Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/SeZ4MHkWijanJyiqLEKOSjkards.roa
File: SeZ4MHkWijanJyiqLEKOSjkards.roa (raw, json)
Hash identifier: 0MJVFVX2eka97RjF2zWc+vftmisrddmh+e7zXYl/UsE=
Subject key identifier: 49:E6:78:30:79:16:8A:36:A7:27:28:AA:2C:42:8E:4A:39:1A:AD:DB
Certificate issuer: /CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
Certificate serial: 0196ECCBF0563D0C78DDA7866971DE7DE1A1
Authority key identifier: 78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/SeZ4MHkWijanJyiqLEKOSjkards.roa
Signing time: Tue 20 May 2025 08:25:10 +0000
ROA not before: Tue 20 May 2025 08:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47193
IP address blocks: 91.203.208.0/22 maxlen: 22
91.203.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:cb:f0:56:3d:0c:78:dd:a7:86:69:71:de:7d:e1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
Validity
Not Before: May 20 08:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49e6783079168a36a72728aa2c428e4a391aaddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:6d:19:bd:d7:34:9f:c2:56:a5:2c:7c:46:
89:dd:e3:6c:b0:c8:d1:ec:53:e4:af:fe:cb:7e:5c:
c1:08:17:25:54:79:c2:50:97:e7:c6:95:cc:b4:d1:
3e:ba:c5:60:f7:2b:ce:85:27:47:d0:bb:44:ac:45:
ca:57:03:f6:fe:f4:b9:1c:c8:bc:69:a3:ee:f0:3b:
81:c3:56:55:63:a5:d1:2b:5b:67:c3:2f:e4:fd:01:
58:54:97:06:c5:af:6a:bd:d9:ac:76:10:2e:8c:6a:
7b:a0:99:2a:19:f7:9c:49:96:ac:63:4b:60:22:7e:
4b:c5:b1:30:05:9c:76:03:c4:3e:b6:c5:8b:ef:af:
a1:48:33:3b:79:d0:b3:79:fe:43:e0:97:15:c4:72:
cd:c4:57:ed:75:2c:2a:e0:74:21:62:f0:71:51:1a:
46:cd:e9:bd:0a:02:3b:2e:d9:b4:ac:62:b2:c7:0e:
37:4e:84:b4:89:5d:d3:81:70:fd:a9:7b:4e:a5:dc:
46:1f:f9:f9:fe:17:92:61:75:11:96:5c:93:ad:3a:
68:b8:64:05:d5:ca:5c:91:52:f0:bb:d7:60:f3:bb:
7e:18:58:96:14:4f:3a:9c:d4:7c:5b:0d:34:7d:f9:
e5:a9:d9:22:de:d8:5f:0c:5c:04:5e:49:69:6c:cd:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E6:78:30:79:16:8A:36:A7:27:28:AA:2C:42:8E:4A:39:1A:AD:DB
X509v3 Authority Key Identifier:
keyid:78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/SeZ4MHkWijanJyiqLEKOSjkards.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.208.0/22
Signature Algorithm: sha256WithRSAEncryption
25:dd:ec:10:cf:25:53:37:a6:36:50:c8:54:d7:b1:9d:f6:03:
63:51:4a:d1:40:7b:78:8c:fa:12:a2:b9:ae:a7:17:8d:7c:89:
48:54:3d:af:91:38:99:79:04:b8:1d:65:46:75:1e:a3:08:9f:
08:8e:d3:aa:f0:a2:ca:38:65:8b:5c:03:0e:19:bb:9c:11:9e:
a5:fa:e1:ec:dc:73:9f:f7:1f:55:ab:b8:ac:f2:80:82:81:df:
20:df:f0:cc:82:6c:71:eb:5f:75:f1:c1:15:ac:ab:fe:14:9e:
14:ed:23:4e:f1:cf:e3:b0:1d:a1:9b:74:c6:23:4f:3b:39:cb:
58:23:3a:81:30:84:40:e6:dc:85:a0:37:0d:b3:21:b5:c2:eb:
40:63:9c:7d:0d:a4:09:f2:af:6a:d7:30:fe:62:c6:e6:b0:b4:
30:4e:4b:44:75:36:43:f5:8e:a7:d0:b5:5f:29:d9:e9:84:95:
b5:5a:ed:95:ce:11:88:a9:87:f0:13:26:d4:a3:85:ca:97:cf:
9e:05:55:61:c6:05:b3:89:5a:35:59:11:cc:5a:60:de:2b:20:
d4:a5:99:bc:78:1c:8e:6a:62:65:38:89:db:80:7a:43:6e:cb:
f0:e1:0d:d4:5d:79:c4:36:c4:a5:de:70:b1:43:3b:af:b7:8a:
c0:22:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:42 2025 by rpki-client