Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e203538323132.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e203538323132.roa (raw, json)
Hash identifier: FfcSvbSw2QDGaVwVnpJCmm0su3YcfCfGVcqhg0xsKPk=
Subject key identifier: 20:4B:35:A4:51:0B:4F:70:C1:B6:D0:25:C3:9B:BB:CD:97:B7:03:C7
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 6502074925F6F3A7C18ABB9BEA9196E9FCCCD271
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e203538323132.roa
Signing time: Sat 22 Oct 2022 04:33:20 +0000
ROA not before: Sat 22 Oct 2022 04:28:20 +0000
ROA not after: Sat 21 Oct 2023 04:33:20 +0000
asID: 58212
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:02:07:49:25:f6:f3:a7:c1:8a:bb:9b:ea:91:96:e9:fc:cc:d2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Oct 22 04:28:20 2022 GMT
Not After : Oct 21 04:33:20 2023 GMT
Subject: CN=204B35A4510B4F70C1B6D025C39BBBCD97B703C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:11:76:49:17:f1:33:37:e8:40:cb:71:e5:
9c:4e:04:66:39:4c:5a:a9:b1:b1:8a:3e:f0:d2:8b:
ee:94:9b:5e:06:60:4e:f5:f3:90:80:de:c4:71:d3:
95:dd:97:b5:b0:13:54:42:dd:5a:50:4e:3a:3d:35:
37:96:4a:90:1b:3f:ab:eb:b3:15:80:c0:93:20:d1:
85:b8:b9:0e:42:5c:4e:72:49:af:37:a7:39:6c:50:
54:8b:8a:5b:2d:6f:af:d3:06:20:26:2e:26:95:0d:
f9:00:11:65:ae:df:36:d2:3c:80:71:24:47:97:27:
a8:30:59:e7:f0:df:be:80:af:bc:e6:59:b9:a7:0f:
39:4c:07:c3:cd:ee:fa:33:65:be:8a:1e:de:1e:da:
07:80:1a:32:da:47:4d:75:85:d3:ae:d9:68:83:21:
a9:fc:a0:7a:f9:61:21:13:b4:ce:57:69:0b:5e:da:
88:d0:2e:8c:a9:e8:ea:79:6f:8b:5a:c3:82:47:aa:
f8:e7:6c:11:4b:06:00:4b:d6:55:3d:02:80:ea:8e:
f0:20:1a:c5:b9:2a:3c:70:9f:19:07:83:7c:87:6f:
c8:88:17:4b:ab:22:2f:05:a6:04:b2:72:87:11:f2:
48:75:b6:59:14:d1:cd:84:13:db:cc:45:0b:81:df:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:35:A4:51:0B:4F:70:C1:B6:D0:25:C3:9B:BB:CD:97:B7:03:C7
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232302e302f32342d3234203d3e203538323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:59:9a:68:17:d3:a7:b3:e9:54:d5:02:c9:c0:36:18:75:51:
63:9c:af:8e:a7:ed:c7:3d:fb:49:69:77:d9:4d:34:74:c6:74:
bf:44:f8:bf:c5:05:89:e5:89:bd:f2:b5:b3:d5:24:c0:98:a0:
60:b1:0c:28:26:fa:7e:cd:9d:87:78:ba:30:bf:08:e3:52:1f:
23:a8:7e:be:05:ef:56:e1:1d:65:4e:86:4d:aa:33:25:a3:28:
37:eb:a9:e1:7f:d4:70:9c:0f:c2:85:56:e3:0a:d5:0c:11:80:
73:33:07:db:fc:19:1a:13:65:58:4a:02:71:df:87:bf:15:28:
e6:ec:cf:82:b9:74:01:c7:54:34:c2:08:d4:d4:94:9e:19:14:
94:e8:7b:e9:de:9a:9d:28:42:b5:32:8c:7f:dd:cc:e4:38:13:
00:6e:ca:77:c2:79:40:7a:c3:da:18:7a:ce:91:9d:17:11:be:
80:a8:25:52:4a:ee:c5:45:1c:d5:c3:bf:b9:8a:18:e1:40:a5:
13:12:10:dd:1a:4c:34:91:23:2e:ed:02:9d:1e:32:0c:94:70:
af:f6:41:81:e8:da:32:00:90:ab:17:03:28:5f:72:6f:64:b7:
ec:ed:05:9c:c7:8c:fa:80:29:e2:55:e0:c1:b5:c6:f9:63:e5:
1d:b4:4e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org