Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138392e32342e302f32342d3234203d3e2030.roa
File: 3138352e3138392e32342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 7Vdi9WQsPKe5LXb2+H81YUqws2iHHsAF4MGOTeXuefI=
Subject key identifier: 3C:64:0C:11:00:4D:7F:61:03:B0:A0:7F:14:17:68:39:0E:16:6E:95
Certificate issuer: /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial: 3978D92B4BF35C3D7A023EAE1837FFB5B96C789D
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138392e32342e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:34:06 +0000
ROA not before: Fri 03 Mar 2023 15:29:06 +0000
ROA not after: Fri 01 Mar 2024 15:34:06 +0000
asID: 0
IP address blocks: 185.189.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:78:d9:2b:4b:f3:5c:3d:7a:02:3e:ae:18:37:ff:b5:b9:6c:78:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
Validity
Not Before: Mar 3 15:29:06 2023 GMT
Not After : Mar 1 15:34:06 2024 GMT
Subject: CN=3C640C11004D7F6103B0A07F141768390E166E95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:82:25:8b:28:47:1c:82:83:be:13:5a:fc:
0a:a2:72:3f:5b:5d:5e:99:b6:90:70:88:4a:e4:60:
d2:a2:ea:60:b3:66:fa:7d:4e:3d:b0:3c:18:02:27:
d3:59:a8:a6:55:92:ce:76:60:c1:06:19:de:53:52:
3c:b3:ed:81:04:0c:3a:66:45:a2:ee:20:79:20:90:
81:5d:4f:03:83:2e:6a:88:a5:b2:2c:ff:d3:44:6c:
7e:a7:38:3a:95:fd:e9:4f:5a:42:df:cb:3f:50:12:
24:50:3e:cc:d9:fc:47:5e:33:0a:22:2b:af:b5:5e:
fe:cc:07:e3:2d:7f:b5:8c:c5:a7:36:29:8e:09:e7:
99:c3:d5:36:f0:f6:be:29:9c:04:11:94:08:65:44:
39:1b:b4:d9:62:63:33:cb:2a:70:de:e1:0d:a4:76:
5a:cf:e0:c0:dd:98:6d:8f:9f:e0:73:6a:72:6f:68:
5a:07:2e:d7:7d:28:26:ec:94:d2:59:50:ea:ff:fd:
e6:85:44:68:df:ea:52:09:dd:16:d9:17:45:e7:f2:
d7:27:29:4e:32:34:8f:81:d3:e8:78:a4:a8:45:93:
c6:fd:ef:4e:6a:92:ff:ce:68:0b:5c:24:14:39:13:
04:b0:f9:58:d1:90:e8:95:c1:5b:0d:cd:3e:d4:f3:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:64:0C:11:00:4D:7F:61:03:B0:A0:7F:14:17:68:39:0E:16:6E:95
X509v3 Authority Key Identifier:
keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138392e32342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:95:b6:a7:66:69:b5:13:f2:96:c4:51:02:a0:4f:71:a2:6e:
04:c7:a3:d9:02:77:5e:11:f9:e9:4c:05:46:d8:f2:94:ea:2c:
1e:27:50:b2:89:db:c6:90:ff:f7:3e:fb:14:59:5a:b4:4e:99:
6b:b1:45:9e:22:dc:93:64:42:fc:5e:4f:31:3d:88:84:35:91:
0e:80:ed:de:ce:5a:b0:ff:51:3a:de:16:91:65:f3:94:f8:13:
98:f6:e7:bf:ed:16:f5:52:22:eb:f6:1b:fe:45:02:d0:38:5f:
2f:41:77:12:c7:01:04:6f:3b:fb:b1:4b:59:ec:dd:dc:a1:73:
8e:df:66:0b:ff:5d:cc:47:a1:9a:5a:5b:79:5f:af:fd:5d:3a:
4d:00:a6:91:b7:1a:06:da:d8:16:a9:2f:6c:82:eb:56:26:b2:
0e:06:31:1e:97:68:49:e2:24:85:c3:23:19:10:fe:4f:70:5f:
2b:ca:00:bc:7d:d3:3f:d4:19:a9:63:ca:ef:e5:b8:7e:fa:d1:
10:39:f7:56:b3:65:e3:a9:5b:84:1d:ee:bc:e9:fd:7d:8a:7a:
a7:c2:d5:1d:fc:01:5c:97:01:bb:a1:9b:c5:af:19:9d:79:b0:
bf:ab:ed:6d:72:4d:ae:ad:76:47:a7:6f:a1:5d:cc:0d:73:9d:
1a:57:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org