Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214203.roa
File: AS214203.roa (raw, json)
Hash identifier: lfXBS6SZCDWy+S3BDFQAG0J8mbu1Uwkk7FveTlnE1w8=
Subject key identifier: DA:B5:61:4F:EF:91:22:49:25:5B:20:16:57:DB:76:7C:0C:ED:BF:02
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 01B0ECE0BB76AF7DC5BED33DD06FE1ECD56DB6F3
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214203.roa
Signing time: Tue 28 Oct 2025 02:18:42 +0000
ROA not before: Tue 28 Oct 2025 02:13:42 +0000
ROA not after: Tue 27 Oct 2026 02:18:42 +0000
asID: 214203
IP address blocks: 2a0f:9400:6163::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b0:ec:e0:bb:76:af:7d:c5:be:d3:3d:d0:6f:e1:ec:d5:6d:b6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 28 02:13:42 2025 GMT
Not After : Oct 27 02:18:42 2026 GMT
Subject: CN=DAB5614FEF912249255B201657DB767C0CEDBF02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:24:81:66:e0:d4:aa:86:ce:26:ff:fe:3a:
f7:68:57:ee:dc:7b:c6:fe:17:89:a7:3a:27:c3:e5:
68:4b:c1:e5:b8:fc:6d:5c:3f:6a:49:06:1c:b4:39:
bf:c4:7a:05:93:51:2c:5d:16:d1:f4:92:68:18:38:
eb:3d:5c:0c:f0:e5:4b:be:cd:a4:ec:72:7b:6f:56:
2c:67:94:bc:10:f5:c3:b5:41:95:a6:1b:e8:26:f4:
28:fb:15:40:df:e0:69:3f:4a:5f:b6:51:e1:09:f9:
57:de:ad:65:fd:79:d4:e7:06:3c:56:7a:1d:a0:11:
50:8b:6a:a3:f9:5d:17:b3:df:f4:47:58:1a:e4:06:
9f:39:98:57:6c:7b:8e:dc:d4:e7:0c:5e:37:93:b5:
a3:51:31:9f:4b:9d:07:19:c5:3f:38:5e:c1:34:fd:
55:90:fb:b4:85:0f:69:91:c1:a3:56:7c:67:ce:74:
e8:03:c1:83:b2:20:2d:75:e4:31:84:24:96:2b:0b:
9b:9d:e4:06:5f:e2:62:ab:33:0e:cd:08:e7:66:2b:
87:e5:ce:6e:d0:d3:39:bf:2a:ab:d2:e7:d1:42:bf:
40:48:6a:07:49:ba:cc:61:ab:63:ed:ec:56:5b:92:
98:92:60:69:de:60:45:fe:24:35:59:b7:79:3d:1e:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B5:61:4F:EF:91:22:49:25:5B:20:16:57:DB:76:7C:0C:ED:BF:02
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6163::/48
Signature Algorithm: sha256WithRSAEncryption
27:00:bf:cf:d1:e1:24:c8:2a:65:ba:d0:41:b2:42:b9:80:de:
ac:e8:e5:f8:90:2a:f2:d0:37:25:13:78:46:a8:4c:0b:70:c8:
64:16:2d:1e:8f:20:5e:f3:0f:94:7b:e3:9b:3e:a0:d7:15:9c:
bd:e8:14:57:56:3a:48:0e:61:49:c7:80:ba:43:a1:2c:6d:fc:
ef:57:ca:82:ec:91:ca:09:31:7c:fd:4c:74:65:eb:ca:cc:65:
bd:ce:d4:cc:05:7d:7f:86:8a:49:82:a0:87:30:bc:52:11:20:
4e:84:75:7a:bc:8f:34:c9:9d:c3:91:e5:83:6d:9e:33:bd:c2:
e9:eb:1d:0d:b2:fc:29:b8:a8:33:55:fc:c8:d1:ca:a9:34:06:
f0:b3:63:ad:a1:13:e5:a1:d0:a1:0c:a1:5f:09:aa:dd:f2:73:
83:f1:3d:90:4a:75:1e:8d:a9:cc:50:c0:55:ae:26:14:20:34:
f4:5e:26:2f:2f:38:37:90:c2:e0:e4:65:02:e2:90:d4:bc:61:
ea:08:d0:40:6a:40:31:12:00:5b:83:e3:4c:11:57:53:16:44:
b9:8c:f5:bc:f5:20:6e:30:e1:0b:29:1a:8e:e4:f4:79:a9:d3:
98:d9:98:9d:3a:00:59:75:24:bd:32:f2:4a:be:be:80:7a:c2:
1e:81:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:58 2025 by rpki-client