Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PMTau-eIcfht75HFeZnGUi76CqY.roa
File: PMTau-eIcfht75HFeZnGUi76CqY.roa (raw, json)
Hash identifier: wdOxkxmpltHyB1v0GWj+dAobjQ/EnPVKZPlFGg11+Rg=
Subject key identifier: 3C:C4:DA:BB:E7:88:71:F8:6D:EF:91:C5:79:99:C6:52:2E:FA:0A:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E232CF6CF660A686091B5959FD46CF5A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PMTau-eIcfht75HFeZnGUi76CqY.roa
Signing time: Mon 05 Dec 2022 12:11:31 +0000
ROA not before: Mon 05 Dec 2022 12:11:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:32:cf:6c:f6:60:a6:86:09:1b:59:59:fd:46:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 12:11:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cc4dabbe78871f86def91c57999c6522efa0aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fa:71:c4:59:21:d0:f5:e2:ed:b2:4d:f0:db:
2d:f9:a4:16:a4:b2:c0:70:1f:63:e5:94:43:3c:eb:
08:af:d5:3a:d1:cc:13:70:92:7e:86:9b:b8:72:20:
5d:7f:9d:02:bb:b7:58:63:cf:96:f3:5f:72:5d:68:
f0:8b:8e:87:9e:e5:8c:a7:80:0b:39:45:fd:85:76:
29:f5:e9:be:91:4d:aa:75:88:3c:66:4c:31:a3:d7:
76:b1:e7:70:74:f4:f7:a0:00:37:66:c7:fc:d6:80:
db:9a:9a:62:a1:6a:d8:e6:2c:0b:7b:02:04:57:81:
a1:8e:69:10:1d:cb:0e:33:d7:7f:29:be:16:f5:52:
dd:79:44:b6:c2:da:35:4e:d2:6c:67:f7:18:c5:db:
cf:c3:46:b6:c9:e6:3e:e6:65:28:f1:81:80:46:84:
fd:19:c9:e6:18:93:28:93:cb:ca:65:ff:51:d4:26:
04:44:8c:fb:93:00:8e:9c:b8:ae:12:16:44:39:0a:
62:fe:b9:6e:02:77:ca:db:c7:50:87:77:2b:d8:65:
4c:34:e3:14:cd:ac:18:9f:73:05:fc:df:75:7a:f6:
72:8e:8f:cd:2a:61:00:80:c2:42:ac:99:6e:8b:3f:
d9:6e:e5:69:e6:0d:34:17:78:bf:37:b6:6d:4c:6c:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:DA:BB:E7:88:71:F8:6D:EF:91:C5:79:99:C6:52:2E:FA:0A:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PMTau-eIcfht75HFeZnGUi76CqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:fe:dd:7d:44:c5:fc:35:f4:66:85:4e:f8:ac:e8:22:2d:ae:
e3:85:c6:c2:04:f3:9a:4d:fa:c8:a8:fc:ec:32:2a:6d:ea:a3:
31:0d:5e:90:30:e6:af:77:c1:b8:01:e3:e3:e1:82:40:95:74:
02:79:ab:29:88:37:7b:08:23:40:7b:82:db:e6:c4:e7:e0:9f:
39:e7:2e:b2:2a:8f:90:6a:3a:20:5b:c0:26:db:cc:1b:bc:37:
39:da:ed:e3:51:88:92:fe:6a:ea:9a:90:ca:3a:4f:51:6c:aa:
cc:0a:14:52:86:32:31:a3:4b:0f:26:f5:ab:44:10:8f:e1:16:
af:59:06:e9:2a:73:35:f7:90:48:6d:c9:c0:dd:e2:ab:86:f3:
b1:91:2e:d0:0b:ae:6d:fb:bc:e0:ff:ee:5d:6c:34:61:59:48:
a8:d7:74:67:cb:87:a3:e5:05:cf:2e:c1:ca:72:fb:0f:b8:7e:
1d:25:12:a0:86:bb:a3:b9:bc:ed:3e:ff:be:68:fe:44:14:ac:
1b:fb:8d:cc:d6:b7:1d:f5:12:55:65:b5:c1:79:2d:03:b4:2b:
91:44:5c:34:cb:d5:8b:0c:49:20:48:47:0f:35:37:2d:41:80:
4a:38:72:0e:92:d2:69:03:d7:83:15:4b:1a:73:a4:14:31:0c:
58:45:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:01:36 2025 by rpki-client