
Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213092.roa
File: AS213092.roa (raw, json)
Hash identifier: X3hS1jh4HzNnQ0aAzg1/ermVwoFjflJDaBotqJHKm0k=
Subject key identifier: E4:9A:59:12:9B:F1:CF:3F:F4:F2:F5:28:C8:CA:44:B6:66:B6:CF:71
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 52FF4F32E626C6331C684C03CF32CF10987399CB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213092.roa
Signing time: Thu 31 Jul 2025 19:33:39 +0000
ROA not before: Thu 31 Jul 2025 19:28:39 +0000
ROA not after: Thu 30 Jul 2026 19:33:39 +0000
asID: 213092
IP address blocks: 2a0f:9400:6145::/48 maxlen: 48
2a0f:9400:7370::/44 maxlen: 48
2a0f:9400:7370::/48 maxlen: 48
2a0f:9400:7379::/48 maxlen: 48
2a0f:9400:737a::/48 maxlen: 48
2a0f:9400:737c::/48 maxlen: 48
2a0f:9400:737d::/48 maxlen: 48
2a0f:9400:8023::/48 maxlen: 48
2a0f:9400:8026::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ff:4f:32:e6:26:c6:33:1c:68:4c:03:cf:32:cf:10:98:73:99:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 31 19:28:39 2025 GMT
Not After : Jul 30 19:33:39 2026 GMT
Subject: CN=E49A59129BF1CF3FF4F2F528C8CA44B666B6CF71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:fe:f4:aa:d0:a1:48:42:11:fe:23:ca:3a:
f1:34:61:70:35:d8:9e:10:9c:53:f2:4f:47:83:da:
a2:1b:cd:55:e3:ec:c1:db:3a:18:b4:e6:1f:ed:05:
25:f5:cc:95:a9:98:e3:ac:f3:c5:85:92:4d:d9:c8:
2c:9c:a1:30:32:b6:11:6c:f5:a3:47:f6:87:17:64:
0d:ce:67:3a:e1:9b:95:ce:9a:cb:db:3b:fc:d4:65:
74:29:3e:e2:96:12:39:06:b4:27:69:bd:17:5b:67:
5f:07:c4:2c:79:27:32:6d:ee:ea:1e:12:26:ed:59:
e9:02:e9:46:59:17:1e:e3:6d:5f:8d:cf:ab:36:8d:
b1:8a:3e:38:45:fc:f1:3f:96:3b:76:dc:21:bd:ed:
11:29:ac:de:25:1d:0f:e9:cf:10:a8:1f:69:fa:fd:
0e:d2:e6:37:b8:f2:56:e5:c9:dd:a5:28:50:3d:ef:
3a:e9:1d:59:3c:b8:60:3b:da:5d:53:5e:7f:f5:06:
e5:56:98:87:16:fb:8f:e4:a4:69:e5:6b:82:2d:7a:
f4:4a:3e:ab:c1:f0:3b:c3:1c:b0:ab:7c:72:05:7f:
a4:b3:0e:33:6f:df:d9:d1:ef:45:6b:76:1e:88:c5:
93:7a:40:4f:44:8b:d5:9a:ce:2d:83:75:4c:af:60:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:59:12:9B:F1:CF:3F:F4:F2:F5:28:C8:CA:44:B6:66:B6:CF:71
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6145::/48
2a0f:9400:7370::/44
2a0f:9400:8023::/48
2a0f:9400:8026::/48
Signature Algorithm: sha256WithRSAEncryption
a0:5e:56:a8:bf:68:ff:c5:79:6d:aa:69:bc:5a:25:c2:0a:8b:
28:f2:56:e9:2f:67:33:de:00:2a:94:d9:f1:6c:d2:84:de:56:
33:d6:94:50:73:7d:d9:67:dc:f4:3e:48:5b:04:be:e0:14:ef:
90:b6:e0:c2:a9:29:05:34:77:b2:12:ea:40:30:73:fa:75:5f:
b8:c7:d4:69:03:a8:0a:db:b5:f3:0b:dd:d8:3d:d4:98:47:8c:
81:7f:ed:18:2f:49:15:c2:21:f5:7b:fb:2e:2f:7a:fb:34:57:
e7:67:fd:16:be:08:64:ff:dd:f4:1c:6b:00:7c:4a:4e:90:9d:
57:34:9c:80:6a:b4:d9:3a:bd:55:ff:03:3b:7a:ef:4f:7a:2c:
5f:fe:ee:71:4e:85:fd:69:49:84:07:c8:b0:5c:7a:46:d7:90:
8e:0c:cf:95:87:54:00:f9:bd:38:98:5d:eb:79:49:27:7c:6f:
8a:ee:51:15:4b:01:a2:d2:eb:64:86:bc:c8:44:72:3d:d1:f1:
1c:df:41:a8:19:ac:ce:e6:29:ef:c3:65:9e:24:75:80:6c:64:
43:32:ef:6a:70:c3:49:9e:8b:74:bb:67:1c:04:df:20:32:71:
24:cb:16:2c:44:09:85:7e:b9:36:2f:66:f0:59:0a:30:a9:fe:
99:79:28:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:32 2025 by rpki-client