Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS60024.roa
File: AS60024.roa (raw, json)
Hash identifier: v3dEf/vHSYRmPCHj10ZLclWfErrdXx2uyRJ+ybPkuw4=
Subject key identifier: 9D:05:BB:D4:F9:DA:5A:66:56:55:95:1F:7D:97:25:A0:9D:22:06:7C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0F75C8E7F45D8C27C57A68D77CE8DC2F75BB2903
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS60024.roa
Signing time: Wed 08 Oct 2025 06:43:40 +0000
ROA not before: Wed 08 Oct 2025 06:38:40 +0000
ROA not after: Wed 07 Oct 2026 06:43:40 +0000
asID: 60024
IP address blocks: 2a0f:9403::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:75:c8:e7:f4:5d:8c:27:c5:7a:68:d7:7c:e8:dc:2f:75:bb:29:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 8 06:38:40 2025 GMT
Not After : Oct 7 06:43:40 2026 GMT
Subject: CN=9D05BBD4F9DA5A665655951F7D9725A09D22067C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:58:30:25:e5:46:4a:64:05:b0:60:51:6e:
e7:5b:8b:e1:94:d7:48:ff:fd:8b:66:2e:9b:f7:b3:
6c:6d:82:04:6d:a7:d6:0c:d2:c1:8b:44:a7:66:59:
4e:fe:c5:fa:b4:90:ea:ad:d2:5c:02:4d:54:93:9f:
35:02:0f:9f:93:27:3c:02:7f:5a:66:e6:29:ff:a1:
2e:1c:33:14:e1:58:a3:5a:8b:5b:0a:15:df:44:49:
6d:88:3c:85:57:9e:19:36:04:db:13:1f:93:25:f9:
de:a8:75:35:c4:44:66:fb:2b:35:8e:e3:25:7b:33:
44:d9:44:5c:b1:b4:45:88:f8:b2:b4:20:89:e6:77:
49:d1:e2:76:23:20:0a:ac:64:8b:91:ae:88:53:c1:
03:80:db:a7:f9:77:62:45:3c:cd:3c:d1:d5:bc:29:
e5:67:c7:8c:07:2a:62:33:53:70:2b:e7:f9:35:c0:
e1:d1:a2:0f:65:47:c3:b5:70:b3:cf:a1:8e:5b:e1:
d7:75:c6:e6:f5:18:b1:31:6d:b3:9e:20:f1:18:46:
8c:93:d8:3d:0d:2e:b6:4f:ac:cd:00:fe:86:40:6b:
b3:bc:13:ee:b3:4f:0a:04:a1:b6:d4:46:61:84:40:
77:85:eb:9e:80:56:48:dc:90:43:af:d3:05:f1:bb:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:05:BB:D4:F9:DA:5A:66:56:55:95:1F:7D:97:25:A0:9D:22:06:7C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS60024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9403::/36
Signature Algorithm: sha256WithRSAEncryption
5d:96:dd:6c:b8:24:d8:d7:2c:f6:1e:92:85:5b:11:37:e3:02:
e7:77:4a:66:ab:ad:6e:6e:19:c3:39:5c:ef:85:db:fc:9c:2e:
8f:f9:d7:28:22:13:93:9a:fd:ae:95:a5:88:12:e1:dd:fd:86:
5b:a4:e5:78:d6:02:9e:cd:16:45:6b:33:aa:8a:34:4e:9a:10:
13:3f:0a:96:db:2a:9b:f2:d0:a9:72:ec:03:a2:8c:c9:6d:d7:
7b:23:1a:65:53:d3:37:b8:f9:96:4a:bd:a1:cf:26:9c:74:02:
cf:66:c9:fb:44:49:68:44:10:73:c2:85:30:cf:92:a4:4e:12:
9f:42:fa:c0:82:f7:65:48:85:d8:5e:dc:15:c1:bf:05:03:85:
7c:b9:8c:0e:9f:40:fc:d3:87:5d:b9:98:72:e0:e3:51:92:44:
6b:86:04:b9:f9:90:a9:e8:8a:2b:0f:8d:8a:1e:ce:42:52:43:
0e:f6:22:56:6d:65:40:f6:4b:04:9a:3e:63:15:e2:e3:67:e2:
9b:d4:06:4b:19:fc:02:ea:6d:ac:21:89:71:6c:aa:64:40:dc:
13:01:b8:35:ae:35:83:7a:8e:11:43:f7:1c:6c:ae:13:47:a4:
49:ae:ab:6e:3b:02:ca:16:20:d2:a3:b2:16:eb:e9:32:68:9a:
4b:26:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:06 2025 by rpki-client