Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215522.roa
File: AS215522.roa (raw, json)
Hash identifier: 5cHp45d+fuPD8kwLHmbS//XHCXiVGgSHt468oZz2WbQ=
Subject key identifier: AA:9E:83:D2:54:0B:56:48:98:CF:BE:11:05:DD:12:2F:E6:92:74:F6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 044253DB3E7E112AA2735835E5A89AE43E0BF565
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215522.roa
Signing time: Mon 28 Jul 2025 05:32:09 +0000
ROA not before: Mon 28 Jul 2025 05:27:09 +0000
ROA not after: Mon 27 Jul 2026 05:32:09 +0000
asID: 215522
IP address blocks: 2a0f:9400:611b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:42:53:db:3e:7e:11:2a:a2:73:58:35:e5:a8:9a:e4:3e:0b:f5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 28 05:27:09 2025 GMT
Not After : Jul 27 05:32:09 2026 GMT
Subject: CN=AA9E83D2540B564898CFBE1105DD122FE69274F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:70:58:ea:87:fc:db:29:c4:28:78:24:e5:
f7:b8:43:c8:12:0a:db:ab:5f:1f:57:8e:e5:7b:74:
89:89:11:0c:61:47:58:34:99:a1:67:17:e7:3b:42:
94:7f:93:3e:93:41:c5:20:31:d9:ba:76:5b:b5:d4:
32:d5:f3:01:5e:8f:54:f1:0f:89:ae:1f:b1:6d:87:
f2:e7:e7:93:a7:2d:76:af:d4:eb:8c:5f:34:d7:ca:
39:21:71:07:b1:1a:64:fa:53:74:e7:fd:88:6c:75:
2c:65:99:f3:3b:8a:8f:10:b7:c4:6a:6e:56:22:0e:
ee:4b:e6:fa:d9:ef:e9:56:c8:0c:76:55:17:90:23:
fe:73:04:b8:d1:6c:75:91:b9:21:0a:ba:e7:2e:ce:
27:9c:f5:c2:a4:db:4d:e9:ce:b4:a7:ef:87:d1:cf:
e9:e6:3b:fa:72:79:d9:09:f7:cd:da:ad:0a:2c:ba:
5e:8f:39:4b:bd:3d:78:7f:c6:be:4b:ad:7e:09:ff:
de:d3:d4:30:44:74:a6:0c:a3:f4:89:93:a8:39:30:
46:0b:94:df:96:95:76:05:56:5c:ce:be:5f:73:8b:
d0:17:b2:58:7e:7a:48:05:f2:4b:16:4d:54:69:e6:
d2:98:9d:c8:81:de:45:ef:4d:a3:d1:6b:ce:98:c8:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9E:83:D2:54:0B:56:48:98:CF:BE:11:05:DD:12:2F:E6:92:74:F6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215522.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:611b::/48
Signature Algorithm: sha256WithRSAEncryption
90:83:af:7f:a5:1f:d9:41:6f:57:5e:40:30:90:2a:47:0c:cc:
a7:17:d5:79:e9:ce:0c:ae:6f:8e:3b:4b:51:59:73:17:5f:1d:
a8:73:82:ee:fc:49:15:c4:5f:86:5b:9b:f5:d7:97:38:7c:2a:
66:cc:24:38:01:6b:0d:1c:83:93:25:31:2e:80:47:6a:7f:bf:
78:77:06:0c:0c:6c:3c:f5:68:b3:96:bf:fb:d4:61:45:97:37:
66:13:2e:6a:17:1a:27:09:a0:e8:54:02:23:f0:bf:fb:c7:9d:
b1:01:f3:fe:17:f1:f7:03:db:a0:ea:d3:ec:61:82:ac:78:e6:
d7:e9:68:08:50:90:63:a6:6a:e9:ca:6f:ea:65:97:74:62:3e:
69:69:85:7e:be:9f:e1:24:8f:56:92:6e:c6:17:51:92:1b:35:
6b:84:fa:af:a7:aa:59:66:ee:da:28:40:c5:72:20:db:ea:4c:
ef:0a:4f:b0:20:b3:a5:d6:6b:78:0b:8e:e3:e4:d0:62:9f:09:
ea:c1:77:b8:b6:69:21:16:08:f4:0e:aa:e1:42:e1:b6:3c:31:
bc:eb:69:67:da:5c:c5:9b:4b:ff:e8:18:0d:64:8d:2a:26:1c:
7d:99:35:1d:75:79:2d:37:81:bc:b6:a4:50:d0:00:a2:24:34:
53:90:3f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:56:20 2025 by rpki-client