Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e203631333137.roa
File: 3138352e3231312e33322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: StyVFFtVQ6UgmXlsxivIKgz2s+16B5/LsHouDbd9B6I=
Subject key identifier: F9:1C:82:30:D3:B6:6A:D4:DE:C3:99:F1:13:E8:54:D1:1D:44:3F:F2
Certificate issuer: /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial: 32F3F30E1142DB78E6893B48CD302B6AD3BCF5C8
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e203631333137.roa
Signing time: Tue 28 Jun 2022 04:40:59 +0000
ROA not before: Tue 28 Jun 2022 04:35:59 +0000
ROA not after: Tue 27 Jun 2023 04:40:59 +0000
asID: 61317
IP address blocks: 185.211.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f3:f3:0e:11:42:db:78:e6:89:3b:48:cd:30:2b:6a:d3:bc:f5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
Validity
Not Before: Jun 28 04:35:59 2022 GMT
Not After : Jun 27 04:40:59 2023 GMT
Subject: CN=F91C8230D3B66AD4DEC399F113E854D11D443FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:db:cf:05:ef:40:08:6c:04:88:a6:17:a9:
35:09:22:c4:34:34:4e:0c:38:7e:4c:f3:9a:d0:53:
a9:37:26:6a:88:67:ed:3a:6b:49:30:01:6c:6e:8a:
d0:cf:c6:7d:28:ce:db:3c:f5:bd:d5:2d:e2:03:bc:
44:ce:b7:28:18:6a:b4:da:c5:08:d3:d0:57:4c:20:
b2:8d:6a:f4:46:96:23:52:a0:2b:db:29:9e:dc:ae:
a1:84:20:a6:50:b3:6e:36:4b:2a:49:34:ee:b4:cd:
5d:ce:4b:ca:ac:13:61:6f:c1:26:82:3d:8e:51:64:
2c:b1:35:5d:8f:eb:ab:15:8e:22:73:ec:82:42:30:
37:5a:f6:da:81:83:6a:62:d0:df:b8:e0:77:b5:b5:
79:16:02:28:68:10:e1:79:3d:15:20:59:a1:05:dc:
84:69:c5:c8:be:1c:f4:12:d5:e0:d1:b9:0a:46:56:
4a:c5:e4:a1:41:84:16:28:a2:fd:f3:fc:14:14:50:
70:a5:08:ef:e0:1e:4f:3b:64:23:7c:5f:ed:7a:de:
d1:2a:6a:ee:22:d5:3d:c9:b9:23:60:1b:68:b4:1f:
f7:8f:24:e7:75:fd:82:a0:c9:bb:b1:81:8a:c7:ef:
92:da:63:f2:06:f2:a4:6c:0f:23:5f:1c:1d:8b:ff:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1C:82:30:D3:B6:6A:D4:DE:C3:99:F1:13:E8:54:D1:1D:44:3F:F2
X509v3 Authority Key Identifier:
keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:03:2c:7f:e0:4f:51:64:b3:35:40:bd:51:07:68:9c:23:b4:
43:1b:cf:c8:ad:c7:ea:2c:27:6d:d6:78:81:b2:e9:f6:b7:7b:
bb:e2:99:21:62:64:61:c5:28:15:04:7f:2d:ce:04:17:97:31:
8d:d3:be:99:48:70:8a:d2:72:90:87:37:e6:1b:74:33:fe:b4:
25:09:8a:52:3e:6b:82:51:f9:e4:47:89:c1:53:22:4f:26:fe:
f7:88:42:62:8e:b4:3c:08:98:0c:49:8f:49:6f:e4:b1:05:9a:
70:aa:0c:20:f3:9c:6e:c4:94:90:c4:2e:1a:f0:10:0e:64:a6:
4a:69:f5:27:7a:c6:00:88:24:66:fc:8e:c3:56:cf:49:c3:be:
8c:6b:2a:15:a8:29:f4:54:09:ec:e4:ff:a9:ca:11:3b:05:32:
cc:91:ca:ed:b2:f6:2a:78:58:aa:c5:c5:90:07:46:67:0a:c1:
9f:57:e2:8e:11:6e:3b:85:18:c6:ca:28:ee:b8:b3:bd:42:5b:
33:73:33:24:5e:52:8c:58:98:09:30:b5:9f:56:f2:84:f6:9e:
5d:21:5c:94:cf:9c:53:99:a6:5c:e6:2a:9a:ab:4e:a8:06:b7:
18:27:e9:58:01:da:72:0a:61:57:c1:e4:1b:9e:0e:a6:da:6d:
00:fe:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org