Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49mm-SMTA1icTVSL0dZM9GOsm2g.roa
File: 49mm-SMTA1icTVSL0dZM9GOsm2g.roa (raw, json)
Hash identifier: vJJg4O7UPnPgDD8zb1zdEfUEV0utDebpz2Jocc/RNh8=
Subject key identifier: E3:D9:A6:F9:23:13:03:58:9C:4D:54:8B:D1:D6:4C:F4:63:AC:9B:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883491B730F4B2B91727BAB3E7BCB621CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49mm-SMTA1icTVSL0dZM9GOsm2g.roa
Signing time: Fri 19 May 2023 15:12:24 +0000
ROA not before: Fri 19 May 2023 15:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:91:b7:30:f4:b2:b9:17:27:ba:b3:e7:bc:b6:21:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 15:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3d9a6f9231303589c4d548bd1d64cf463ac9b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:23:c5:0f:77:6a:43:7b:a9:74:65:f3:5f:
49:d9:8f:f6:53:5f:ec:36:dc:12:62:32:ea:10:f0:
46:1e:16:f9:ca:e7:e0:92:70:59:86:b7:23:21:4b:
ee:cf:b2:b4:81:9e:fe:12:98:d1:1a:dd:1c:44:07:
11:ad:1d:9b:88:e3:53:3d:c8:ae:b5:c6:a2:a9:82:
b9:0d:a3:b9:b2:ea:1f:31:24:bd:28:52:6d:34:96:
22:f1:75:9d:39:b8:0e:54:93:7b:1a:ab:c9:f9:d9:
35:50:df:b7:5a:ce:8f:26:13:44:47:26:ad:7c:a8:
e8:75:63:8a:65:48:dc:9e:e4:16:b7:4b:13:73:3b:
e7:ed:6e:dd:4e:fd:12:b4:8c:29:d7:ef:7b:c5:7b:
b0:fe:e8:1d:5a:3d:db:bb:a2:3c:12:25:aa:73:d2:
df:64:32:ef:43:f4:c8:48:91:31:e1:8f:00:3d:e1:
3d:93:b2:e7:24:8f:26:d3:a4:12:55:83:ce:a6:5d:
d6:f3:30:a9:c9:f1:1d:64:14:74:42:dc:73:d0:81:
9d:c4:2c:77:e5:e3:58:9b:ec:06:4e:f9:c3:49:fc:
47:51:03:94:d6:27:5b:2a:ef:95:9f:f6:e4:a5:45:
82:09:41:cd:dc:ee:97:d7:a1:bf:52:87:f6:e8:bc:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D9:A6:F9:23:13:03:58:9C:4D:54:8B:D1:D6:4C:F4:63:AC:9B:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49mm-SMTA1icTVSL0dZM9GOsm2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:8b:6a:a9:f3:7b:92:be:6a:48:93:59:cc:e0:8b:72:ef:5c:
d8:db:8c:1e:75:d7:57:46:fd:2f:8d:26:16:ac:a4:21:f1:dc:
4e:63:46:3c:99:55:db:de:c0:1f:2a:a7:97:bd:5a:2a:3c:41:
cd:2f:7b:9a:46:b5:08:b7:74:69:13:5b:ff:00:f7:ed:6c:d0:
f4:8d:4b:d2:b0:21:24:dc:7f:12:63:e5:f0:99:21:df:b4:6d:
e9:e8:e5:9a:de:2a:2e:b0:9a:8b:fb:d2:4e:2d:df:c2:d4:c1:
fc:6f:a8:b3:1d:3c:d3:11:cd:78:5f:66:d4:cb:b0:0f:60:b3:
b6:2b:db:ef:a8:f7:65:76:c2:c1:98:af:47:71:5a:48:30:09:
9a:b0:2f:4b:5e:1e:f4:bd:ec:8c:30:34:5a:51:0b:02:ca:8b:
29:7f:87:75:e0:9e:67:88:6e:38:52:11:5e:b4:24:e7:f9:98:
c6:1f:16:ce:1a:e0:a2:dc:2e:c9:02:c4:3b:6e:2c:a0:3e:89:
2f:95:98:ef:9a:25:7e:64:fd:99:32:68:c2:2b:12:7c:63:24:
44:9c:18:53:1f:b5:7e:54:27:1c:5e:f5:e5:b2:95:ce:4c:56:
eb:5d:ca:84:8a:12:bd:dc:07:58:b6:06:54:97:87:11:6a:58:
7a:31:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:30:14 2025 by rpki-client