Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202464.roa
File: AS202464.roa (raw, json)
Hash identifier: 8SHaMLhc/dVFDRp0C1XEG/K8mvm3lU52J5EoAvmOqeI=
Subject key identifier: A6:F5:5C:C7:39:A9:83:1F:89:55:D2:1F:9F:57:0A:A7:3D:3E:7F:4A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1DDC668A2DAB97879F0B9184D459526BDAB7CE52
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202464.roa
Signing time: Tue 05 Aug 2025 11:35:52 +0000
ROA not before: Tue 05 Aug 2025 11:30:52 +0000
ROA not after: Tue 04 Aug 2026 11:35:52 +0000
asID: 202464
IP address blocks: 2a0f:9400:7509::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:dc:66:8a:2d:ab:97:87:9f:0b:91:84:d4:59:52:6b:da:b7:ce:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 5 11:30:52 2025 GMT
Not After : Aug 4 11:35:52 2026 GMT
Subject: CN=A6F55CC739A9831F8955D21F9F570AA73D3E7F4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:ad:d4:14:f5:55:57:bb:51:d5:5d:f6:7e:
2c:75:50:35:37:9f:4d:12:70:9f:c7:c1:d4:a4:85:
30:b7:b3:1f:e1:2f:12:d8:24:30:99:cd:db:75:dc:
01:69:a6:dc:90:87:53:5d:2d:a6:86:65:d3:dd:3c:
8c:b9:28:e0:91:96:b7:70:34:6f:69:e7:46:c7:45:
9f:12:1b:8b:a9:ca:05:25:24:a4:e9:95:ff:30:66:
dc:bd:b4:13:2a:cc:85:98:9e:07:64:d7:e4:23:41:
ad:15:56:ea:4d:58:47:4c:b2:82:72:33:78:18:5b:
57:ac:a0:1c:df:ac:49:31:48:23:3f:59:47:56:e4:
30:43:ae:f6:07:c6:b3:25:0d:34:a6:32:7d:5e:81:
54:86:5d:31:25:ab:69:fd:3a:0e:3f:3c:f0:d1:5d:
a7:f3:69:1f:39:a5:40:95:1e:bf:56:64:ab:31:85:
1c:85:2b:a3:95:71:f9:a4:de:3f:5f:68:45:3c:6e:
ce:02:0f:36:c1:cb:78:2c:f5:9c:0a:e7:64:da:ea:
53:e0:21:c1:76:c9:7d:26:cc:54:8a:f1:0a:cc:e0:
a3:c5:93:71:ed:94:d6:af:1d:c1:18:17:a8:1d:79:
de:f5:76:19:48:5d:1d:1b:49:9c:22:ac:85:d3:cd:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:5C:C7:39:A9:83:1F:89:55:D2:1F:9F:57:0A:A7:3D:3E:7F:4A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7509::/48
Signature Algorithm: sha256WithRSAEncryption
74:5f:1a:fe:7b:6f:f6:ef:b9:dd:20:ca:28:a9:b8:5e:8b:0d:
28:96:fc:2e:4e:e5:22:95:b1:5d:03:be:8c:43:12:3e:47:80:
5f:b5:3f:53:e3:d7:5a:12:3c:de:94:42:45:8f:5f:f0:b1:8e:
da:19:3c:d3:cb:0f:cc:b8:c7:77:d0:c7:70:f3:d4:d8:67:7c:
81:bc:77:db:73:70:18:a7:33:d0:97:13:53:28:8d:c4:c6:60:
7b:95:a0:c6:f7:1b:e1:0b:e3:ef:65:6d:37:d8:be:c2:a0:85:
03:a6:ee:a3:4f:29:14:c3:b7:82:80:03:91:0e:b3:69:a7:5c:
b4:d8:00:26:43:e1:9f:49:80:c9:1d:55:81:45:b2:d3:e5:9e:
a7:87:af:b8:2b:8e:8d:22:af:49:38:9d:ea:a8:3a:75:e1:a3:
37:db:fd:5d:21:34:93:2a:41:a9:70:96:54:47:c3:1e:ca:56:
76:76:52:8b:f3:bf:61:94:f3:ef:ef:de:2b:79:53:17:4b:3c:
a9:07:f4:a7:fa:c7:39:60:44:45:e8:cd:b2:17:bb:ed:9a:d1:
42:35:d6:19:3b:10:9d:2d:14:a9:93:3c:c6:92:50:99:47:c9:
8d:36:48:15:8a:7b:8e:12:cc:8f:dc:9e:4a:7e:78:9a:76:c3:
d6:fd:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:57:19 2025 by rpki-client