Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9833.roa
File: AS9833.roa (raw, json)
Hash identifier: GlD1lbHQ2pFeYmssOEby3cBZQCbNca/7OXJnB/DKvrY=
Subject key identifier: E1:DD:53:42:D6:7C:4B:35:F0:E3:E0:1B:FA:8F:3C:7B:33:CF:1A:04
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0C78B07633F7042E5AE33E6DE355241645E0564B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9833.roa
Signing time: Tue 17 Jun 2025 03:14:59 +0000
ROA not before: Tue 17 Jun 2025 03:09:59 +0000
ROA not after: Tue 16 Jun 2026 03:14:59 +0000
asID: 9833
IP address blocks: 2a0f:9400:7826::/47 maxlen: 47
2a0f:9400:7860::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:78:b0:76:33:f7:04:2e:5a:e3:3e:6d:e3:55:24:16:45:e0:56:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:59 2025 GMT
Not After : Jun 16 03:14:59 2026 GMT
Subject: CN=E1DD5342D67C4B35F0E3E01BFA8F3C7B33CF1A04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d8:c1:a1:6d:c4:a6:f6:05:86:82:f3:30:6d:
6a:a8:de:55:de:00:d8:41:c0:7a:dc:37:8e:a2:46:
6c:c5:ce:2d:60:33:6d:6f:f0:28:10:28:7a:6b:f7:
8c:0f:4f:0f:b4:d0:b4:ff:07:93:7b:92:c2:95:04:
53:e4:62:a4:90:5a:0d:52:96:19:78:98:71:a1:90:
5d:97:a2:c4:71:df:72:02:ba:3e:a2:bc:e0:6b:cf:
c1:38:62:36:5c:2d:bd:f8:53:00:2d:f0:14:ab:ae:
88:b8:4a:c7:12:c6:d6:f4:95:f2:06:df:ca:69:3e:
ce:e2:20:aa:f8:0b:14:ac:c4:d3:3d:85:66:28:22:
ed:97:59:a5:6d:84:d0:cd:c2:4c:00:16:ec:1b:41:
cb:a6:26:eb:72:c0:78:af:66:b8:be:a1:58:db:51:
02:6d:3b:b7:54:d6:da:8d:2e:7c:dd:68:d6:de:a8:
e7:39:e5:ac:4a:2a:62:2d:d0:f7:e0:9a:37:aa:a1:
db:d1:13:8a:29:5c:35:83:aa:bc:b9:4d:aa:bb:a0:
3c:e2:4f:b0:d0:82:09:fa:ff:dc:66:ca:4f:2b:0a:
35:93:7b:4d:8c:f3:a0:5e:07:3d:ba:cf:15:7e:7e:
5f:a7:6b:de:f2:8e:e7:0a:5d:7b:e8:79:ff:87:9d:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:53:42:D6:7C:4B:35:F0:E3:E0:1B:FA:8F:3C:7B:33:CF:1A:04
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7826::/47
2a0f:9400:7860::/47
Signature Algorithm: sha256WithRSAEncryption
06:36:c0:0b:50:e1:30:50:88:6e:76:bb:54:2d:14:84:29:78:
ab:6c:c2:43:92:d8:cf:c2:9e:87:6a:0e:ea:87:f4:ff:bb:36:
aa:4e:9d:2e:8a:21:b5:01:9e:0c:85:37:ef:09:7e:5f:aa:df:
98:de:88:b1:c9:40:8d:46:b0:e8:99:f0:60:92:44:09:58:21:
cc:99:16:b3:16:c9:45:6b:b0:ec:10:72:ea:09:42:25:82:55:
20:38:5e:cd:3b:7c:88:47:67:ea:e8:50:c4:7d:ae:cd:3c:96:
ea:5e:56:fc:4c:22:2a:a0:65:10:82:8c:93:84:d6:4b:87:0e:
ea:63:6f:b7:af:44:a2:d4:e3:b0:e2:c2:56:05:6d:44:fa:ca:
0e:cd:a6:66:44:ee:15:90:ab:1b:db:6e:ea:cb:1c:ce:b7:cd:
65:f4:70:06:71:2e:8d:8b:5b:d3:b9:16:92:de:4a:ec:42:20:
fe:76:fb:5f:c5:46:32:c4:86:3c:71:4a:99:0b:87:96:7c:33:
1e:4f:c7:21:ef:bf:6c:b3:05:ed:e3:57:e1:b9:be:47:14:93:
83:44:12:66:95:7c:f6:02:5e:af:a3:de:61:f7:d4:28:25:37:
d8:89:37:73:79:83:f8:7e:6b:95:ad:86:d7:e3:c1:f3:b1:4f:
87:16:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:26:48 2025 by rpki-client