Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: JHb6UoI8ZNrmaHlbRan+2tzK96d8AgbI5jEOEgJiyhg=
Subject key identifier: 22:93:01:42:EC:AA:7A:9A:05:40:82:C3:58:8D:16:1A:D4:F4:19:2F
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3A0431194DD5DA27857B2035240E1D78DB7A1B06
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time: Sat 07 Jun 2025 18:36:30 +0000
ROA not before: Sat 07 Jun 2025 18:31:30 +0000
ROA not after: Sat 06 Jun 2026 18:36:30 +0000
asID: 53356
IP address blocks: 45.148.76.0/22 maxlen: 22
2a0f:9400:5::/48 maxlen: 48
2a0f:9400:200::/48 maxlen: 48
2a0f:9400:fa0::/44 maxlen: 45
2a0f:9400:fb0::/44 maxlen: 44
2a0f:9400:6100::/48 maxlen: 48
2a0f:9400:6103::/48 maxlen: 48
2a0f:9400:6106::/48 maxlen: 48
2a0f:9400:6148::/48 maxlen: 48
2a0f:9400:614b::/48 maxlen: 48
2a0f:9400:6166::/48 maxlen: 48
2a0f:9400:6907::/48 maxlen: 48
2a0f:9400:6933::/48 maxlen: 48
2a0f:9400:6c00::/40 maxlen: 44
2a0f:9400:6e00::/40 maxlen: 40
2a0f:9400:7000::/40 maxlen: 48
2a0f:9400:7383::/48 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:7390::/44 maxlen: 48
2a0f:9400:770c::/48 maxlen: 48
2a0f:9400:7723::/48 maxlen: 48
2a0f:9400:7724::/48 maxlen: 48
2a0f:9400:7726::/48 maxlen: 48
2a0f:9400:7727::/48 maxlen: 48
2a0f:9400:7728::/48 maxlen: 48
2a0f:9400:772c::/48 maxlen: 48
2a0f:9400:772f::/48 maxlen: 48
2a0f:9400:8003::/48 maxlen: 48
2a0f:9400:8012::/48 maxlen: 48
2a0f:9400:8024::/48 maxlen: 48
2a0f:9400:8027::/48 maxlen: 48
2a0f:9400:802b::/48 maxlen: 48
2a0f:9400:b00b::/48 maxlen: 48
2a0f:9401::/32 maxlen: 32
2a0f:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:04:31:19:4d:d5:da:27:85:7b:20:35:24:0e:1d:78:db:7a:1b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 7 18:31:30 2025 GMT
Not After : Jun 6 18:36:30 2026 GMT
Subject: CN=22930142ECAA7A9A054082C3588D161AD4F4192F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:c1:cc:52:69:2a:b1:51:29:67:ca:05:2d:
65:74:f0:44:09:f4:c7:bc:59:98:68:c1:74:24:3d:
60:d1:0a:2f:29:ee:37:b9:f3:47:ca:68:ee:36:6d:
d9:2d:ef:0e:18:d9:a1:d0:93:b5:99:98:51:62:f1:
be:d6:74:3b:48:54:b9:62:4d:42:18:ab:30:a9:d3:
80:6b:1a:09:de:f5:cc:4b:22:14:c9:7f:1f:e3:53:
08:a7:97:d1:11:a9:d3:07:82:1b:9d:27:e0:d1:57:
bb:fc:35:ab:07:6f:b4:3e:ed:d8:99:44:39:e5:28:
d8:46:ce:b5:8f:b2:cd:3e:14:b0:33:38:fe:b6:b2:
8b:56:70:fe:60:0e:fe:2f:64:fe:ec:b3:ae:7f:3a:
c2:00:54:5b:76:b8:b1:2d:d8:23:8a:71:f3:9a:b1:
2d:b8:68:d3:b8:3a:60:e2:46:54:dc:5b:97:a3:41:
11:08:50:92:bc:19:b8:11:70:f4:8a:75:92:1a:d0:
27:ad:47:a9:84:67:ad:a7:c7:33:67:eb:6e:51:d0:
d5:13:7a:a5:4a:a3:c9:8b:8c:47:d3:f2:2f:e9:79:
9d:40:6f:3e:33:5f:1c:d3:16:99:4e:79:e1:cc:57:
3c:57:e7:38:12:1d:92:59:36:6e:64:96:38:8f:42:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:01:42:EC:AA:7A:9A:05:40:82:C3:58:8D:16:1A:D4:F4:19:2F
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400:5::/48
2a0f:9400:200::/48
2a0f:9400:fa0::/43
2a0f:9400:6100::/48
2a0f:9400:6103::/48
2a0f:9400:6106::/48
2a0f:9400:6148::/48
2a0f:9400:614b::/48
2a0f:9400:6166::/48
2a0f:9400:6907::/48
2a0f:9400:6933::/48
2a0f:9400:6c00::/40
2a0f:9400:6e00::/40
2a0f:9400:7000::/40
2a0f:9400:7383::/48
2a0f:9400:738c::/48
2a0f:9400:7390::/44
2a0f:9400:770c::/48
2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
2a0f:9400:772c::/48
2a0f:9400:772f::/48
2a0f:9400:8003::/48
2a0f:9400:8012::/48
2a0f:9400:8024::/48
2a0f:9400:8027::/48
2a0f:9400:802b::/48
2a0f:9400:b00b::/48
2a0f:9401::/32
2a0f:9405::/32
Signature Algorithm: sha256WithRSAEncryption
0d:06:d0:27:5d:30:74:24:4c:4c:0e:c4:1f:24:7b:60:25:92:
05:61:03:46:e4:75:da:d2:af:cc:14:04:72:0b:63:d9:07:cb:
84:9c:97:79:d2:a6:e1:d5:1a:3e:43:7f:2a:e9:39:0d:d9:9c:
26:b7:69:45:65:e2:c6:81:d5:1c:76:f3:b0:94:da:10:38:92:
52:d4:ee:c9:df:58:7f:2f:82:2f:f1:05:81:c4:c1:5b:ef:8e:
53:03:09:8d:12:76:66:dd:f3:4d:75:64:0d:33:8a:83:88:24:
e7:88:f8:70:42:b9:98:73:c3:44:27:02:c6:0e:fb:e6:c7:0f:
5d:23:71:e2:4c:66:33:11:e1:65:97:14:34:36:59:87:4d:47:
f2:1d:40:8c:db:ea:e3:91:bd:26:59:d8:f7:06:e4:ec:0d:8c:
85:a0:4e:0e:c4:5c:07:3b:03:54:ea:7a:78:10:32:4f:d8:cd:
45:97:d5:32:a3:0d:25:df:de:7c:d6:7a:37:72:a8:3c:25:38:
c0:d2:5a:a2:2b:32:b2:ef:9d:59:d1:31:a4:71:32:46:01:37:
25:b1:df:e0:57:e8:a2:1d:cd:8b:0c:df:4e:9b:f2:82:18:62:
87:3e:0b:80:c4:6e:26:27:af:97:e0:73:cf:cd:d6:2a:4c:52:
4c:5b:2e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:17:12 2025 by rpki-client