Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
File: AS205965.roa (raw, json)
Hash identifier: u89mWweNEbOz5kk2EDdy2OAnrSRjGJWYI03UPIIILtA=
Subject key identifier: B1:75:6A:A7:BE:5F:05:72:93:0B:52:3E:78:29:65:93:CE:DE:13:E9
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 76E38A7A3CDDFE229168F0926FEE1314F3368E70
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
Signing time: Sat 07 Jun 2025 16:40:38 +0000
ROA not before: Sat 07 Jun 2025 16:35:38 +0000
ROA not after: Sat 06 Jun 2026 16:40:38 +0000
asID: 205965
IP address blocks: 2a0f:9400:6169::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e3:8a:7a:3c:dd:fe:22:91:68:f0:92:6f:ee:13:14:f3:36:8e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 7 16:35:38 2025 GMT
Not After : Jun 6 16:40:38 2026 GMT
Subject: CN=B1756AA7BE5F0572930B523E78296593CEDE13E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:e8:c0:a9:23:f6:3d:39:29:21:af:9a:e2:
c6:90:87:10:99:71:a8:10:52:9b:0e:46:cb:03:41:
05:76:be:cc:55:b8:ae:6f:fa:3a:b8:3e:1f:c4:42:
d5:2d:4b:69:a7:de:55:60:c4:e9:f8:55:4b:9b:ec:
72:dc:7b:da:0d:b9:5f:f3:52:08:e0:7a:6c:48:37:
21:45:af:14:1e:b6:4d:46:80:c7:22:1f:80:02:01:
f6:d5:19:95:87:e4:d0:42:92:1a:6a:42:21:1b:85:
07:0b:45:c3:29:80:17:53:37:d3:e5:56:66:a2:78:
49:aa:e3:a7:0c:3e:88:9b:96:66:6d:75:dd:47:19:
bb:fa:fa:e3:0d:e5:1a:91:9e:be:b5:1f:ab:9d:e8:
14:1f:db:b7:01:7e:66:0e:ae:cd:77:07:82:73:df:
2f:ef:dc:dd:b4:8c:b8:ad:3c:2c:65:fb:dc:4a:d0:
f8:c2:b7:10:98:29:54:4e:7a:b8:57:3c:bc:0d:e0:
e6:ed:77:ec:80:6e:d3:66:98:43:97:c0:68:38:14:
d6:10:60:8e:6b:d4:af:5a:10:f8:f3:90:68:b5:aa:
ab:a0:68:c6:43:dd:19:ad:f2:ab:4a:ad:d1:3f:43:
0c:0d:aa:52:1f:62:fe:23:b0:35:fe:c7:e9:80:e6:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:6A:A7:BE:5F:05:72:93:0B:52:3E:78:29:65:93:CE:DE:13:E9
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6169::/48
Signature Algorithm: sha256WithRSAEncryption
7b:04:88:fd:86:50:08:94:af:40:f2:ea:6e:b4:19:82:47:84:
99:8a:07:90:da:32:cb:47:c0:54:0b:21:1b:3c:75:a7:46:21:
7a:6b:cf:41:da:89:29:f5:92:33:29:21:28:54:2d:8c:02:6a:
5e:55:ec:75:8f:d0:3d:fe:4d:3e:f0:3e:ad:78:33:97:f3:be:
a2:53:79:3a:0a:1e:98:ac:d3:69:0e:48:a7:5d:ce:73:72:9c:
e8:ab:be:fb:37:e3:dc:0f:f6:8a:35:4f:45:25:d9:4a:10:3a:
be:09:e1:77:6b:aa:ea:69:ae:39:3c:bc:32:67:f3:48:95:1c:
1f:d8:8d:8e:f8:95:60:8e:7a:87:4e:51:a2:bf:ae:81:b8:35:
a7:a3:60:eb:db:3a:f6:df:2c:9b:12:b2:b6:51:d9:50:e8:9f:
f1:a6:e8:32:c1:80:b9:aa:bb:b6:3a:99:90:61:88:d7:7e:3a:
70:ef:97:c1:0b:db:28:11:46:f1:d5:5f:06:39:1b:d7:fa:16:
25:54:66:7a:2a:56:83:27:89:41:7e:6c:40:c4:14:82:4b:c1:
89:5c:89:fe:e3:01:5b:8e:74:7d:7e:5d:61:b2:31:41:91:c0:
0b:55:e1:05:11:96:5b:e4:21:13:77:0b:2f:74:63:8d:65:61:
52:61:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:15:49 2025 by rpki-client