Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/te-MOWz7QlwPVIeIYtjVPn-alb4.roa
File: te-MOWz7QlwPVIeIYtjVPn-alb4.roa (raw, json)
Hash identifier: u1+yiCvOa9e/+EEoc3ZnVdaea7wc1CVVID7cXexeQD8=
Subject key identifier: B5:EF:8C:39:6C:FB:42:5C:0F:54:87:88:62:D8:D5:3E:7F:9A:95:BE
Certificate issuer: /CN=0ecf600f3311944dc4149f693db57735a9292c86
Certificate serial: 0184A0DAFA5B8CEB299EDB0CD6521B75BA4B
Authority key identifier: 0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/te-MOWz7QlwPVIeIYtjVPn-alb4.roa
Signing time: Tue 22 Nov 2022 19:40:16 +0000
ROA not before: Tue 22 Nov 2022 19:40:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34658
IP address blocks: 2a0f:45c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a0:da:fa:5b:8c:eb:29:9e:db:0c:d6:52:1b:75:ba:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecf600f3311944dc4149f693db57735a9292c86
Validity
Not Before: Nov 22 19:40:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5ef8c396cfb425c0f54878862d8d53e7f9a95be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:b6:4e:44:2c:3f:29:aa:8f:c6:e9:84:67:
7a:75:fe:30:97:b3:89:55:9e:f0:0e:ad:fe:8a:d4:
23:7a:c8:7c:ac:ba:90:43:05:52:d0:41:fb:39:9c:
97:e0:f4:fc:fa:0c:f8:92:af:51:c4:5d:b8:bb:0f:
df:7e:c3:d8:e2:81:c9:f2:1e:c4:cc:5e:1a:f5:7c:
c7:81:b9:55:c3:3b:3e:24:3e:5c:f6:b7:ef:ac:34:
13:de:a3:df:af:64:55:41:9d:ca:f8:37:31:88:83:
b6:2c:5a:39:a3:c8:f0:4b:65:b9:bf:12:c6:87:4d:
fd:9c:fb:54:c6:dd:46:29:a9:c5:ab:b3:c5:ca:ed:
01:dc:ec:e4:90:ea:d4:64:73:0c:50:26:2d:b2:24:
f0:79:16:e2:2e:eb:ac:a6:79:b1:f5:1f:6d:f4:c9:
b6:c4:68:9a:47:2e:1f:c9:23:33:7e:b2:aa:b6:f8:
55:30:a6:e6:08:84:55:58:b5:8e:30:d4:6c:d7:00:
64:51:83:c1:1b:ad:65:18:c6:a7:42:f4:d0:08:1a:
ac:2c:05:ee:4b:8e:7b:f2:69:51:e2:33:3a:87:27:
b0:d9:11:19:e8:9f:b4:84:a8:10:81:12:75:58:44:
9f:09:7d:c9:7c:ad:f5:60:d1:af:95:54:f9:15:b9:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:8C:39:6C:FB:42:5C:0F:54:87:88:62:D8:D5:3E:7F:9A:95:BE
X509v3 Authority Key Identifier:
keyid:0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/te-MOWz7QlwPVIeIYtjVPn-alb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:45c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:fe:fb:b4:8b:06:4a:dd:eb:b0:25:c5:47:fd:1b:00:b4:12:
eb:22:4a:8f:68:c9:dc:03:36:6d:40:9c:c5:54:3b:cf:c3:da:
3f:56:70:04:e1:d4:7e:a8:2b:dc:18:a0:27:80:df:ee:9d:74:
fb:0a:a1:58:73:2d:cc:e3:bb:a9:be:96:7f:4a:6c:f8:8c:81:
33:3f:c0:a2:d9:5c:d3:24:19:7e:e9:c8:67:97:0b:9d:a3:b0:
1e:dc:d8:c2:75:99:87:d4:73:4e:04:88:b7:81:90:b7:c0:c4:
f2:cb:7a:8a:ff:4a:f4:eb:d1:4c:ec:d9:4c:77:6b:63:8e:3b:
d2:f0:f1:2c:af:ff:9e:61:4b:16:39:a1:cc:de:2c:59:bc:b0:
50:83:75:7c:b5:ad:36:b7:17:9a:61:b3:15:b1:08:ff:9f:47:
f7:52:fc:e1:55:10:08:9a:aa:1b:14:45:7b:3b:51:85:e3:92:
50:4b:cf:d8:1c:76:6d:46:96:a4:ae:2c:84:d4:33:67:67:58:
9c:4a:ec:6d:19:ef:87:90:58:1e:19:18:1e:ba:ef:22:86:bd:
b1:49:1c:28:08:2f:bb:45:30:e4:44:ae:fe:b6:64:4a:05:ce:
08:28:4d:ae:16:25:f7:da:41:35:75:cd:c3:7c:ac:06:8d:08:
19:29:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:06 2024 by rpki-client on console-ams.rpki-client.org