Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: nqgumsGjypp5RLd7DnnG5uf+MEMjhE+XHxzMLs6KhqI=
Subject key identifier: 9B:96:5E:47:72:06:50:14:62:97:2B:52:71:8B:81:D9:0D:44:9C:2A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4855591A1E194F81376E4AC6AF9D6104A1EAC9D2
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
Signing time: Sat 07 Jun 2025 16:40:30 +0000
ROA not before: Sat 07 Jun 2025 16:35:30 +0000
ROA not after: Sat 06 Jun 2026 16:40:30 +0000
asID: 20473
IP address blocks: 2a0f:9400:610e::/48 maxlen: 48
2a0f:9400:6167::/48 maxlen: 48
2a0f:9400:690a::/48 maxlen: 48
2a0f:9400:690b::/48 maxlen: 48
2a0f:9400:693e::/48 maxlen: 48
2a0f:9400:7386::/48 maxlen: 48
2a0f:9400:750a::/48 maxlen: 48
2a0f:9400:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:55:59:1a:1e:19:4f:81:37:6e:4a:c6:af:9d:61:04:a1:ea:c9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 7 16:35:30 2025 GMT
Not After : Jun 6 16:40:30 2026 GMT
Subject: CN=9B965E477206501462972B52718B81D90D449C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:e9:eb:62:43:0d:d7:1c:fa:d7:85:f0:87:
d8:60:7a:61:35:81:5f:e8:be:1e:ac:65:81:6e:ba:
54:78:fc:eb:f0:59:02:23:d5:c7:0b:95:eb:3c:fc:
5b:b2:18:78:fc:63:b4:3d:97:24:fe:1d:e7:f6:4d:
03:ef:aa:86:cf:30:c5:f6:6a:7b:22:01:4c:99:58:
ad:c3:7d:78:06:9d:4e:ec:c6:9b:d9:17:69:7c:f5:
51:1b:0f:15:cf:44:c8:bd:53:7c:88:4f:80:9a:16:
29:3a:ee:e2:6c:4f:e9:30:85:40:d3:be:79:46:0f:
95:e0:29:8d:31:b0:ab:5d:c1:81:2f:e7:a4:b5:85:
20:a4:bc:f1:7c:f0:b1:19:60:92:3f:d0:61:a2:78:
6b:25:3c:c4:48:25:b5:bd:d7:ce:6b:4a:57:ba:02:
0c:d5:3c:07:ae:8d:b8:85:78:df:59:83:d5:18:7f:
99:de:8f:2b:77:8c:d8:1e:11:5c:cb:2f:fe:67:e6:
3b:b3:e1:af:2c:ee:bc:b9:2e:e5:84:90:e3:b5:d5:
ff:7d:0b:1c:2f:96:0f:01:d6:ba:0c:d8:82:fc:78:
5b:f5:ae:a5:37:38:1c:6e:98:56:10:ed:15:e7:4d:
bb:6f:f7:18:cc:15:4b:d1:21:29:8a:9d:55:50:62:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:96:5E:47:72:06:50:14:62:97:2B:52:71:8B:81:D9:0D:44:9C:2A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610e::/48
2a0f:9400:6167::/48
2a0f:9400:690a::/47
2a0f:9400:693e::/48
2a0f:9400:7386::/48
2a0f:9400:750a::/48
2a0f:9400:8020::/48
Signature Algorithm: sha256WithRSAEncryption
81:66:d3:e7:a8:37:00:2d:da:4f:b1:71:29:ae:89:89:eb:58:
be:64:fc:b3:af:cc:41:dc:27:93:70:88:9a:db:6e:ec:90:03:
2b:d4:1c:61:50:b7:c6:6e:3b:15:7b:a2:a6:ce:64:ff:0c:2a:
bf:f5:4f:22:88:0d:37:34:17:f1:53:89:0e:95:4f:06:fc:d6:
5b:99:52:0d:2d:a2:dd:6a:15:21:c4:82:be:5e:30:c6:bc:ba:
c6:34:1e:ab:a3:ff:60:27:bd:9c:45:04:c7:c8:93:33:2c:70:
af:f3:36:4e:e3:69:54:6a:94:a1:30:31:e8:ed:7f:76:28:1f:
45:2e:44:77:ef:c6:dc:0e:8b:ff:d4:99:65:e9:1d:9b:16:5c:
71:1b:a0:be:46:f1:3b:9d:d2:d9:1c:f1:c9:0d:3d:96:32:ee:
27:38:60:fa:e4:db:25:b8:9f:09:eb:9f:fa:5c:7e:03:e1:46:
46:a2:84:8e:05:78:60:a0:35:f3:af:47:78:2c:1b:d8:04:7e:
2e:e9:34:ea:fc:fc:28:e1:d3:56:46:1a:9c:73:31:74:1b:e2:
81:e9:04:9c:c3:ab:e1:0f:75:24:dc:37:c3:91:9b:5b:05:9c:
80:24:72:d8:e1:86:7c:a3:84:4f:ef:e3:d7:2d:14:34:80:97:
67:54:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:21 2025 by rpki-client