Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS55201.roa
File: AS55201.roa (raw, json)
Hash identifier: a2eV0cytBBz1vrF4CqYYL3/5q2nIAPAy5PU2F5UAlIo=
Subject key identifier: 97:E2:28:A4:E4:D4:B2:53:45:53:52:E6:4B:59:9D:7C:48:5F:8E:81
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7945C599D71104811F627A8A4981D6A563DAECFA
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS55201.roa
Signing time: Mon 28 Jul 2025 20:00:01 +0000
ROA not before: Mon 28 Jul 2025 19:55:01 +0000
ROA not after: Mon 27 Jul 2026 20:00:01 +0000
asID: 55201
IP address blocks: 2a0f:9400:6800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:45:c5:99:d7:11:04:81:1f:62:7a:8a:49:81:d6:a5:63:da:ec:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 28 19:55:01 2025 GMT
Not After : Jul 27 20:00:01 2026 GMT
Subject: CN=97E228A4E4D4B253455352E64B599D7C485F8E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:71:6a:eb:79:eb:a4:8c:67:e4:38:8c:da:
ea:7b:f4:fb:fb:0d:aa:81:b7:b7:91:2b:92:63:7c:
79:ca:74:fa:c0:65:ee:73:38:03:a4:11:00:c1:87:
15:b7:fb:0b:27:7f:da:64:91:0f:c5:a4:cf:fd:d6:
b6:66:64:ca:42:75:f4:24:f7:ad:64:a9:f9:89:f1:
ae:f9:e2:d1:ed:61:37:66:1b:cc:29:5c:b6:fd:3a:
4f:76:3b:be:38:d5:0b:67:c1:28:5c:4c:fd:55:fa:
f2:c3:8a:44:4b:ae:8b:25:a2:7a:37:10:ab:14:86:
6f:81:c0:d3:65:1e:20:50:97:10:4b:a6:50:0e:fb:
4d:91:1c:c9:03:4e:43:65:c5:1b:b2:9d:b1:90:3e:
d8:e0:d5:07:a2:77:cb:71:a9:b6:76:b9:11:fd:5a:
b3:ff:b2:ef:a1:28:d2:8d:6c:dc:1b:16:66:34:04:
ff:7f:ab:b9:75:a5:3e:c5:e1:9b:46:60:ce:96:30:
f6:7d:c6:26:58:f4:f5:88:16:d2:7e:b4:14:dc:29:
32:c5:a4:b8:ec:4d:2b:b4:c7:2b:c6:1f:36:e3:53:
59:e9:18:e5:44:f7:f8:f4:12:db:ab:39:b0:aa:f3:
34:21:12:1f:1b:e5:f0:7a:cb:81:d8:31:4e:19:ab:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E2:28:A4:E4:D4:B2:53:45:53:52:E6:4B:59:9D:7C:48:5F:8E:81
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS55201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6800::/40
Signature Algorithm: sha256WithRSAEncryption
08:2f:17:98:d7:0c:ff:4d:88:81:e5:9c:cf:10:a0:21:ac:95:
a1:e6:40:97:88:9e:73:c7:8c:09:ed:54:bd:0d:92:70:27:d5:
b2:99:82:51:f8:a7:73:4a:4d:80:06:a1:95:37:e5:98:d9:19:
d4:90:16:19:a1:f6:d4:31:ed:6f:6e:ea:71:1b:59:fe:cc:fd:
53:a9:9c:23:bc:8b:32:b7:6f:15:cd:4c:d5:f2:67:a7:d3:48:
54:2c:c8:47:05:f0:61:f6:df:a1:a2:9d:09:f6:ed:a4:64:b4:
b8:a8:45:a7:3a:4d:6e:86:13:4b:d4:ae:f5:5a:ed:76:16:4a:
da:5b:59:23:bf:ff:08:9b:31:49:95:f3:2f:af:48:87:d5:91:
0c:e0:28:48:99:a6:42:87:3e:7b:0b:e0:0d:21:b6:0c:61:f4:
75:30:62:31:c8:c5:d5:89:d6:dd:ab:1b:6b:5b:37:38:4d:4d:
72:46:0e:21:e9:83:88:13:ff:56:14:13:01:82:1c:9a:a3:13:
13:7a:39:fb:72:c5:5c:a8:36:64:5a:ff:e4:f6:94:c2:d4:6f:
1a:a3:d2:9e:71:bb:77:34:37:b4:1a:ef:fe:8e:60:fd:f6:ad:
73:26:8c:64:61:17:f0:38:0b:0c:83:bb:0a:6c:a8:23:a9:a2:
bc:64:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:46 2025 by rpki-client