Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3139342e33322e3233322e302f32332d3234203d3e2030.roa
File: 3139342e33322e3233322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: YWmvq69RGBE7C7lS+qBoklVVGzPe45jedU0VKklpzYc=
Subject key identifier: D8:DB:35:5A:4F:9E:A9:CB:68:CC:87:27:2A:06:DD:85:7E:E7:45:55
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 1FAC15C1CBE8B297D37FE3A6746C315F6EAD41ED
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139342e33322e3233322e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:17:08 +0000
ROA not before: Fri 03 Mar 2023 16:12:08 +0000
ROA not after: Fri 01 Mar 2024 16:17:08 +0000
asID: 0
IP address blocks: 194.32.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ac:15:c1:cb:e8:b2:97:d3:7f:e3:a6:74:6c:31:5f:6e:ad:41:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Mar 3 16:12:08 2023 GMT
Not After : Mar 1 16:17:08 2024 GMT
Subject: CN=D8DB355A4F9EA9CB68CC87272A06DD857EE74555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:0c:79:13:74:64:92:49:6f:a9:cc:9c:9e:
3f:cc:99:c0:f2:46:02:2e:37:1f:f2:12:06:96:f0:
03:f0:0a:f9:84:ef:8b:4b:38:41:3b:2c:af:04:36:
27:40:89:46:d5:2b:4b:80:7e:6d:d0:ec:6e:31:b5:
93:cd:bf:6c:a5:b3:cc:55:bb:21:9e:ea:95:c6:c0:
ad:5c:d3:a4:07:40:a5:9e:09:e0:c5:e3:cb:35:3d:
ee:0d:9f:7c:09:74:09:fc:3f:21:28:22:34:38:1f:
77:b9:21:ea:27:24:2b:12:31:e8:cb:9d:90:7f:ba:
d8:6f:20:fa:85:14:b5:c8:f5:62:cd:89:8b:7d:17:
98:68:f1:05:32:ad:10:a8:c9:a7:02:ea:fc:76:84:
28:52:e9:17:e5:18:78:6d:fe:83:8b:13:0e:a8:72:
c1:dc:53:a4:30:1c:86:34:b8:9e:40:c7:71:c6:49:
a6:2d:7e:13:49:f3:7c:95:d7:ba:ed:6e:1e:6a:ae:
7d:6f:08:8d:c7:3e:ce:aa:99:04:4a:fa:61:40:39:
47:a1:46:bd:81:f4:f7:18:0d:88:ee:18:34:45:f0:
db:e1:90:78:e7:c2:c8:99:ca:ad:38:15:01:ac:3d:
5f:bc:8e:2d:5e:03:7f:79:5c:6b:c2:c9:e6:97:63:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DB:35:5A:4F:9E:A9:CB:68:CC:87:27:2A:06:DD:85:7E:E7:45:55
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139342e33322e3233322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.232.0/23
Signature Algorithm: sha256WithRSAEncryption
20:68:fa:ae:e0:34:7d:29:ab:6e:76:6c:60:74:1c:ff:04:55:
04:87:4d:fc:9a:61:0b:28:6b:ed:54:c3:cb:e9:44:de:22:c3:
fa:b0:7a:6c:4e:7b:bd:5f:f9:89:68:e5:03:dc:9d:64:34:62:
22:ce:01:a8:c4:cc:96:e3:dc:22:8b:95:81:f1:76:6d:b0:85:
9a:cc:75:e8:36:df:3b:1e:26:bd:2d:7e:e4:63:bb:c4:f8:db:
8c:3c:d5:31:84:67:44:62:44:b1:9d:c7:b7:b7:8b:df:b4:09:
0b:68:41:d4:aa:64:fb:a1:f8:77:82:d9:76:f7:e2:b0:e9:5c:
32:77:03:ab:6d:ba:c3:dd:af:56:93:cc:32:02:38:e3:8c:23:
ff:2a:f1:c7:46:83:f0:d2:98:f3:b3:a3:38:56:cc:e9:8d:d0:
f5:9c:aa:08:49:8c:9a:5a:2c:83:35:5a:9f:f7:c6:c2:55:e5:
f3:e5:02:c5:e3:cf:4b:13:c3:11:e2:a2:82:0e:c4:9e:3e:2c:
b2:b9:71:23:8d:00:35:37:7e:8b:6f:82:98:6a:26:9b:7a:3f:
76:85:9d:e5:32:a1:29:72:f8:23:f7:65:8c:f4:ce:df:96:2b:
53:a3:16:2f:07:c7:71:ae:2d:e5:b0:57:dd:e1:fc:ab:7b:a6:
b5:52:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org