Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3139342e33322e3233342e302f32342d3234203d3e2030.roa
File: 3139342e33322e3233342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 2oXnIUwAYSpzpRO4kesPQSMtKWeDHX0dkutoCoqaFMA=
Subject key identifier: 91:4B:C1:94:68:B8:A7:E9:63:0C:71:5D:3D:74:E8:AD:40:B9:37:D5
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 43E1D8C74C2A5F51D52A1A8D47D10EB10703E74C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139342e33322e3233342e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:17:26 +0000
ROA not before: Fri 03 Mar 2023 16:12:26 +0000
ROA not after: Fri 01 Mar 2024 16:17:26 +0000
asID: 0
IP address blocks: 194.32.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e1:d8:c7:4c:2a:5f:51:d5:2a:1a:8d:47:d1:0e:b1:07:03:e7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Mar 3 16:12:26 2023 GMT
Not After : Mar 1 16:17:26 2024 GMT
Subject: CN=914BC19468B8A7E9630C715D3D74E8AD40B937D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:ae:74:8d:24:f7:ac:97:5a:7d:de:ff:2a:
cc:95:8b:48:90:38:de:68:bf:40:81:4f:ac:74:0b:
ed:76:fa:24:ba:89:7d:c5:33:2a:52:fe:79:18:5f:
c2:af:a5:c5:cb:b3:f0:93:a9:08:76:7f:d1:87:70:
f8:3f:e9:5b:c2:fb:da:58:3a:d0:8f:ad:fa:2e:b9:
80:91:ab:88:60:4b:f0:84:6e:d8:21:58:9d:88:3c:
58:d4:79:03:be:d4:a6:5a:08:d9:33:ad:ef:4b:67:
cf:da:bd:2a:8f:b9:cc:4a:fe:d0:d5:92:c8:0d:e9:
bd:38:c6:67:af:e9:40:03:73:d7:c1:2f:7a:0c:51:
cf:9b:03:5d:90:08:5e:85:63:5a:2a:1a:59:c7:ff:
08:a6:63:86:f5:cb:0d:67:89:04:13:4f:5b:1c:8b:
c0:0f:a4:b2:d7:00:39:db:7c:25:e0:3f:eb:66:5a:
fd:0b:58:3f:06:5a:0c:f9:15:b7:64:ef:29:a8:b9:
d3:df:d5:11:e7:7b:8a:c5:38:c9:9b:ee:cb:9d:b3:
ab:ee:4f:35:14:78:b9:74:5a:61:20:7e:76:54:1b:
2f:03:00:ec:f5:20:bd:35:78:f3:d8:c3:c0:bd:2a:
5a:ad:38:e2:35:60:ad:2e:e3:b9:fc:0e:f0:e0:39:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4B:C1:94:68:B8:A7:E9:63:0C:71:5D:3D:74:E8:AD:40:B9:37:D5
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139342e33322e3233342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.234.0/24
Signature Algorithm: sha256WithRSAEncryption
19:76:87:22:6c:1a:8f:53:a2:75:61:1e:0c:21:a3:72:32:62:
4b:14:8e:74:3b:37:3d:b2:3e:9e:80:56:25:90:aa:44:98:d2:
9c:f3:86:d4:24:f7:b9:21:87:d7:7f:50:b8:bd:21:dc:3e:eb:
e0:1c:f5:af:ba:38:f8:0b:d7:5d:55:80:8b:7f:21:b9:bd:67:
f2:74:e0:e8:ab:a7:15:02:87:e8:99:93:dc:88:66:bf:f8:bb:
72:7e:4b:d3:9e:c1:cf:ab:d8:85:fd:8c:2f:c4:1d:32:70:45:
02:87:47:b4:5b:37:0d:b7:67:c3:a2:37:dd:df:62:74:60:31:
61:71:6b:f5:5e:b6:7f:db:e2:2b:f5:3e:a0:a9:f2:6a:ee:32:
f6:18:bc:61:e9:40:20:0e:a8:33:7d:95:b5:54:d8:46:68:97:
b6:0f:72:6c:5b:d4:34:2d:56:3f:7e:90:7d:e7:07:fc:fd:5b:
86:08:00:17:03:0d:b9:f0:51:b3:25:be:41:98:23:25:d2:e5:
f0:5d:cc:26:dc:a0:e2:52:cf:18:ca:18:42:c8:96:e1:b7:6e:
8c:a1:df:5b:9f:01:e4:17:e4:c5:53:62:a8:be:b4:c4:71:ec:
62:9e:b9:09:40:73:33:32:54:2f:a3:9a:69:cb:f5:9b:ba:e2:
c0:07:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org