Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/QgMdlf1ORmMjO3p07bMNw0KtDT8.roa
File: QgMdlf1ORmMjO3p07bMNw0KtDT8.roa (raw, json)
Hash identifier: lUvtRAtiQocAdClmm634qLmiwHU9zHgeeS2TA8kr2JQ=
Subject key identifier: 42:03:1D:95:FD:4E:46:63:23:3B:7A:74:ED:B3:0D:C3:42:AD:0D:3F
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 0197A64281F1AA6B3F061FD72ECE71497EDF
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/QgMdlf1ORmMjO3p07bMNw0KtDT8.roa
Signing time: Wed 25 Jun 2025 08:44:25 +0000
ROA not before: Wed 25 Jun 2025 08:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203012
IP address blocks: 43.230.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:42:81:f1:aa:6b:3f:06:1f:d7:2e:ce:71:49:7e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: Jun 25 08:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42031d95fd4e4663233b7a74edb30dc342ad0d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:9b:a0:41:0f:10:cc:c6:29:d4:73:16:de:
ed:d7:6a:0f:70:7a:1f:61:c5:44:ad:7a:a8:82:fb:
4b:78:a0:c8:c0:29:b8:22:cb:1d:7a:ab:fb:bf:58:
f6:4f:9d:e6:ca:90:94:1a:37:95:0d:a4:be:99:22:
8d:c8:78:08:d1:86:ed:9f:80:44:a9:a7:a2:07:fb:
fb:61:d9:4f:e3:d8:91:3d:fa:d8:7f:a4:35:43:b4:
b1:97:8c:01:0e:dd:6e:2d:1a:77:dc:78:b1:16:26:
6a:f8:e7:99:ea:13:4e:02:12:f4:40:cc:30:c0:e3:
f8:f0:12:e6:73:a8:e1:25:08:45:85:67:bd:cc:80:
1d:4d:4e:66:72:93:8b:0f:01:ff:86:c3:8a:f2:66:
7b:38:b9:97:49:75:a0:ee:98:3b:54:3c:0b:6a:e5:
0b:ec:7f:95:b0:d2:ec:78:0a:12:7f:3f:a8:eb:a4:
51:9c:cc:13:2f:8f:ac:38:1b:6a:ee:8f:6f:57:31:
79:b9:47:a1:a0:08:de:bc:92:f6:13:ed:ff:bc:25:
dd:a0:01:1d:cd:ed:61:90:10:15:78:e4:84:1b:93:
da:ac:64:7e:75:a3:10:61:fd:4f:69:e9:72:b0:63:
85:ca:cb:21:b9:ca:e4:31:42:0d:9c:50:ff:49:e9:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:1D:95:FD:4E:46:63:23:3B:7A:74:ED:B3:0D:C3:42:AD:0D:3F
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/QgMdlf1ORmMjO3p07bMNw0KtDT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.184.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a4:43:bc:a8:da:45:d4:35:25:a6:91:eb:2e:83:d6:bf:67:
19:ca:59:24:5c:b9:b0:8a:82:2c:27:71:56:2a:16:6c:40:ea:
2c:85:93:5a:dd:71:6c:8d:94:2e:b1:aa:38:5a:3a:29:b8:2d:
4e:b0:fe:76:c0:bf:e7:fc:41:68:9b:fd:69:92:d9:b3:01:a3:
06:f3:0d:d1:4f:2e:3b:17:61:fa:b2:c2:3d:b9:11:82:dc:43:
a7:de:da:29:2e:76:a7:64:61:0f:5f:70:7d:52:ed:02:5a:f4:
77:18:38:73:d6:99:d5:8d:f8:9f:60:98:5d:a6:48:35:d8:88:
ad:b1:86:9f:75:54:c5:14:e9:ea:60:37:75:a1:ab:cd:44:bc:
5d:05:fd:1d:a9:7b:b4:86:86:80:88:d3:74:36:53:52:e3:a8:
7c:47:a4:ca:c8:e2:46:96:e1:b7:e3:14:52:14:ba:0d:8f:36:
fe:ed:ff:fb:9b:89:be:a7:c7:ec:9c:bb:e5:c5:c3:31:84:f2:
0e:dd:cc:22:8a:0f:23:26:a4:30:3c:39:cf:50:f1:bc:ad:ed:
97:3c:b9:9b:bd:a5:12:0c:64:15:e5:ca:9a:35:02:9f:88:2a:
f0:36:f2:3d:5d:ad:c0:c9:3a:0c:a2:f1:a1:ac:f3:f1:f4:88:
02:3f:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:53:55 2025 by rpki-client