Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203630373231.roa
File: 38352e3230382e35302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: DGsBY4KaDcuLsypF9z8bVNz3M9+oRDEgCC4jhCXpX6o=
Subject key identifier: 41:2F:DD:A6:64:17:34:78:0E:AC:24:A7:B2:5B:2F:CB:16:7E:D5:DB
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 0A39B9AAAF3EC5BB6990A4046E9A28A23730B09A
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203630373231.roa
Signing time: Sat 22 Oct 2022 04:33:11 +0000
ROA not before: Sat 22 Oct 2022 04:28:11 +0000
ROA not after: Sat 21 Oct 2023 04:33:11 +0000
asID: 60721
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:39:b9:aa:af:3e:c5:bb:69:90:a4:04:6e:9a:28:a2:37:30:b0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Oct 22 04:28:11 2022 GMT
Not After : Oct 21 04:33:11 2023 GMT
Subject: CN=412FDDA6641734780EAC24A7B25B2FCB167ED5DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:7c:07:db:1a:fd:70:64:21:59:62:e0:c3:
78:94:a7:46:81:a8:0b:74:99:cb:24:30:12:22:34:
7b:2a:d8:8b:6c:b9:92:f5:cf:49:84:dc:5c:e9:09:
6f:f8:91:2f:f4:3c:bf:a1:d5:a3:d7:c2:c9:84:5e:
2b:e2:e9:b7:64:a7:1e:89:d0:0d:d8:8f:28:2f:5b:
ff:6c:29:47:29:0e:72:d8:b8:18:32:5d:a6:8e:f9:
69:d2:18:0c:c1:35:80:f5:d7:7e:69:e7:07:9b:2a:
5a:bb:19:ea:17:5f:2c:52:c3:eb:52:32:1d:b0:0b:
5b:6a:11:d0:69:d0:bd:3b:3b:76:af:49:8e:b1:79:
c8:c3:06:5b:11:cf:91:07:07:cf:d6:12:ec:b3:f1:
80:3f:10:e0:5e:c9:bf:5f:25:13:17:a0:bf:ec:6d:
93:94:1e:5a:ec:30:73:8b:f7:11:f9:d3:a8:fe:be:
22:c1:62:a2:8c:a5:e5:5c:43:a7:d7:1a:cd:7c:f8:
fc:2f:0e:52:7b:9d:7b:f3:8e:43:a5:9f:cf:bf:19:
54:08:ba:4d:d9:63:ab:54:4d:7f:b0:11:61:80:8e:
20:a7:be:64:83:80:2a:2c:7b:bc:d9:52:dd:aa:58:
3b:71:ac:08:0a:22:83:be:6d:21:46:f0:59:42:c6:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:DD:A6:64:17:34:78:0E:AC:24:A7:B2:5B:2F:CB:16:7E:D5:DB
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a5:9e:5e:a2:72:94:97:3a:41:ee:8f:50:6f:7d:19:11:bf:
71:61:5c:68:d8:b4:5c:1b:cb:1f:41:5e:e5:b2:ec:92:a0:76:
03:2e:5e:b3:e4:eb:02:84:9d:ab:05:e9:dd:5e:dc:4d:b2:c4:
9e:60:d3:e4:09:23:62:60:8d:76:db:df:32:94:69:72:98:df:
d0:81:0b:51:24:bc:21:2f:06:5c:f9:b5:2e:71:45:0c:27:80:
fc:77:de:8c:22:d2:dd:f1:3b:a1:59:41:9f:94:08:29:50:a4:
72:b2:1d:24:26:77:c3:b1:17:3c:a9:8d:15:29:1e:92:69:c8:
27:e7:39:9b:7e:a2:68:e0:47:9b:1d:7e:e2:16:55:ec:4e:28:
1f:e1:a8:7d:81:7a:fe:60:e3:e8:3f:09:a5:b7:d8:f8:90:11:
f7:73:42:a5:3e:57:53:d6:67:41:94:be:64:3d:7d:3d:c7:43:
5d:aa:d6:34:f9:1f:f7:e0:6b:49:6c:64:b2:c7:cf:99:9f:a2:
de:38:50:35:2b:b2:37:60:21:e3:a6:36:89:dc:0e:07:8b:91:
eb:ca:cd:3b:00:ad:a7:60:4b:19:03:9b:62:96:3d:2d:ae:da:
34:bb:8d:32:11:77:f1:c7:a2:99:ef:cd:39:34:a2:05:17:d7:
24:0f:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org