Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53667.roa
File: AS53667.roa (raw, json)
Hash identifier: ZaiMcHxuw9L/C5nEQlVimD8hb41jqOCDUsuaHbw1dOY=
Subject key identifier: 9F:E5:CA:26:68:D8:22:E9:5D:64:0A:92:DD:1C:83:22:10:D4:9B:AF
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7BF7053B2C51C5E93BCF524C760E2F318511F9FE
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53667.roa
Signing time: Wed 30 Jul 2025 21:15:53 +0000
ROA not before: Wed 30 Jul 2025 21:10:53 +0000
ROA not after: Wed 29 Jul 2026 21:15:53 +0000
asID: 53667
IP address blocks: 2a0f:9400:6904::/48 maxlen: 48
2a0f:9400:693d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f7:05:3b:2c:51:c5:e9:3b:cf:52:4c:76:0e:2f:31:85:11:f9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 30 21:10:53 2025 GMT
Not After : Jul 29 21:15:53 2026 GMT
Subject: CN=9FE5CA2668D822E95D640A92DD1C832210D49BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:03:b3:dd:75:2f:c0:4b:66:ad:1c:c6:a0:
1d:d0:0a:d1:45:b4:20:8a:cf:b7:7c:6d:db:60:bf:
f9:46:5f:7e:e8:53:94:49:09:c0:79:19:e0:30:ed:
8a:17:64:85:a4:b4:2a:46:c0:12:5a:71:60:d5:40:
41:d3:23:a8:be:e8:e4:b0:28:32:db:26:32:93:12:
5d:91:8c:13:35:47:f8:21:a3:e3:e7:86:86:8e:1e:
30:28:8a:2b:c1:d4:7e:31:d6:8b:9f:9d:c5:60:b6:
b9:e2:8d:b9:73:7f:47:7d:d3:77:f2:76:f6:fe:56:
fb:c3:6a:dc:5c:a2:4b:a7:47:58:9e:a4:21:f7:84:
db:3c:c8:e1:c4:6d:34:de:58:50:89:31:3d:97:cf:
90:d7:8e:25:c8:00:97:fb:6a:2b:f2:f6:13:5b:0c:
1d:c5:39:e1:5f:c0:5b:af:8f:4d:71:07:2c:6e:41:
1d:17:a1:1c:13:ce:90:5a:c7:47:db:99:44:9e:e3:
2c:b1:3a:3a:c0:d7:22:74:73:c8:08:8f:04:11:61:
f7:c5:5e:22:0a:e4:96:e3:d8:84:18:41:dc:dd:65:
be:13:ab:97:fe:35:5f:e5:e3:f4:09:5c:fc:f5:37:
e4:a0:e0:de:bb:b8:9d:18:80:db:a3:81:42:de:a4:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:CA:26:68:D8:22:E9:5D:64:0A:92:DD:1C:83:22:10:D4:9B:AF
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53667.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6904::/48
2a0f:9400:693d::/48
Signature Algorithm: sha256WithRSAEncryption
3b:94:f6:04:fd:5e:53:5e:e7:ae:d6:48:60:75:a1:73:e1:8e:
f0:75:be:32:5a:ff:77:4c:49:6b:53:d9:1d:80:ae:97:7b:ea:
1b:0c:89:1b:27:e2:65:96:36:70:7b:06:c8:3a:24:82:91:79:
0a:6e:12:cc:62:fc:d8:ee:75:e7:47:d0:04:ff:f1:de:8c:f4:
76:2c:fc:93:68:4a:58:c6:09:0d:5c:32:03:4f:4d:94:1d:97:
a3:54:76:50:71:f6:29:b5:ec:47:52:4c:4c:d1:41:e2:2d:20:
8b:c1:de:ce:6f:90:96:cd:d9:22:78:98:25:ef:05:7e:b2:04:
93:26:b6:32:49:ff:58:a7:ad:3b:46:30:dc:fb:7d:2d:32:d5:
68:75:1a:5e:0a:ae:12:8c:53:36:8d:38:d4:e6:e2:73:c0:8c:
74:96:51:7c:53:7b:26:21:12:a2:21:19:7c:bc:c9:9b:03:31:
b6:80:21:9b:52:3c:25:63:b5:7a:43:b9:ac:59:36:9d:26:3f:
19:6f:70:bb:d5:a0:45:fd:3b:41:47:2f:b7:d0:57:fc:65:c9:
fb:45:79:f3:3b:e9:90:d4:dd:d8:46:36:7e:76:ee:e5:f1:78:
a6:36:ef:ea:86:b1:67:64:80:fe:6f:ff:fe:1f:1b:f9:6a:b7:
28:69:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:19:55 2025 by rpki-client