Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214344.roa
File: AS214344.roa (raw, json)
Hash identifier: HpqV3H3306zds3sqgihwETyjDbIMNzeJNT2taMZIu1c=
Subject key identifier: 19:EF:47:BA:6D:E9:75:BC:E7:97:AE:04:04:74:CB:14:F7:03:E8:C6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6C52F1EBC3B9CDD879D29D478BE7C2F7B5A15123
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214344.roa
Signing time: Wed 23 Jul 2025 18:30:14 +0000
ROA not before: Wed 23 Jul 2025 18:25:14 +0000
ROA not after: Wed 22 Jul 2026 18:30:14 +0000
asID: 214344
IP address blocks: 2a0f:9400:6119::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 21:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:52:f1:eb:c3:b9:cd:d8:79:d2:9d:47:8b:e7:c2:f7:b5:a1:51:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 23 18:25:14 2025 GMT
Not After : Jul 22 18:30:14 2026 GMT
Subject: CN=19EF47BA6DE975BCE797AE040474CB14F703E8C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:1c:e0:2d:09:3e:ea:d1:57:ec:29:fb:c2:
3d:63:00:c8:bc:5a:1a:94:bc:21:27:98:fd:cd:d2:
eb:eb:31:87:41:b0:60:13:ca:2f:51:57:84:e0:e8:
e5:65:80:50:d4:1f:f7:fc:e1:3d:77:a1:52:6e:0d:
bc:c7:0f:22:e8:7c:f7:f6:f2:bf:fb:01:0e:28:b2:
12:7b:93:66:b1:d9:4e:a7:37:3d:7e:d4:8f:5d:22:
7c:a9:80:7e:27:9c:36:c8:86:f0:3f:8c:ce:20:a7:
ab:77:1c:b2:12:86:b8:8b:23:70:d6:ec:a7:f2:65:
c1:1c:07:8f:89:7c:f8:76:18:1d:25:6d:dd:5d:92:
31:ee:95:8e:e5:c2:b0:10:1d:54:68:89:ce:68:74:
46:2f:c1:39:77:da:c8:6b:24:23:92:ec:30:fd:9e:
06:10:ac:67:2d:a2:93:7b:e3:ac:30:14:92:a0:22:
e7:dd:f7:10:72:8d:c8:ff:a3:df:49:09:16:b1:83:
5a:0d:12:18:ce:23:90:21:b0:01:8c:eb:e1:e1:b6:
50:59:36:2a:a4:b9:47:fd:9f:bd:fd:39:8f:2c:fe:
ec:fb:d8:a8:b4:e5:72:59:97:4d:c5:eb:e3:3b:e9:
07:99:ac:75:25:56:d4:02:ab:4a:c7:99:b8:bb:7b:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:47:BA:6D:E9:75:BC:E7:97:AE:04:04:74:CB:14:F7:03:E8:C6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214344.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6119::/48
Signature Algorithm: sha256WithRSAEncryption
7d:97:de:52:71:54:a2:87:67:71:2f:f0:dc:98:c7:48:c7:fc:
24:f4:af:8a:7f:4e:77:04:4d:bb:73:5f:ec:18:d5:86:6f:3c:
66:84:df:96:f7:2d:91:05:31:7e:10:7d:4d:7c:1e:b4:d6:b2:
d9:fe:b7:96:49:e2:30:55:7e:07:62:5c:f3:59:73:fe:b0:61:
56:2d:76:80:c5:71:8a:0f:26:73:8c:8d:c4:fa:3f:db:01:0b:
c7:42:43:3c:27:43:63:5d:7d:58:8a:f6:ad:43:5e:8b:68:8a:
59:fe:f3:0b:11:18:b9:04:46:e4:0d:2d:a8:5f:e3:00:2d:99:
b5:07:aa:1a:15:04:3b:92:e2:95:dd:5b:aa:f2:6a:a9:80:08:
75:db:72:29:67:b7:ef:6e:2b:7f:f8:20:f3:eb:6a:87:f1:50:
7d:ad:c7:e9:ae:a4:eb:e0:fe:8e:81:27:88:3b:e8:57:2c:f3:
3b:3c:71:d9:07:23:ca:30:1f:ce:d5:2a:1d:75:d4:58:e7:a3:
08:df:08:fd:ef:07:11:b4:35:2a:4d:8d:43:c7:1c:90:c7:49:
af:95:5b:37:4a:9a:bf:01:1c:1d:e3:a8:61:0b:41:9a:e0:ad:
d0:d8:66:f1:ed:96:7c:8a:46:b5:2e:e1:40:f6:02:16:6b:c6:
32:e7:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:11:16 2025 by rpki-client