94:44:2d:
cc:bf:17:80:cc:33:f1:9f:aa:f9:d5:f4:14:fc:45:42:bc:47:
7c:92:78:de:0f:4c:fe:5c:89:5e:99:42:12:0e:fe:a9:04:a1:
af:9a:62:e0:f7:fe:00:6f:4f:5d:f2:df:d6:c3:e2:43:10:80:
eb:0d:75:29:4e:52:8d:26:0c:f8:36:b0:3b:62:06:0e:7c:46:
8f:fb:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:10:07 2025 by rpki-client