Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa (raw, json)
Hash identifier: KlN5IrcmQRVYBTuDuOKvJqW6hWMqPL3oMNyjGeXdeM0=
Subject key identifier: EE:23:33:19:40:93:A7:2D:85:6C:69:E3:04:37:D4:8B:54:7E:4D:15
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 6CD202B43791F4139ED3BD3278AD14A3F9DFDA14
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
Signing time: Sat 22 Oct 2022 04:33:17 +0000
ROA not before: Sat 22 Oct 2022 04:28:17 +0000
ROA not after: Sat 21 Oct 2023 04:33:17 +0000
asID: 42898
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d2:02:b4:37:91:f4:13:9e:d3:bd:32:78:ad:14:a3:f9:df:da:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Oct 22 04:28:17 2022 GMT
Not After : Oct 21 04:33:17 2023 GMT
Subject: CN=EE2333194093A72D856C69E30437D48B547E4D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:d8:8a:2d:f3:e7:cc:9b:b4:db:db:90:cc:
4c:5c:66:5f:61:50:05:47:5f:7a:37:7b:60:4b:30:
a7:55:39:86:0b:15:f5:c3:ea:13:59:a1:7e:24:c0:
d8:60:a9:ca:e2:21:a7:00:0c:f8:ab:ee:81:3f:c4:
4b:85:82:27:b5:9a:27:35:cd:af:fe:70:1f:4d:12:
14:06:4d:85:bd:5d:ee:a4:ec:41:6e:9b:18:05:b0:
07:07:3f:db:f4:10:74:8a:8a:08:9a:3b:75:4c:cb:
eb:0e:32:a8:c0:e4:95:84:0d:93:26:16:3e:01:98:
f1:4c:87:64:bd:d8:df:07:33:86:db:59:d3:24:2b:
9d:39:06:28:f0:56:85:e8:3e:5c:26:0a:71:d7:ae:
4b:5f:50:a1:41:63:69:f3:e5:97:a5:c7:e6:8b:3a:
cf:18:68:46:f5:84:46:5c:cc:48:95:33:eb:f4:01:
e8:0e:1f:7a:5a:49:9c:ea:2b:6e:b1:7f:f6:ce:f1:
b7:bb:52:a6:e7:af:a7:df:4e:e1:cb:ba:24:52:cd:
11:02:73:d5:5b:af:cc:c9:4e:f5:8d:66:36:db:14:
b1:c9:c4:a7:95:7f:c2:3f:a7:db:2c:b9:f7:ab:f2:
f8:67:63:48:8d:90:a2:02:d9:f8:b0:be:10:88:8b:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:33:19:40:93:A7:2D:85:6C:69:E3:04:37:D4:8B:54:7E:4D:15
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5b:fd:7e:9f:69:dd:9b:eb:6d:57:de:3c:ca:ca:e7:a8:5e:
53:c3:93:0f:68:da:b8:75:b1:0d:10:10:93:6f:ef:2f:47:04:
f9:b7:40:37:fe:b5:ed:7c:79:2b:7f:78:25:86:85:d5:88:ec:
3b:a5:47:40:a2:16:74:13:ee:69:d5:44:3c:a2:e1:6c:77:c9:
cf:49:52:43:5f:ee:a1:ec:8c:e4:58:52:5e:f0:01:da:a9:b2:
86:f6:71:8e:eb:ae:72:7b:e5:3a:74:e2:5c:fc:3a:87:cc:7b:
31:f6:c3:d4:53:47:d4:e9:fc:98:11:11:d4:78:c2:b6:47:73:
cf:08:91:f6:94:24:df:ec:b8:44:82:3a:1a:31:e4:ab:d7:3a:
11:86:62:1b:32:2f:af:5e:92:df:88:1d:c6:2d:ab:08:d8:d7:
65:ca:80:21:85:1c:b1:71:d8:d3:94:af:49:81:a2:5d:4f:d9:
97:4d:da:6a:ad:86:c9:4c:35:80:e0:b4:74:a6:ea:5f:b3:22:
f9:10:9d:31:c1:1e:6b:4e:0e:15:8e:14:1d:b4:62:24:7f:5b:
1e:73:6e:5d:5a:59:5b:ca:4e:13:87:a5:b2:16:70:ff:32:57:
4d:1a:bc:ed:c1:d0:d8:ff:18:3c:b9:49:6a:19:a8:d2:f4:e8:
68:bd:67:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org