Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3139332e392e33322e302f32322d3234203d3e2030.roa
File: 3139332e392e33322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: mtzen51KMpRMc5JEaFJEP7t4wgAqYCr0M4cCCD5iJA4=
Subject key identifier: 9D:72:32:36:76:43:D3:FF:87:DB:4B:95:E5:28:29:DA:87:19:CA:B2
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 07A55E2F9F55F7EE111CEC8F3ADFC962E38E9DDE
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139332e392e33322e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:16:39 +0000
ROA not before: Fri 03 Mar 2023 16:11:39 +0000
ROA not after: Fri 01 Mar 2024 16:16:39 +0000
asID: 0
IP address blocks: 193.9.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a5:5e:2f:9f:55:f7:ee:11:1c:ec:8f:3a:df:c9:62:e3:8e:9d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Mar 3 16:11:39 2023 GMT
Not After : Mar 1 16:16:39 2024 GMT
Subject: CN=9D7232367643D3FF87DB4B95E52829DA8719CAB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:54:fb:7e:6e:2c:bc:7e:f3:a0:79:99:a9:
02:22:4c:65:57:7a:09:c6:45:c2:e4:f6:05:3f:47:
a8:c7:12:21:27:5f:6a:bd:34:85:a1:3f:28:02:b5:
4f:0f:8e:66:a4:ca:b4:76:db:00:f6:0b:62:4d:6d:
1b:46:67:c9:67:33:db:5a:32:f1:50:4d:13:0b:80:
72:d6:63:a7:05:74:ef:34:14:91:46:ba:b1:16:7e:
ff:6f:df:44:6c:23:5a:ae:15:3c:fc:24:d0:b6:57:
34:b0:10:d4:eb:19:c4:a7:0e:b3:22:43:ff:8b:c5:
f0:42:bd:d5:d9:db:98:b5:d9:d3:85:fc:df:c5:65:
aa:55:ad:97:32:5b:3d:32:4b:fa:3e:21:35:5f:60:
32:26:a9:c1:da:d3:1e:d8:af:61:be:6d:7d:a5:9b:
db:17:e1:3b:57:77:2e:c6:43:db:79:8b:72:fd:c8:
c3:7c:8b:0a:65:05:0c:0f:a0:b3:ca:c7:aa:54:4f:
c6:42:1c:f9:04:1f:b9:8d:45:49:2c:fe:fc:9c:c9:
63:34:ca:2b:a0:a5:ae:83:5b:46:e0:e6:a6:67:f2:
95:25:4b:bc:84:ef:5d:4d:c7:79:e4:40:3e:e5:59:
78:d5:be:6b:b6:8f:4f:d9:f2:5f:c9:6a:fc:fb:7d:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:72:32:36:76:43:D3:FF:87:DB:4B:95:E5:28:29:DA:87:19:CA:B2
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139332e392e33322e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.32.0/22
Signature Algorithm: sha256WithRSAEncryption
35:64:cc:42:0b:a2:ce:92:0a:eb:78:81:4e:4f:21:81:cd:e7:
85:5f:7d:b1:13:38:1d:8a:61:cc:b3:85:ba:74:e0:fe:9c:29:
28:f5:e3:2a:1e:88:44:d6:79:f8:8a:af:78:52:2a:f8:b9:f5:
e0:05:96:d7:e5:16:3e:ff:5d:de:b6:f6:91:55:57:73:34:48:
69:eb:2f:43:e0:60:e9:69:8f:d9:20:de:71:a2:d8:25:60:ed:
0d:c9:f6:38:35:79:d5:a0:d5:e7:ac:d7:be:97:e3:4d:dc:c0:
75:3e:b9:b4:70:09:14:c4:11:a1:97:ec:b0:1e:e2:c9:b6:01:
6a:07:75:21:c4:96:a6:0f:65:59:4e:a3:a8:20:24:b7:c0:cf:
31:99:b7:3b:c0:ac:f3:18:f5:f8:6c:a6:48:5a:36:5b:d8:f7:
30:9c:7e:be:e4:90:7d:cd:10:34:eb:73:29:00:dc:5e:30:c2:
b8:45:fe:0d:9d:76:7c:af:41:fe:e1:fb:10:7f:d9:a0:76:31:
ce:be:f3:69:0e:89:0d:a4:31:62:2a:15:1b:49:46:f3:42:86:
ea:9a:1d:78:be:be:ab:67:ca:49:3d:4a:33:25:96:bb:a8:3f:
d5:c1:38:df:6b:c0:ca:7f:1a:75:87:fb:1a:bc:c0:8d:66:bf:
15:12:18:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org