Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204044.roa
File: AS204044.roa (raw, json)
Hash identifier: 4UVm1JukpcVXKEGgO61YVXeA9+LiIWST349BVw1WT+Q=
Subject key identifier: 3F:CB:DC:FC:28:B6:69:33:A5:0B:76:76:F7:CB:DF:A6:BD:66:4B:D4
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 691A03F409DB1DC8B9BBB4AB1C0737696704CB04
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204044.roa
Signing time: Tue 29 Jul 2025 05:31:31 +0000
ROA not before: Tue 29 Jul 2025 05:26:31 +0000
ROA not after: Tue 28 Jul 2026 05:31:31 +0000
asID: 204044
IP address blocks: 2a0f:9400:6162::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:1a:03:f4:09:db:1d:c8:b9:bb:b4:ab:1c:07:37:69:67:04:cb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 29 05:26:31 2025 GMT
Not After : Jul 28 05:31:31 2026 GMT
Subject: CN=3FCBDCFC28B66933A50B7676F7CBDFA6BD664BD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:d7:2c:e5:8e:ce:ef:d2:4a:17:b8:ef:a7:
d2:35:8c:02:3b:98:29:a2:11:e0:49:ff:f5:6e:be:
a3:e4:38:03:c1:23:8e:e4:d3:60:7a:90:ec:8a:93:
e9:dc:37:f6:ec:e3:dc:f8:21:e6:7b:be:fc:7d:fd:
da:71:94:24:8d:11:fc:0a:84:8a:65:3f:a9:77:28:
3b:46:b2:3b:82:71:25:a9:2b:ee:64:dc:0b:af:3e:
02:3e:7b:92:3b:0d:6e:9b:b9:89:31:46:ab:96:61:
e1:1e:83:60:48:79:35:82:55:43:b0:b7:a3:88:27:
76:15:37:c8:bc:14:31:c9:79:88:f3:3d:54:f0:aa:
e7:9c:01:67:62:d9:3c:24:8d:7b:ce:33:5c:81:e7:
2b:9b:22:24:47:57:7a:7c:a2:49:50:3b:db:ff:b8:
18:e6:6b:e6:46:95:8b:f3:f6:6e:30:29:a9:7a:9b:
d8:3d:57:4f:2d:08:fa:c5:1f:d9:e1:04:e8:b5:22:
d6:10:50:8a:e9:20:da:f2:56:6f:f2:a6:17:23:85:
69:68:c9:e5:67:a8:21:85:0b:6e:3f:c8:b0:6a:33:
b4:59:ff:5e:43:f6:ec:e5:1f:cd:fb:e2:a8:1e:fd:
b9:e4:2e:ae:d7:58:4c:3b:b4:22:12:69:8d:59:b3:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CB:DC:FC:28:B6:69:33:A5:0B:76:76:F7:CB:DF:A6:BD:66:4B:D4
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204044.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6162::/48
Signature Algorithm: sha256WithRSAEncryption
03:a9:53:f4:7d:60:4e:06:8c:44:c2:06:e9:72:96:5c:78:76:
c9:d0:45:38:12:9a:45:ef:5c:46:28:bb:5a:38:3d:ee:19:7a:
60:2a:7d:ed:61:11:7b:a1:82:33:52:49:aa:2e:7b:dc:dd:b5:
a9:7c:d1:f4:ce:15:f6:c5:d0:b3:5e:33:9c:bb:19:35:86:03:
73:a9:17:ea:d8:18:64:84:04:00:b0:3c:98:68:b9:50:45:6b:
39:da:71:e5:de:18:1d:17:a1:1d:f4:fb:f7:f7:aa:af:a8:13:
07:e5:b2:2c:45:8c:dd:d6:50:8f:c0:35:46:85:18:bb:fa:8d:
db:45:ab:d1:ff:ee:70:d5:cf:10:4f:55:75:df:b7:5e:92:9c:
c6:33:ef:c0:12:d2:75:f2:38:40:ae:cf:a3:dd:c9:e0:07:78:
7b:2e:7f:3e:bd:59:f5:a0:5e:d2:7e:3f:50:6f:26:ff:bc:98:
2a:48:e8:92:64:13:9b:c9:da:38:ce:f1:b9:11:57:cc:db:92:
11:fd:23:c6:8a:6c:03:44:9b:f3:18:9f:45:f3:40:ec:6f:fd:
60:86:cc:6d:dd:fe:e2:a5:e8:10:0b:07:c9:53:ef:0b:14:db:
db:4c:88:70:ca:3a:e6:d6:a3:6a:0d:d4:51:f6:b2:c4:3b:21:
a4:82:ee:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:11:32 2025 by rpki-client