Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa
File: 3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: efrihCnTdGV2bkYq97ia5MsAFiIhEPkncSvAc48rY9I=
Subject key identifier: D4:2C:E0:53:73:4D:DF:B7:FD:E1:4F:AA:E3:85:91:07:91:57:3A:9F
Certificate issuer: /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial: 6A701E4C9FA630836C23F5C3112CA11BF8DA56AE
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa
Signing time: Sat 22 Oct 2022 04:34:05 +0000
ROA not before: Sat 22 Oct 2022 04:29:05 +0000
ROA not after: Sat 21 Oct 2023 04:34:05 +0000
asID: 204170
IP address blocks: 185.185.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:70:1e:4c:9f:a6:30:83:6c:23:f5:c3:11:2c:a1:1b:f8:da:56:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
Validity
Not Before: Oct 22 04:29:05 2022 GMT
Not After : Oct 21 04:34:05 2023 GMT
Subject: CN=D42CE053734DDFB7FDE14FAAE385910791573A9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:39:4f:99:df:41:2b:8c:22:f9:37:6e:68:
0c:7c:af:36:ac:26:ab:ce:58:d7:48:f9:86:d8:ab:
31:b1:15:fe:e9:e5:e5:ab:11:ea:6e:54:d5:e4:68:
0d:3b:8b:cc:06:ba:d1:23:ee:ee:c8:ce:5a:7b:9a:
e2:ab:aa:66:ff:00:35:a8:b3:f9:7a:df:b1:5d:bc:
11:1a:0a:ee:57:60:18:09:90:a7:17:b0:5d:dc:50:
8b:7a:84:47:05:e8:fd:39:d2:a0:f8:a2:50:65:1f:
45:4b:9d:e0:3d:68:70:ce:93:52:4a:5c:c4:94:a1:
ab:73:19:9b:82:f4:d5:ba:49:f3:66:89:34:8f:ab:
19:c3:57:58:7f:de:ad:13:29:ee:83:92:19:0b:e6:
71:ff:7f:73:44:6f:ba:a5:18:69:6f:ef:70:ca:d7:
df:6d:eb:13:22:6a:b2:18:cf:0d:ee:1c:c2:64:3c:
c0:9c:d6:be:2c:11:cb:c4:4d:15:ac:8e:e9:ee:0a:
bc:1a:30:ba:03:bd:ec:71:94:8d:d6:f1:a8:1d:90:
25:61:0d:f1:92:5d:1d:49:24:89:92:0d:3c:c9:c4:
7f:c8:63:64:0b:89:30:81:94:a7:03:86:c8:47:d1:
0b:d8:59:a9:dc:f2:db:10:9f:48:93:dc:6c:93:73:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:E0:53:73:4D:DF:B7:FD:E1:4F:AA:E3:85:91:07:91:57:3A:9F
X509v3 Authority Key Identifier:
keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.125.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1e:8b:b2:5d:02:2f:90:19:73:3e:44:e4:5a:ff:69:80:61:
ab:53:a8:06:65:42:b3:17:42:c7:01:4b:03:f7:72:d1:00:5d:
74:5d:ce:18:a0:19:6d:ae:c8:1e:ae:39:02:93:d1:3e:4e:9b:
1c:68:af:28:73:c8:25:0c:a3:9b:92:47:90:5c:8c:a8:03:13:
34:b1:6b:3f:b6:2f:2f:72:ab:0b:12:b4:42:2a:0e:b9:22:c5:
16:7c:be:31:12:df:f6:28:3c:f1:42:48:ba:60:f9:8a:3e:51:
6d:c7:59:db:f8:81:e9:45:a9:8f:3b:e0:ad:d5:ee:8a:ff:e3:
b6:61:31:5a:e2:94:3b:86:51:09:b6:a4:7f:26:14:5c:f2:94:
d9:32:40:5f:01:55:d3:80:50:a9:38:00:f3:9d:c6:b9:e1:fa:
69:f4:d4:b3:6b:9c:e6:eb:f4:b7:63:cf:9e:6b:aa:3f:b7:30:
97:e5:62:af:50:3e:3e:d2:b7:fb:5a:de:fb:62:9f:f0:b5:d2:
a0:bc:b0:e4:d2:4f:fc:3f:b5:bd:5d:38:ed:86:91:96:67:1f:
10:9e:ad:43:31:8d:63:97:9d:b6:38:df:aa:fa:d9:15:0d:89:
7f:c7:eb:90:81:4f:98:df:48:8b:30:a2:f7:e7:25:66:85:0d:
71:10:8b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org