Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e342e302f32342d3234203d3e203437353833.roa
File: 3138352e3231312e342e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: uhY7K+yYsd21MMpDAObyuqyMLhbpaXeWDJ+MMSS2NF0=
Subject key identifier: 33:8E:BD:85:CE:2D:64:D1:BC:7B:3C:AA:25:2F:73:58:98:C8:0C:D6
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 6FD2291ACCFE872747899C5EF1F002CF59808AA9
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e342e302f32342d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:33:24 +0000
ROA not before: Sat 22 Oct 2022 04:28:24 +0000
ROA not after: Sat 21 Oct 2023 04:33:24 +0000
asID: 47583
IP address blocks: 185.211.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d2:29:1a:cc:fe:87:27:47:89:9c:5e:f1:f0:02:cf:59:80:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Oct 22 04:28:24 2022 GMT
Not After : Oct 21 04:33:24 2023 GMT
Subject: CN=338EBD85CE2D64D1BC7B3CAA252F735898C80CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:ce:99:60:19:d3:94:26:e7:10:cc:eb:e3:
c2:23:8b:83:46:ab:65:c0:94:4b:9d:ed:49:ff:d7:
bc:6c:da:d6:24:90:1e:bd:84:ba:d8:73:e0:2f:b6:
ae:e7:da:b9:0a:37:23:92:07:cf:4f:92:02:14:d8:
69:d9:d7:99:f0:ee:a6:b6:df:27:27:9d:e8:9f:6d:
61:81:8f:25:ab:88:25:cf:e8:fd:a0:78:4c:71:5d:
d3:59:99:fa:88:9a:57:53:11:2c:03:16:b9:47:1b:
d7:2e:b1:4f:71:0b:cc:f8:1f:8b:74:22:91:b2:65:
5f:83:7b:a6:50:35:46:08:53:ea:a2:41:35:af:6e:
11:0b:b8:ab:d0:f3:e3:ec:98:82:a6:b3:88:4d:b2:
4b:c0:ee:38:cf:0b:bd:ca:74:69:0b:d8:20:07:be:
1e:15:81:34:52:f2:df:3e:2a:05:41:5f:ba:8c:c2:
01:f5:58:9a:a2:d2:d1:5d:58:f4:e6:04:3b:d4:94:
5c:24:db:d8:30:17:0d:d6:7b:8b:e3:93:19:47:46:
42:da:21:0c:bd:07:28:2a:89:27:06:4e:ec:d7:54:
0c:f8:43:62:ba:fb:2c:6d:82:dd:11:65:29:0e:78:
96:59:2e:d9:55:b5:42:da:84:0a:52:a0:c8:d1:89:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:BD:85:CE:2D:64:D1:BC:7B:3C:AA:25:2F:73:58:98:C8:0C:D6
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e342e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.4.0/24
Signature Algorithm: sha256WithRSAEncryption
51:be:2d:ab:14:de:06:3d:0f:60:e1:b2:9b:0f:19:74:07:fb:
f7:e9:0a:a1:56:cb:1b:32:a9:bf:0d:bc:c9:46:c0:c6:c8:31:
1b:a1:1b:7b:60:64:82:ec:82:77:24:61:3b:f8:05:27:95:79:
20:14:cc:84:69:b1:47:2e:17:4c:3f:31:d5:f8:e0:14:d0:4b:
dd:68:fa:4a:be:79:b5:1d:49:d6:a3:09:93:1b:79:fa:0b:17:
78:8e:2b:28:f9:fc:b2:e9:40:32:77:1c:fa:c0:3d:3f:d7:c0:
82:d1:56:20:a0:2e:ec:fd:2b:dc:58:6d:40:36:3e:5b:88:bd:
d6:e2:bb:4d:91:84:7e:07:45:6c:e5:f2:91:f1:c1:88:13:48:
3a:bc:98:a5:0f:ab:35:e7:71:0d:31:35:68:7f:f2:8d:78:e8:
3f:c0:82:75:37:45:30:6f:3b:43:4c:a4:f1:db:5e:cb:53:fe:
fc:e8:90:5f:67:21:8c:f0:3a:2b:be:75:bf:0e:7f:51:f8:67:
8c:f2:5f:40:1d:a7:93:24:df:d4:ac:7d:92:60:94:2a:3e:14:
4d:a4:6c:5e:91:5b:fa:54:bf:80:6d:7e:80:f7:7b:ff:73:6f:
81:92:a2:08:3b:84:e7:b6:e6:73:a7:b4:d2:04:af:44:a1:00:
67:4e:b9:55
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUb9IpGsz+hydHiZxe8fACz1mAiqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MjRaFw0yMzEwMjEwNDMzMjRaMDMxMTAvBgNV
BAMTKDMzOEVCRDg1Q0UyRDY0RDFCQzdCM0NBQTI1MkY3MzU4OThDODBDRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4M86ZYBnTlCbnEMzr48Iji4NG
q2XAlEud7Un/17xs2tYkkB69hLrYc+Avtq7n2rkKNyOSB89PkgIU2GnZ15nw7qa2
3ycnneifbWGBjyWriCXP6P2geExxXdNZmfqImldTESwDFrlHG9cusU9xC8z4H4t0
IpGyZV+De6ZQNUYIU+qiQTWvbhELuKvQ8+PsmIKms4hNskvA7jjPC73KdGkL2CAH
vh4VgTRS8t8+KgVBX7qMwgH1WJqi0tFdWPTmBDvUlFwk29gwFw3We4vjkxlHRkLa
IQy9BygqiScGTuzXVAz4Q2K6+yxtgt0RZSkOeJZZLtlVtULahApSoMjRifu1AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUM469hc4tZNG8ezyqJS9zWJjIDNYwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzEzMTJlMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAudMEMA0GCSqGSIb3DQEBCwUAA4IBAQBRvi2rFN4G
PQ9g4bKbDxl0B/v36QqhVssbMqm/DbzJRsDGyDEboRt7YGSC7IJ3JGE7+AUnlXkg
FMyEabFHLhdMPzHV+OAU0EvdaPpKvnm1HUnWowmTG3n6Cxd4jiso+fyy6UAydxz6
wD0/18CC0VYgoC7s/SvcWG1ANj5biL3W4rtNkYR+B0Vs5fKR8cGIE0g6vJilD6s1
53ENMTVof/KNeOg/wIJ1N0UwbztDTKTx217LU/786JBfZyGM8DorvnW/Dn9R+GeM
8l9AHaeTJN/UrH2SYJQqPhRNpGxekVv6VL+AbX6A93v/c2+BkqIIO4TntuZzp7TS
BK9EoQBnTrlV
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org