Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216382.roa
File: AS216382.roa (raw, json)
Hash identifier: LNgIjPfuPhR94Irp9lMgtYdZnM1vfvbO7UvaqdKO2TY=
Subject key identifier: B5:5D:5A:BE:10:1F:F7:43:51:EA:49:CB:AE:49:79:3D:5C:EA:74:DA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2B597EC3ADE9F95DE16EF9BA8809DC33B121022E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216382.roa
Signing time: Thu 31 Jul 2025 03:33:21 +0000
ROA not before: Thu 31 Jul 2025 03:28:21 +0000
ROA not after: Thu 30 Jul 2026 03:33:21 +0000
asID: 216382
IP address blocks: 2a0f:9400:6900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:59:7e:c3:ad:e9:f9:5d:e1:6e:f9:ba:88:09:dc:33:b1:21:02:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 31 03:28:21 2025 GMT
Not After : Jul 30 03:33:21 2026 GMT
Subject: CN=B55D5ABE101FF74351EA49CBAE49793D5CEA74DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:2b:91:c1:e7:2e:5a:bc:b3:50:75:a4:74:
15:88:e6:45:ea:44:52:37:3c:b8:6e:09:62:9a:d5:
a8:1a:2d:81:aa:e3:a7:5a:73:f9:f8:e4:16:b3:d1:
69:75:8f:ee:2c:4a:03:90:bd:51:9e:79:43:00:97:
b0:01:56:fb:3c:38:ee:3d:e9:df:78:c6:b9:bd:64:
2a:b2:de:81:3c:cf:48:82:27:35:2b:82:03:6e:ce:
1b:d3:31:d3:e7:7f:67:92:3d:38:2f:90:7b:6f:d3:
88:a8:68:93:7b:bf:14:6b:be:24:7b:75:5b:9d:62:
e3:14:35:be:38:32:15:71:c2:1c:e9:d1:d0:f1:5b:
60:f3:99:02:da:66:6f:6b:7c:b3:d3:d3:97:82:f4:
9d:44:04:24:47:be:11:f4:77:ce:c6:27:5d:b3:34:
c5:3d:41:84:a2:a4:78:e1:07:7e:08:dc:71:e6:8b:
26:1e:22:be:52:d0:84:cb:44:57:c2:ad:7d:64:32:
9c:a0:49:d4:81:ae:f4:49:1a:e5:00:b1:a8:d5:a2:
a0:7e:67:4b:85:af:b6:04:45:fa:ec:05:5b:6d:73:
4b:6e:b1:7e:34:f5:bb:a4:35:1f:47:42:c0:f4:78:
89:9a:c4:d3:98:29:25:63:bf:71:49:cd:55:f2:b6:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5D:5A:BE:10:1F:F7:43:51:EA:49:CB:AE:49:79:3D:5C:EA:74:DA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216382.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6900::/48
Signature Algorithm: sha256WithRSAEncryption
79:d2:d8:26:1e:64:8a:2c:d9:f2:93:fb:4b:a3:7a:b0:2e:d4:
82:8f:7f:86:20:36:32:04:d5:de:30:1a:83:58:15:ba:ef:1e:
59:59:8d:24:3a:8c:e5:a6:82:7e:fa:ff:27:34:57:cd:2f:64:
09:48:5d:9b:f5:20:ce:25:e5:38:3d:cc:ab:37:08:bd:0d:7c:
19:ee:56:90:a8:a2:f8:c8:e9:ab:f9:6c:73:b4:55:e5:1c:c0:
ac:11:c1:c4:e9:e3:51:3a:7c:db:58:54:9c:f1:68:8a:73:8a:
8b:05:f1:45:48:2a:a4:88:b4:f1:6e:f0:09:03:aa:21:38:fe:
67:57:a6:8f:c7:cf:1e:6f:a8:7b:42:01:f1:e9:27:1e:ad:3f:
36:3a:d9:6f:15:33:37:34:08:e9:5e:a5:33:67:40:17:70:1b:
c4:73:64:2b:ff:43:cb:a9:0f:85:52:45:ea:bc:f8:e7:ab:e2:
73:db:50:7d:e4:f2:b6:1a:ea:60:2c:00:5b:fb:9c:0f:d3:5c:
2d:35:10:f8:2d:76:fb:67:30:3e:fa:e7:39:49:e2:92:af:a0:
83:93:bc:b5:e5:7c:ec:c0:9a:08:7d:2d:38:4d:41:93:91:91:
c3:e8:c9:e6:90:73:7a:15:7b:7d:68:7a:73:75:1d:55:74:a8:
3d:91:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:26 2025 by rpki-client