Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LIQMB_eHXwn1etVc9ILiUNfjD7Y.roa
File: LIQMB_eHXwn1etVc9ILiUNfjD7Y.roa (raw, json)
Hash identifier: AcXlwgfXOdpaQ7mYQQzrcvRvSFYGXT76KaghgvVjB/8=
Subject key identifier: 2C:84:0C:07:F7:87:5F:09:F5:7A:D5:5C:F4:82:E2:50:D7:E3:0F:B6
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019823B07F5036C841D4D8BA81E058C90D23
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LIQMB_eHXwn1etVc9ILiUNfjD7Y.roa
Signing time: Sat 19 Jul 2025 17:17:06 +0000
ROA not before: Sat 19 Jul 2025 17:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52073
IP address blocks: 2.58.198.0/24 maxlen: 24
2.58.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:23:b0:7f:50:36:c8:41:d4:d8:ba:81:e0:58:c9:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 19 17:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c840c07f7875f09f57ad55cf482e250d7e30fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0c:59:26:55:78:19:d7:fb:6b:36:0d:98:4e:
9e:67:31:e4:01:77:ec:bb:76:3f:c6:4a:ba:df:6a:
4b:28:3b:37:55:8e:47:55:bc:21:15:1a:85:1e:fb:
90:37:3c:ca:76:ff:8a:34:cc:ab:5e:6c:fa:1c:47:
64:ef:76:e6:78:5a:8f:c3:7a:78:a5:a8:15:8d:12:
1f:ef:07:15:96:21:43:9d:93:e5:bb:1d:09:26:69:
b1:a5:04:bf:fe:16:d0:1d:6c:53:7b:35:43:8c:6a:
5b:ce:0d:cd:a5:63:e4:82:ef:43:d3:14:1b:57:0f:
b9:d6:7f:61:58:6a:ef:20:5d:40:c2:2c:21:ea:21:
0c:93:f0:3a:55:9e:c5:5b:d8:e2:a3:60:a8:67:54:
0d:25:c3:b9:5f:36:d2:8b:8d:3b:ff:6c:e9:90:0e:
d3:63:09:a3:d4:07:d5:b6:3f:9b:aa:d0:61:46:56:
d2:e7:fb:14:37:e7:bb:51:ae:e8:f2:cd:99:bc:87:
37:3e:69:37:f9:d4:d4:81:47:be:6f:b7:f5:2c:8f:
f4:a5:e9:a4:82:84:42:79:b1:b9:a1:15:d1:dd:52:
86:ec:7b:6a:7a:58:fe:9a:ba:02:89:e0:5c:4c:08:
b8:e2:c5:2f:ff:4e:99:e3:9d:02:4d:6c:5c:86:bc:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:84:0C:07:F7:87:5F:09:F5:7A:D5:5C:F4:82:E2:50:D7:E3:0F:B6
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LIQMB_eHXwn1etVc9ILiUNfjD7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.198.0/23
Signature Algorithm: sha256WithRSAEncryption
85:ad:a8:b7:a6:15:1f:43:69:a0:82:34:c3:5b:0e:49:75:90:
d4:d3:8f:37:ec:0a:e0:34:fe:39:50:d2:81:8b:e6:90:c0:b1:
63:9e:5f:fd:5c:a0:14:81:8f:16:f6:97:2b:7c:4e:12:1b:21:
6b:52:b1:e6:df:6c:9d:ca:32:da:a1:17:af:c4:24:4c:1a:a9:
a1:58:04:48:4d:b0:fc:5d:17:06:ad:59:ee:a7:63:48:61:93:
e6:ed:71:f9:c0:30:ee:9c:79:52:d5:1f:6e:df:ff:69:de:3e:
dc:21:a7:88:84:bc:b9:9c:38:ac:bf:bb:f6:f3:76:59:dc:9d:
63:4f:45:70:cb:80:e9:cb:dd:fb:ed:fa:b5:60:11:34:9f:ee:
43:e9:fb:5d:94:7b:13:8a:26:b5:16:6e:d6:40:31:95:ab:42:
15:1b:22:2b:f8:63:6a:f7:36:2e:1f:b8:68:a2:95:d0:34:e9:
cb:ac:72:cd:d0:b1:f1:e3:9a:a2:10:61:b9:17:57:32:52:7b:
8e:2f:f3:d1:b8:38:81:09:a3:ba:c8:b7:fe:89:c1:f3:0d:52:
00:f0:ae:07:8e:aa:15:03:64:03:28:79:84:ca:fb:91:42:30:
ad:a6:89:2d:e0:02:5b:15:5f:bc:8b:f1:9b:e1:8b:4b:ef:85:
a5:64:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:10:47 2025 by rpki-client