Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231362e3233312e302f32342d3234203d3e2030.roa
File: 3138352e3231362e3233312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: JuhNylQ6TICfWn2OKK5uI8STsE7dFYrYgxRZmxwH+G4=
Subject key identifier: A3:92:47:CD:8A:96:0E:FE:5C:67:AB:9D:BF:3B:19:88:44:49:9B:CF
Certificate issuer: /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial: 4F21EB6892969FB2A54A90A12D7726158441D87F
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231362e3233312e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:36:33 +0000
ROA not before: Fri 03 Mar 2023 15:31:33 +0000
ROA not after: Fri 01 Mar 2024 15:36:33 +0000
asID: 0
IP address blocks: 185.216.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:21:eb:68:92:96:9f:b2:a5:4a:90:a1:2d:77:26:15:84:41:d8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
Validity
Not Before: Mar 3 15:31:33 2023 GMT
Not After : Mar 1 15:36:33 2024 GMT
Subject: CN=A39247CD8A960EFE5C67AB9DBF3B198844499BCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:d0:86:46:4b:44:ca:28:58:a8:87:cc:f1:
08:6a:a1:34:20:e0:19:de:ed:1c:23:8d:a2:d3:be:
4e:e5:bc:fe:f9:d1:4d:e0:86:8e:9f:7b:e4:f0:b2:
24:e2:f0:aa:d3:8d:33:68:cd:15:a3:77:d7:b8:00:
99:16:7d:c2:84:ef:8e:70:dc:f3:c9:fe:8a:c7:5b:
63:69:09:13:38:68:99:15:42:fe:30:e9:6a:22:11:
d0:8e:be:6d:29:4c:25:84:3f:b9:e9:bc:d2:b8:0a:
b6:49:31:5c:b4:15:45:17:95:5e:45:96:78:97:e4:
82:5d:b5:4c:a3:ff:71:ce:ae:6e:16:1e:5a:f3:1c:
1c:47:5d:4c:d2:bd:9c:b6:77:88:39:74:36:51:f8:
d0:b2:10:97:39:63:b6:c1:a5:3e:60:bc:f2:b9:48:
8e:e3:22:8a:e6:36:01:5f:4e:2f:ed:32:7a:58:04:
46:35:d0:9e:95:61:67:36:96:42:bb:a4:36:7a:c8:
66:ae:f1:50:8e:5b:33:2a:c8:ff:47:3d:f3:f1:59:
37:4d:5a:f2:09:54:67:65:34:84:7a:ca:e7:ea:b0:
12:3b:c1:b0:5c:ad:df:95:ac:19:af:05:df:1e:dc:
53:22:54:ce:05:80:fb:29:d5:55:db:ae:32:27:24:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:47:CD:8A:96:0E:FE:5C:67:AB:9D:BF:3B:19:88:44:49:9B:CF
X509v3 Authority Key Identifier:
keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231362e3233312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.231.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ab:0c:01:b4:14:7a:46:a7:8b:65:9a:89:2f:51:ac:57:59:
30:79:8b:19:16:32:50:1b:11:51:cf:1f:44:8c:a0:37:3f:9e:
71:b4:0b:36:78:ea:3c:73:07:42:52:49:85:19:7c:e4:52:c1:
c4:d2:dd:e7:b4:11:86:9c:b9:91:db:6b:29:95:52:5a:b6:92:
ce:a2:52:d9:fd:82:c6:e8:eb:80:b4:77:a5:f3:3a:e9:e8:a4:
b1:a1:44:22:3d:79:bf:01:1b:33:04:97:8b:77:67:91:a3:56:
91:71:67:62:42:35:83:a2:82:63:75:31:e0:42:00:89:a6:c9:
a7:37:a4:52:01:5a:61:41:53:93:6e:1b:34:90:b9:22:41:65:
5f:6c:89:27:d2:25:53:cc:a8:95:4d:58:9f:64:2a:6a:01:72:
82:85:a1:ef:96:fd:ba:8a:d0:00:8e:c9:24:09:ea:b6:06:69:
1c:1f:44:4d:fa:82:02:c8:f7:4b:79:d8:87:79:f3:82:34:37:
7d:42:e2:54:26:e6:7f:75:f7:e8:41:b4:e6:13:90:f1:12:94:
65:79:da:a5:bd:12:44:73:38:76:90:5f:c6:c5:68:0b:88:28:
03:06:c0:32:93:82:67:6c:ac:b2:db:23:b3:9d:89:7c:8e:9f:
d0:d8:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org