Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e2033333536.roa
File: 3138352e3231312e33322e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: a41d8a1yhkAZvq4swomI3LF5aMs2egZJ0DKlTBQ/6WA=
Subject key identifier: A0:F0:06:61:C4:9A:D2:6F:4A:B8:68:83:82:53:B0:94:B5:26:6D:0A
Certificate issuer: /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial: 62F9306B3BD35D6F4B65A3FB3301E8B54A486E7B
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e2033333536.roa
Signing time: Tue 28 Jun 2022 04:41:00 +0000
ROA not before: Tue 28 Jun 2022 04:36:00 +0000
ROA not after: Tue 27 Jun 2023 04:41:00 +0000
asID: 3356
IP address blocks: 185.211.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f9:30:6b:3b:d3:5d:6f:4b:65:a3:fb:33:01:e8:b5:4a:48:6e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
Validity
Not Before: Jun 28 04:36:00 2022 GMT
Not After : Jun 27 04:41:00 2023 GMT
Subject: CN=A0F00661C49AD26F4AB868838253B094B5266D0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:91:e4:20:5d:30:6b:b7:84:8b:76:0e:2d:
62:76:71:0d:59:3b:23:e6:c1:1f:59:bd:a7:09:54:
e3:8e:2e:d8:47:4a:0e:8b:6b:90:f8:fd:e1:1d:95:
a4:75:34:68:1e:d0:e6:65:0a:49:9d:d1:86:4c:f3:
24:a1:71:a7:bf:fd:03:ad:a9:cc:c8:7b:4b:4e:bf:
03:64:fc:b2:e4:42:fd:71:3e:dc:cb:3d:98:87:f5:
2c:d1:d3:01:20:c1:aa:cd:c5:91:ad:36:9f:1f:4b:
ef:06:bc:71:87:a8:26:20:27:1d:91:a5:99:00:72:
66:d0:eb:d0:70:4c:67:f2:99:22:8a:be:d9:41:62:
91:cd:b1:05:38:3e:7a:2c:06:b9:64:f0:5d:83:93:
10:f3:31:d2:af:2f:f5:00:41:cd:e2:27:79:12:fd:
b5:5d:02:c6:f9:83:79:d9:99:29:5f:c9:f8:00:62:
23:52:24:a8:62:88:b1:40:87:cc:f4:80:54:b4:8e:
59:d3:b5:9a:47:2f:d1:66:fe:8e:42:d8:26:8d:79:
b0:4b:7a:50:4f:28:db:03:04:f1:d9:60:c4:d6:1d:
9d:fe:df:11:da:2b:dd:84:66:6b:81:56:a2:03:cb:
fc:03:d1:ca:68:fb:1f:72:30:46:36:9c:7b:aa:c9:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:06:61:C4:9A:D2:6F:4A:B8:68:83:82:53:B0:94:B5:26:6D:0A
X509v3 Authority Key Identifier:
keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:27:7f:69:cf:ab:7e:4f:19:aa:20:69:96:af:9c:e8:6d:51:
19:94:0e:f1:b6:70:14:1d:81:96:04:1b:04:49:ac:a3:8a:a6:
1a:80:50:c4:88:42:53:c9:29:05:b1:9d:6a:38:e7:47:b9:9e:
d1:0f:f7:d0:17:31:ec:51:01:89:ba:75:94:d1:4f:f8:e9:05:
5d:fb:11:ee:59:29:1a:8d:a5:50:41:bb:90:23:3c:6a:03:1a:
69:66:9c:30:2f:27:18:60:a0:7c:24:d4:62:7a:01:d8:25:ae:
c7:40:d1:11:f8:23:63:c6:94:27:90:86:75:e0:9f:d3:14:c4:
f1:df:c0:19:1d:13:f6:03:1a:73:b1:e4:96:31:5e:f3:13:a2:
6e:50:6f:22:7d:ef:38:5b:a2:f1:db:b9:b7:64:be:5f:ae:b2:
cc:8d:83:34:46:69:ae:9e:8a:4b:4d:cf:ba:69:f1:df:57:b0:
61:40:6f:6e:42:0d:b3:a2:40:74:02:6c:a5:07:50:5c:2c:a2:
ce:96:59:f1:ec:12:7d:b5:40:b6:c2:ac:2a:79:b2:a3:55:ec:
b6:57:3b:74:a4:82:5a:d4:9d:76:d9:81:b5:09:69:b0:ec:2c:
d4:31:50:8c:cd:10:33:9b:c9:8e:9f:90:9e:c1:2b:74:d6:97:
c6:59:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org