Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3138352e3234302e3234342e302f32322d3234203d3e2030.roa
File: 3138352e3234302e3234342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: Pe2SHF1ahbkbUezSHNFAho0/9pGWZ2WlqrN9B/tsYzY=
Subject key identifier: 63:EF:6F:FA:D9:E8:26:06:83:44:A8:3B:DE:22:34:3A:13:EF:F9:62
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 3654774D1F30AA28EB0D362B3D03D36CB2A00A89
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3234302e3234342e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:42:59 +0000
ROA not before: Fri 03 Mar 2023 15:37:59 +0000
ROA not after: Fri 01 Mar 2024 15:42:59 +0000
asID: 0
IP address blocks: 185.240.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:54:77:4d:1f:30:aa:28:eb:0d:36:2b:3d:03:d3:6c:b2:a0:0a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:37:59 2023 GMT
Not After : Mar 1 15:42:59 2024 GMT
Subject: CN=63EF6FFAD9E826068344A83BDE22343A13EFF962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:e6:6f:3e:a1:be:bb:a6:a9:64:f5:42:a9:
d5:32:b3:d4:92:a4:17:dc:32:f0:d6:a5:20:42:e5:
51:5f:a1:fc:d1:f8:68:15:fb:a5:45:e8:09:6e:a8:
5d:54:0f:d2:a9:5b:44:7b:6e:3a:cb:6a:c0:63:05:
af:6d:ee:bd:c4:d0:f3:44:eb:cc:aa:a6:80:16:5b:
9e:f1:a9:c8:f8:fb:c3:0b:81:19:4c:28:0e:12:4a:
f3:d6:84:c3:7f:7b:2c:3c:78:47:01:41:eb:00:6d:
8e:0c:c3:26:7f:dc:28:b7:d0:2b:49:aa:d8:67:fc:
c9:5e:1b:c0:b8:0d:cb:c9:93:10:12:f9:a5:27:b5:
f5:9d:70:bb:6d:6e:c7:63:84:86:c0:df:73:45:b5:
6b:9a:46:3a:53:ea:1c:22:4b:30:5c:aa:67:ca:93:
3c:2c:0c:76:6f:4a:52:2c:2b:88:a2:3c:d7:51:bd:
79:ef:4f:e5:37:96:c9:f0:57:79:ef:4d:e3:b3:bc:
6b:8c:74:1b:d6:9b:10:99:71:d7:89:a0:e7:e4:70:
13:39:e0:9b:35:42:ea:60:fd:71:f0:53:75:24:5a:
f1:c6:b5:71:9c:2e:e0:76:6b:50:33:ac:d8:6e:a2:
6e:c7:3a:7a:92:94:22:cd:9e:bf:5a:e4:11:8e:be:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EF:6F:FA:D9:E8:26:06:83:44:A8:3B:DE:22:34:3A:13:EF:F9:62
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3234302e3234342e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.244.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:66:4e:25:6b:09:e1:37:5b:20:59:88:f3:5f:b9:a9:bd:96:
b8:71:7b:e9:01:ca:15:9e:db:eb:ef:6c:da:70:d6:93:e6:2d:
d0:3c:1c:60:94:23:26:1c:4f:c3:ed:47:d2:d2:23:85:26:97:
cb:1f:29:76:b5:cb:46:55:2a:ba:1f:25:2d:bc:e8:28:e4:97:
c8:fe:d1:a1:24:fb:5e:39:97:b3:cd:5a:a2:80:e4:f9:a6:6f:
04:6d:21:47:92:64:2a:f7:14:bd:64:7a:0f:5b:be:b9:6e:2b:
14:b5:8d:8b:b1:66:73:d1:03:a1:54:f2:8e:22:3a:54:e2:ce:
62:cc:9b:7b:7e:48:ce:ba:5b:8e:44:57:d8:0f:19:37:c1:45:
81:22:0f:8b:37:6a:5f:6d:a8:05:db:a7:a5:43:6f:61:f4:f7:
ef:22:43:a3:4d:d2:a8:2e:7e:d8:4d:57:c0:e8:19:70:b2:a4:
3d:6c:31:26:27:b5:4c:c3:66:71:86:b4:1c:02:4a:b6:30:75:
f5:d8:8c:62:08:91:17:66:11:90:c7:6f:ac:cb:27:51:ae:3b:
dd:1f:15:cc:23:5f:f4:c8:f2:0c:c9:b0:bf:98:37:12:1d:33:
64:0f:43:3d:8d:7b:4e:65:53:f1:c7:56:10:16:d5:9f:21:69:
f5:43:85:8e
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUNlR3TR8wqijrDTYrPQPTbLKgCokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMzAzMDMxNTM3NTlaFw0yNDAzMDExNTQyNTlaMDMxMTAvBgNV
BAMTKDYzRUY2RkZBRDlFODI2MDY4MzQ0QTgzQkRFMjIzNDNBMTNFRkY5NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXT+ZvPqG+u6apZPVCqdUys9SS
pBfcMvDWpSBC5VFfofzR+GgV+6VF6AluqF1UD9KpW0R7bjrLasBjBa9t7r3E0PNE
68yqpoAWW57xqcj4+8MLgRlMKA4SSvPWhMN/eyw8eEcBQesAbY4MwyZ/3Ci30CtJ
qthn/MleG8C4DcvJkxAS+aUntfWdcLttbsdjhIbA33NFtWuaRjpT6hwiSzBcqmfK
kzwsDHZvSlIsK4iiPNdRvXnvT+U3lsnwV3nvTeOzvGuMdBvWmxCZcdeJoOfkcBM5
4Js1Qupg/XHwU3UkWvHGtXGcLuB2a1AzrNhuom7HOnqSlCLNnr9a5BGOvlOxAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUY+9v+tnoJgaDRKg73iI0OhPv+WIwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4Zm
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMTM4MzUyZTMyMzQzMDJlMzIzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIw
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAK58PQwDQYJKoZIhvcNAQELBQADggEBAC1mTiVrCeE3WyBZ
iPNfuam9lrhxe+kByhWe2+vvbNpw1pPmLdA8HGCUIyYcT8PtR9LSI4Uml8sfKXa1
y0ZVKrofJS286Cjkl8j+0aEk+145l7PNWqKA5PmmbwRtIUeSZCr3FL1keg9bvrlu
KxS1jYuxZnPRA6FU8o4iOlTizmLMm3t+SM66W45EV9gPGTfBRYEiD4s3al9tqAXb
p6VDb2H09+8iQ6NN0qgufthNV8DoGXCypD1sMSYntUzDZnGGtBwCSrYwdfXYjGII
kRdmEZDHb6zLJ1GuO90fFcwjX/TI8gzJsL+YNxIdM2QPQz2Ne05lU/HHVhAW1Z8h
afVDhY4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org