Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e203330383233.roa
File: 3138352e3231312e33332e302f32342d3234203d3e203330383233.roa (raw, json)
Hash identifier: /Zxbb3SMkc58sNf76eSqJ3ydIJTuyplwqYgbDB+ZtUQ=
Subject key identifier: 3B:B9:4A:AF:E6:72:7F:20:38:B2:0E:23:2B:3A:44:D5:C9:17:18:0B
Certificate issuer: /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial: 051A24026B9F29B638BA092E5479321011AAB223
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e203330383233.roa
Signing time: Sat 22 Oct 2022 04:34:08 +0000
ROA not before: Sat 22 Oct 2022 04:29:08 +0000
ROA not after: Sat 21 Oct 2023 04:34:08 +0000
asID: 30823
IP address blocks: 185.211.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1a:24:02:6b:9f:29:b6:38:ba:09:2e:54:79:32:10:11:aa:b2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
Validity
Not Before: Oct 22 04:29:08 2022 GMT
Not After : Oct 21 04:34:08 2023 GMT
Subject: CN=3BB94AAFE6727F2038B20E232B3A44D5C917180B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:21:88:49:2f:2b:17:27:d9:12:94:10:fb:
49:ba:ea:08:96:4e:d0:b6:c6:d7:f0:e8:fc:5e:62:
72:49:ae:8a:ef:a6:65:23:0c:67:d1:51:cd:42:20:
96:c1:0c:dd:9a:72:47:a3:21:e8:9d:d8:08:17:7d:
22:43:a6:08:12:ae:3c:47:64:0c:13:7f:0b:08:f8:
8a:50:c8:7f:cb:9b:e3:4a:64:dd:54:e7:59:ea:8d:
07:d0:2d:03:bb:a2:98:0c:2a:6d:bb:9c:c4:7b:88:
c3:d8:ef:42:e4:94:3b:12:d8:22:59:12:19:54:18:
01:53:0a:32:8c:4b:59:93:24:67:ff:e7:22:7c:b1:
83:10:bd:dd:16:ac:9a:b0:c7:59:9b:9a:d1:44:2a:
72:92:ec:37:28:98:18:1b:35:58:ef:48:68:54:7b:
1c:f5:c0:1e:8e:12:5f:76:3a:62:5b:90:43:15:da:
95:5f:ce:5c:14:d1:34:03:b5:6e:dc:49:cf:93:8b:
a8:fa:e4:a5:80:12:eb:9a:df:f7:f1:1b:58:c9:47:
a3:ba:f7:b3:c4:73:36:56:c7:06:4b:25:f2:c9:96:
cf:4f:65:86:35:73:09:6f:e1:d9:62:80:e3:37:02:
56:1f:1a:12:7c:0b:a1:f8:46:f6:a1:37:74:6c:fe:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:4A:AF:E6:72:7F:20:38:B2:0E:23:2B:3A:44:D5:C9:17:18:0B
X509v3 Authority Key Identifier:
keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e203330383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.33.0/24
Signature Algorithm: sha256WithRSAEncryption
36:cf:60:99:33:05:b5:d9:d1:6f:a9:b5:ba:54:99:4a:6b:5a:
8c:e7:2f:c8:a8:a2:ae:15:ab:7f:8a:3a:b9:a9:93:2f:89:f3:
7a:fd:e2:46:81:4f:9e:f5:e6:4b:cc:55:5f:f7:94:ec:1b:c3:
f3:30:70:cb:02:21:1a:8a:98:35:f4:64:99:6d:fa:6c:29:ce:
5b:90:27:f5:02:41:f3:9f:aa:84:ce:95:36:4f:60:14:95:59:
32:f2:67:50:be:bb:93:06:91:42:ff:0c:21:95:53:d3:a0:35:
1a:fe:69:12:fb:a3:f8:0b:08:88:af:ad:79:b6:2e:58:b1:0a:
bd:bb:d4:12:b4:32:f9:35:bf:e5:9c:c0:6a:e3:08:77:82:e0:
b9:9a:7e:d8:39:85:14:d1:43:0d:8b:3f:d7:d4:6e:f6:11:22:
4f:b9:b4:3e:d9:18:1e:de:31:85:b4:f0:e5:64:59:4c:0f:eb:
d7:21:7d:26:d7:56:cc:b8:eb:66:f9:e6:33:55:58:4f:9f:0c:
d0:8d:2e:a7:a8:22:10:3a:1c:a0:5c:1c:36:67:28:34:a3:e5:
42:03:62:71:1a:c0:d4:3f:88:5d:55:05:8c:f0:b3:0d:7e:3a:
ba:ae:6c:ae:39:ae:2d:1d:08:7a:07:e6:63:06:a1:4b:da:00:
bc:21:17:d1
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUBRokAmufKbY4ugkuVHkyEBGqsiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJkMjljOTk2YWJjYzcyYzcyMjc5ZWY3ODk4Nzk1MWI4
MjVhZTQwMDAeFw0yMjEwMjIwNDI5MDhaFw0yMzEwMjEwNDM0MDhaMDMxMTAvBgNV
BAMTKDNCQjk0QUFGRTY3MjdGMjAzOEIyMEUyMzJCM0E0NEQ1QzkxNzE4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFECGISS8rFyfZEpQQ+0m66giW
TtC2xtfw6PxeYnJJrorvpmUjDGfRUc1CIJbBDN2ackejIeid2AgXfSJDpggSrjxH
ZAwTfwsI+IpQyH/Lm+NKZN1U51nqjQfQLQO7opgMKm27nMR7iMPY70LklDsS2CJZ
EhlUGAFTCjKMS1mTJGf/5yJ8sYMQvd0WrJqwx1mbmtFEKnKS7DcomBgbNVjvSGhU
exz1wB6OEl92OmJbkEMV2pVfzlwU0TQDtW7cSc+Ti6j65KWAEuua3/fxG1jJR6O6
97PEczZWxwZLJfLJls9PZYY1cwlv4dligOM3AlYfGhJ8C6H4RvahN3Rs/sF9AgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUO7lKr+ZyfyA4sg4jKzpE1ckXGAswHwYDVR0j
BBgwFoAUItKcmWq8xyxyJ573iYeVG4Ja5AAwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzMvMjJEMjlDOTk2QUJDQzcyQzcyMjc5RUY3ODk4Nzk1MUI4
MjVBRTQwMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0l0S2NtV3E4eHl4eUo1
NzNpWWVWRzRKYTVBQS5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
My8zMTM4MzUyZTMyMzEzMTJlMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMz
MzAzODMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC50yEwDQYJKoZIhvcNAQELBQADggEBADbPYJkz
BbXZ0W+ptbpUmUprWoznL8iooq4Vq3+KOrmpky+J83r94kaBT5715kvMVV/3lOwb
w/MwcMsCIRqKmDX0ZJlt+mwpzluQJ/UCQfOfqoTOlTZPYBSVWTLyZ1C+u5MGkUL/
DCGVU9OgNRr+aRL7o/gLCIivrXm2LlixCr271BK0Mvk1v+WcwGrjCHeC4Lmaftg5
hRTRQw2LP9fUbvYRIk+5tD7ZGB7eMYW08OVkWUwP69chfSbXVsy462b55jNVWE+f
DNCNLqeoIhA6HKBcHDZnKDSj5UIDYnEawNQ/iF1VBYzwsw1+OrqubK45ri0dCHoH
5mMGoUvaALwhF9E=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org