Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: KBoxs8VfFEHa6UAkXLtlZ4U0iQ3hBNSRZDdpE46B74g=
Subject key identifier: 50:26:A4:9C:37:A3:36:4D:A1:AD:D0:EE:C7:25:2E:A4:42:05:C6:7A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 783B5810CBD8A7130810C5255AFFD18A80129DDF
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
Signing time: Tue 17 Jun 2025 03:14:58 +0000
ROA not before: Tue 17 Jun 2025 03:09:58 +0000
ROA not after: Tue 16 Jun 2026 03:14:58 +0000
asID: 61138
IP address blocks: 2a0f:9400:7350::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3b:58:10:cb:d8:a7:13:08:10:c5:25:5a:ff:d1:8a:80:12:9d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:58 2025 GMT
Not After : Jun 16 03:14:58 2026 GMT
Subject: CN=5026A49C37A3364DA1ADD0EEC7252EA44205C67A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:7f:23:a3:98:d4:3a:a3:8a:df:3e:e9:dc:
a2:8f:30:91:41:57:a4:90:67:1a:c6:2b:77:30:2f:
73:15:d2:02:a7:49:14:82:d5:66:e1:14:73:55:61:
5f:bc:1a:4b:9a:f4:ce:32:ce:07:ab:5d:90:09:61:
77:c1:76:e4:9e:b3:f6:46:fe:05:1d:38:1a:bd:a7:
25:42:70:52:23:d4:39:8a:bb:f3:82:25:df:af:45:
9c:ce:2e:1a:ce:05:29:23:74:d0:ae:51:fe:a3:f5:
62:24:96:52:71:d8:7d:0c:bd:22:5b:bf:f2:ca:6b:
03:e4:84:7c:1a:bc:6c:a5:fd:04:47:be:39:55:d9:
e7:71:45:8c:48:ed:71:ee:7f:e1:4a:06:2d:d2:ad:
61:51:50:d8:05:c1:30:8d:de:d9:86:91:c5:b3:ed:
f3:17:88:f4:61:b9:59:dc:06:76:71:bb:b2:de:10:
82:f1:7b:cf:d9:84:d9:6e:39:51:fe:a9:3f:ba:36:
0c:3d:4b:4f:89:36:f3:f2:eb:1d:ef:0f:35:01:85:
5d:69:9f:e3:32:37:ec:b6:58:02:59:d9:57:e3:34:
e1:da:b6:37:a4:16:c1:3b:25:93:80:7f:50:60:cc:
a1:ae:2f:ac:c5:0a:dd:bc:3c:ff:cd:54:7e:c9:96:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:26:A4:9C:37:A3:36:4D:A1:AD:D0:EE:C7:25:2E:A4:42:05:C6:7A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7350::/44
Signature Algorithm: sha256WithRSAEncryption
47:b9:e9:63:35:97:e8:9c:a5:07:6f:8a:4c:80:6a:5f:18:97:
13:f5:49:f6:86:35:ca:e0:60:c1:37:ef:e9:89:b9:65:19:5e:
77:2b:b4:80:60:e7:b3:a0:b4:0d:db:f1:bb:56:85:9d:c7:22:
87:bc:81:b8:3c:82:e5:47:dd:8c:70:86:b4:ac:66:b7:0d:3d:
71:aa:ad:1d:23:7a:6d:74:11:68:90:8a:32:e2:ed:2c:87:98:
67:4e:0c:8e:69:ba:98:a3:78:25:0b:51:db:f5:44:4c:37:42:
23:1b:c1:a1:d4:07:f4:c5:9c:3c:92:98:70:2c:db:63:3b:b5:
d1:2a:4c:5b:e7:3d:21:88:b5:96:5a:c1:68:46:c5:eb:2d:81:
1a:47:87:79:4c:19:a1:7b:b7:9f:df:08:21:b4:0c:4b:12:ea:
d3:d0:64:b4:d5:44:9d:95:b7:fe:70:c5:44:92:bd:af:fe:70:
cb:af:be:6f:18:5a:43:56:6f:41:de:69:d9:c8:d9:0c:c2:39:
34:ae:eb:5b:ed:5e:fe:24:45:ba:a8:22:6b:8a:b2:5d:a1:0e:
de:46:23:e3:68:cf:ad:0c:e2:cb:45:39:9b:ea:a7:af:6e:56:
5f:ac:58:0b:82:7b:51:62:d0:75:1e:16:62:7b:6e:8b:5e:dc:
f1:04:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:23:42 2025 by rpki-client