Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/tef_cC8TaHGH6c3SFnsfGlbPCFo.roa
File: tef_cC8TaHGH6c3SFnsfGlbPCFo.roa (raw, json)
Hash identifier: fi0tS1YmrLrCM0wV11XPpKayTHwmnYDGQWzt9PubPlA=
Subject key identifier: B5:E7:FF:70:2F:13:68:71:87:E9:CD:D2:16:7B:1F:1A:56:CF:08:5A
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B8D8529609FA175DAEEFF62EDF4E2C2B5
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/tef_cC8TaHGH6c3SFnsfGlbPCFo.roa
Signing time: Thu 02 Nov 2023 00:53:16 +0000
ROA not before: Thu 02 Nov 2023 00:53:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142561
IP address blocks: 85.237.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8d:85:29:60:9f:a1:75:da:ee:ff:62:ed:f4:e2:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Nov 2 00:53:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5e7ff702f13687187e9cdd2167b1f1a56cf085a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:42:23:11:9e:b8:86:20:7e:01:0f:95:3f:
ea:78:7f:05:ad:99:54:e4:48:83:9d:c2:37:e4:40:
2f:c7:c3:33:d3:84:de:9a:e2:75:e8:5b:df:c0:19:
cd:fd:9f:3c:60:5d:13:95:d7:11:cb:f9:88:55:63:
31:97:20:0d:56:2c:74:3d:7f:a3:23:9a:19:10:33:
41:f0:fc:af:16:ee:4a:e2:5d:95:8a:cf:72:49:46:
0b:b6:17:7d:5a:7c:aa:6f:27:7b:dc:7a:56:af:d1:
32:3d:65:67:f3:38:ce:21:d1:70:03:be:47:2d:df:
6c:34:02:f3:38:d2:fb:68:f7:a6:9a:d8:34:5c:d7:
93:aa:36:70:d0:26:52:fe:54:7f:b5:a9:18:4b:f7:
5b:93:70:6e:da:16:ff:97:9a:ec:cb:3c:79:66:ba:
8b:46:ac:28:b4:7a:d3:f1:b2:02:4a:28:bd:94:34:
72:64:30:d8:34:80:d2:d7:60:33:cf:47:d7:e4:6d:
f6:83:cf:42:67:68:d6:ad:76:f6:c3:b7:ee:21:c5:
07:39:70:21:43:77:e8:a9:a7:f5:b7:d7:a3:46:ec:
05:6e:48:8e:15:99:f5:c2:c0:8c:88:b0:78:fd:ea:
0c:85:0c:ab:27:2c:72:6f:1e:10:a9:96:1a:12:22:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E7:FF:70:2F:13:68:71:87:E9:CD:D2:16:7B:1F:1A:56:CF:08:5A
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/tef_cC8TaHGH6c3SFnsfGlbPCFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:77:dd:90:35:53:f5:e3:f8:fd:28:8b:b2:c0:62:78:c5:25:
bd:fd:31:d4:d4:18:16:90:04:f7:2c:a8:96:ba:c1:7e:b6:77:
34:5a:2f:bd:4b:48:3c:d9:d3:76:ba:d1:09:26:4b:41:09:ec:
b7:64:c5:0f:81:16:86:d4:e5:49:81:d6:b8:dd:a9:77:4c:4b:
4a:c5:eb:c9:da:32:86:1b:01:93:4f:8c:3a:64:c9:cf:7e:41:
e9:f1:d9:64:1f:4d:98:f4:a7:b1:d5:32:ab:fd:37:0e:43:54:
35:64:91:60:c5:e0:ba:a7:7d:9f:ff:f1:e2:01:50:76:7f:74:
38:f1:35:f9:02:ab:c4:fe:3c:9b:ed:ad:b3:87:b8:eb:f2:04:
e0:a0:18:85:d6:3a:70:75:d4:5e:0e:df:14:0a:9b:59:ee:7d:
36:26:3e:e7:4a:6a:90:e2:04:71:a5:52:b5:2c:6e:d6:4b:13:
b4:07:06:42:8c:f0:3a:12:82:46:65:b6:17:8c:a6:83:97:cf:
8d:90:e4:57:03:05:89:87:bf:7e:7a:61:7b:53:e5:8d:c3:43:
47:55:7a:b0:37:73:a6:88:6b:44:44:4a:2d:1b:c4:b1:9d:66:
53:07:ca:24:6d:66:fe:0d:c8:b0:4f:d5:46:e5:c3:fb:d6:0e:
5d:cd:1d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 07:16:17 2023 by rpki-client on console-fra.rpki-client.org