Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205987.roa
File: AS205987.roa (raw, json)
Hash identifier: hflYQn7bXZSL7HScu5KCr0E5OGLs7DM57mx9Ah+J1Bg=
Subject key identifier: C5:45:DD:92:9C:C4:D1:BC:BC:98:68:66:44:89:A8:90:F4:C2:84:D0
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 31F1F589E1BA07B6FAE4C09895BBC74F8468DA03
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205987.roa
Signing time: Sun 03 Aug 2025 19:08:27 +0000
ROA not before: Sun 03 Aug 2025 19:03:27 +0000
ROA not after: Sun 02 Aug 2026 19:08:27 +0000
asID: 205987
IP address blocks: 2a0f:9400:6a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f1:f5:89:e1:ba:07:b6:fa:e4:c0:98:95:bb:c7:4f:84:68:da:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 3 19:03:27 2025 GMT
Not After : Aug 2 19:08:27 2026 GMT
Subject: CN=C545DD929CC4D1BCBC9868664489A890F4C284D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:9c:90:a9:fa:14:40:e6:97:7a:4d:66:b9:
21:be:83:b4:0a:ca:a4:4c:c0:41:f0:ce:3e:e9:87:
c6:83:dc:c5:33:0b:15:b6:9c:7a:5d:c5:5d:a9:67:
18:17:34:31:46:27:b0:04:9b:13:0f:df:9a:9b:c4:
a4:e3:44:f9:6b:88:ff:77:d6:cb:6f:16:9a:e8:47:
76:ec:91:43:20:0e:a5:10:10:85:82:a5:b9:9a:23:
6c:e8:29:30:e9:d3:ed:d5:e0:0d:0c:c3:ba:09:eb:
28:e2:ff:8d:3e:2e:c2:c0:bc:e9:f1:3a:67:b2:26:
4f:82:5a:8f:d7:f9:08:96:79:a9:57:eb:a3:e9:a2:
80:a0:57:6e:d4:7a:0d:59:2a:67:b2:d4:08:7c:1a:
d2:80:d7:d1:e6:a1:1a:7b:e2:58:d5:eb:f9:f4:1e:
cb:ca:ac:ac:de:84:d0:4d:59:67:60:e1:8d:bc:d3:
0b:a2:07:4f:e6:eb:df:a1:c4:ea:2c:78:1e:1a:47:
b7:34:af:84:37:38:74:00:ca:61:a9:b4:90:3f:39:
78:46:09:ee:a5:f3:b8:44:db:e0:06:62:95:92:18:
8f:6b:91:50:60:23:e4:fa:71:1b:95:37:63:c8:b3:
87:af:f1:a6:ca:d8:1b:a2:c8:7b:3f:56:cf:7c:51:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:DD:92:9C:C4:D1:BC:BC:98:68:66:44:89:A8:90:F4:C2:84:D0
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6a00::/40
Signature Algorithm: sha256WithRSAEncryption
8b:be:71:4d:64:9d:8a:41:70:d7:22:c2:61:99:66:c0:94:d1:
b1:66:ef:b6:c2:e9:bf:53:2e:e6:7a:8a:83:6d:f7:dd:98:16:
22:43:ca:ec:8c:2f:66:36:ad:69:b6:c3:d8:a0:21:81:90:cf:
03:ec:9b:4e:11:f4:d5:9b:e2:ec:9a:b0:89:8c:33:d3:be:7c:
1b:01:dd:d4:b9:40:4e:a2:84:85:05:96:2d:e4:d9:d3:93:1c:
29:ff:d5:e6:8d:ad:71:41:46:ea:31:06:0e:d4:a4:9c:c8:c2:
09:52:b9:31:90:55:4d:c5:38:69:af:28:d0:8b:ab:cf:e3:da:
5b:e9:7a:f7:aa:dd:f7:99:b7:f3:71:a3:11:6c:20:d7:41:08:
f6:71:90:1f:ba:79:ab:ac:83:d8:59:50:af:8f:f5:5b:44:bd:
e3:c6:cb:fb:f3:4d:20:dc:b5:02:4c:87:21:27:b5:bd:40:f2:
91:ff:b5:68:fb:75:8a:06:1a:49:35:91:b4:82:73:19:d3:f6:
fa:52:96:16:ef:e4:48:c8:ce:5a:91:b3:38:0d:65:8b:39:83:
82:fe:e0:6c:ca:73:a0:f0:ed:be:2c:14:de:c7:70:ba:85:59:
e2:77:c2:ac:f4:c9:3d:0e:dd:b1:6f:be:e2:30:df:4e:98:a5:
f4:55:7a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:19:54 2025 by rpki-client