Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/efbfkOdYHKxxnHQ3MrY1EfrtYow.roa
File: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (raw, json)
Hash identifier: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=
Subject key identifier: 79:F6:DF:90:E7:58:1C:AC:71:9C:74:37:32:B6:35:11:FA:ED:62:8C
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 0196C2F9C3C07ED8244D32850C791C8525DB
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/efbfkOdYHKxxnHQ3MrY1EfrtYow.roa
Signing time: Mon 12 May 2025 05:31:10 +0000
ROA not before: Mon 12 May 2025 05:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 212.102.227.0/24 maxlen: 24
212.102.228.0/24 maxlen: 24
212.102.230.0/24 maxlen: 24
212.102.252.0/24 maxlen: 24
212.102.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:f9:c3:c0:7e:d8:24:4d:32:85:0c:79:1c:85:25:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: May 12 05:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79f6df90e7581cac719c743732b63511faed628c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:3c:02:c4:be:20:7b:54:91:9f:db:fc:61:
4c:fb:32:e3:d4:9e:ff:33:7c:dc:ef:df:bb:06:4e:
b3:4f:40:b2:e8:f6:32:b8:85:4f:5b:c5:4c:52:57:
3a:44:8c:43:e2:d9:fa:0f:26:2c:95:8b:6f:b1:91:
8f:f2:5f:62:18:b9:63:cb:1f:cd:43:f9:83:e4:82:
0a:05:f7:17:fa:e4:a4:bc:4b:5e:33:5d:a2:aa:dd:
3e:04:8f:8e:be:0a:fe:b7:29:0b:8b:84:a9:96:77:
92:a8:1a:34:ed:79:0a:de:91:4b:02:28:08:5b:e3:
0a:11:76:fe:72:6e:43:bf:6f:b7:eb:65:a3:31:68:
d9:41:a0:76:a8:19:46:10:d2:93:c4:57:c8:09:33:
8f:7d:ae:86:79:e4:d7:7b:a9:cd:76:62:26:45:52:
df:02:91:b2:d1:a5:26:29:18:64:d6:5f:66:34:22:
99:7d:cd:29:7c:a1:fa:02:a4:39:b6:c0:d6:01:26:
93:e4:27:66:b4:62:77:4c:ad:68:82:0b:c3:86:c0:
58:58:54:f5:ce:ce:64:5d:dc:56:a4:5b:cb:19:94:
28:75:c9:c2:82:cd:6f:dd:f5:4a:c2:96:cd:ea:36:
62:93:d5:d9:2f:bf:74:27:14:38:83:7e:3b:df:70:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F6:DF:90:E7:58:1C:AC:71:9C:74:37:32:B6:35:11:FA:ED:62:8C
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/efbfkOdYHKxxnHQ3MrY1EfrtYow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.227.0-212.102.228.255
212.102.230.0/24
212.102.252.0/23
Signature Algorithm: sha256WithRSAEncryption
80:f3:d0:0e:28:24:69:b2:6e:23:b2:30:81:2e:62:d9:9c:3c:
bc:0d:be:b9:0d:cf:cc:98:94:7c:5f:f5:46:09:eb:69:cf:65:
1e:95:54:8e:84:75:b2:e3:52:dc:08:f5:b2:d1:36:38:6a:69:
7d:58:ed:b1:2c:54:ca:24:2c:08:41:04:0b:8c:ac:55:cd:b9:
e8:19:b7:6a:71:ad:2c:2b:2b:23:eb:08:3c:e6:cf:b6:0b:16:
11:8c:af:4d:91:6d:fd:26:ac:51:d5:9e:09:19:d6:5a:30:b0:
48:c4:01:3f:e5:7a:b6:e0:30:73:eb:ac:6c:bc:0c:ea:0a:22:
f2:8b:49:7a:85:bc:c4:1f:8c:ec:ad:ff:dc:a6:7e:ef:aa:50:
50:5f:dd:f0:22:d2:be:67:dc:c8:be:ab:30:9d:04:24:d0:16:
78:8b:ca:dc:0f:07:33:67:05:dc:95:0a:83:34:46:c9:0b:9c:
f7:21:82:19:9d:98:3d:56:a1:87:dc:6d:07:fd:17:d8:7e:8f:
37:6b:6a:e3:1e:ed:1d:50:22:1c:30:5f:ce:aa:bb:09:d2:92:
5f:db:f8:f8:44:b7:f5:ea:9f:8a:a2:bc:7f:33:00:bd:d6:81:
9b:53:cb:02:38:84:75:60:ce:7d:c6:65:70:9e:3f:32:26:b9:
89:94:a0:f5
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZbC+cPAftgkTTKFDHkchSXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2
ZGVmMjAwHhcNMjUwNTEyMDUzMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWY2ZGY5MGU3NTgxY2FjNzE5Yzc0MzczMmI2MzUxMWZhZWQ2MjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAA8AsS+IHtUkZ/b/GFM+zLj1J7/
M3zc79+7Bk6zT0Cy6PYyuIVPW8VMUlc6RIxD4tn6DyYslYtvsZGP8l9iGLljyx/N
Q/mD5IIKBfcX+uSkvEteM12iqt0+BI+Ovgr+tykLi4SplneSqBo07XkK3pFLAigI
W+MKEXb+cm5Dv2+362WjMWjZQaB2qBlGENKTxFfICTOPfa6GeeTXe6nNdmImRVLf
ApGy0aUmKRhk1l9mNCKZfc0pfKH6AqQ5tsDWASaT5CdmtGJ3TK1oggvDhsBYWFT1
zs5kXdxWpFvLGZQodcnCgs1v3fVKwpbN6jZik9XZL790JxQ4g34733BxRQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHn235DnWByscZx0NzK2NRH67WKMMB8GA1UdIwQY
MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt
MjU0NDY4M2FhMTI1LzEvZWZiZmtPZFlIS3h4bkhRM01yWTFFZnJ0WW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1
LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADUZuMD
BADUZuQDBADUZuYDBAHUZvwwDQYJKoZIhvcNAQELBQADggEBAIDz0A4oJGmybiOy
MIEuYtmcPLwNvrkNz8yYlHxf9UYJ62nPZR6VVI6EdbLjUtwI9bLRNjhqaX1Y7bEs
VMokLAhBBAuMrFXNuegZt2pxrSwrKyPrCDzmz7YLFhGMr02Rbf0mrFHVngkZ1low
sEjEAT/lerbgMHPrrGy8DOoKIvKLSXqFvMQfjOyt/9ymfu+qUFBf3fAi0r5n3Mi+
qzCdBCTQFniLytwPBzNnBdyVCoM0RskLnPchghmdmD1WoYfcbQf9F9h+jzdrauMe
7R1QIhwwX86quwnSkl/b+PhEt/Xqn4qivH8zAL3WgZtTywI4hHVgzn3GZXCePzIm
uYmUoPU=
-----END CERTIFICATE-----
Generated at Tue May 13 19:44:20 2025 by rpki-client