Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38382e3231382e3230302e302f32342d3234203d3e2030.roa
File: 38382e3231382e3230302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: egC/LNCujYHnBxKcRp+ik12bjxuCG8bj0TomYTQ0u4Y=
Subject key identifier: 78:9B:44:97:30:A9:F3:55:C6:F7:1F:3A:70:33:48:DD:12:E6:B0:A9
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 636890266E94EF076B5AF06F4F4DE853B49EDD03
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/38382e3231382e3230302e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:20:14 +0000
ROA not before: Fri 03 Mar 2023 16:15:14 +0000
ROA not after: Fri 01 Mar 2024 16:20:14 +0000
asID: 0
IP address blocks: 88.218.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:68:90:26:6e:94:ef:07:6b:5a:f0:6f:4f:4d:e8:53:b4:9e:dd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Mar 3 16:15:14 2023 GMT
Not After : Mar 1 16:20:14 2024 GMT
Subject: CN=789B449730A9F355C6F71F3A703348DD12E6B0A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:e1:be:93:ae:02:5f:a2:11:a9:02:2e:0c:
b1:53:91:73:b3:26:a9:bb:c8:83:a8:40:4d:03:54:
5f:7a:27:4c:b0:db:12:6c:7d:fa:92:b1:99:97:e6:
c5:1f:be:68:49:0c:51:d0:3f:3d:49:a1:40:94:21:
87:d6:12:e8:0c:5c:8b:2d:d3:35:7b:c6:37:88:60:
c1:76:42:ee:f8:39:46:4a:83:60:fe:05:94:ee:42:
2e:d3:e9:29:e8:19:1b:02:24:95:5f:a4:69:4c:e9:
50:a6:81:2c:b6:0d:7e:7a:7e:db:9e:76:cb:5e:98:
e0:72:f1:89:2b:9b:03:7c:58:9f:e4:cb:d1:9d:6c:
d0:d9:ac:f3:61:54:1d:fc:3f:4b:e7:37:08:3c:e2:
92:cb:b3:12:ce:be:d0:78:d3:f0:46:e0:ce:85:22:
60:f4:c6:89:6a:1e:45:f5:53:cb:35:6a:76:ee:ba:
40:c1:2b:10:00:a9:f6:b2:e2:67:34:dc:f1:6c:95:
50:ee:39:ea:df:5e:93:2b:e3:09:e7:b4:9d:af:ed:
87:71:4e:58:67:39:7d:02:ad:a9:67:ef:9b:68:97:
65:38:d6:cf:3d:82:7b:8b:c3:a3:a6:6c:10:9f:15:
58:3d:b4:0d:8b:b3:d1:f6:66:9e:94:4b:80:6d:a6:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9B:44:97:30:A9:F3:55:C6:F7:1F:3A:70:33:48:DD:12:E6:B0:A9
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38382e3231382e3230302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.200.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f0:07:42:48:ff:e4:48:36:e0:28:b3:17:ce:70:5e:94:8d:
2c:a5:1b:a0:ee:80:9a:9a:bf:82:e4:4b:56:f5:f7:5b:90:00:
38:91:c2:31:45:51:46:fd:ce:7c:e6:60:c0:fb:dc:73:34:20:
79:05:31:1a:a2:69:70:1e:23:b4:3f:1f:70:65:b4:a4:d1:29:
01:34:91:24:9e:32:9c:a6:62:db:38:02:f8:fd:b6:74:f0:4d:
15:f5:3c:ac:f8:c9:44:ca:36:c5:f6:78:74:d2:f2:af:87:11:
e3:e8:44:2c:ad:12:e0:33:6c:3d:3c:f8:e8:90:82:19:ea:b9:
8d:2a:30:3e:6b:86:70:f1:5a:7b:0c:30:36:f7:d7:7a:d9:eb:
48:11:9e:38:0a:23:6d:fc:70:4e:21:11:09:5c:4e:e2:81:87:
75:ce:56:c8:bc:17:c9:15:43:85:13:f0:ab:3b:bb:e5:78:37:
87:2e:f6:45:27:6f:e0:ae:df:07:5b:d6:2b:ba:13:9a:11:d1:
b8:7f:44:34:e0:0a:8f:86:c9:d3:02:89:d6:a1:7b:32:b3:98:
d7:50:ff:e0:63:8b:16:e0:b6:ba:c2:5b:2c:da:50:2a:8e:b6:
14:79:fc:b2:80:f5:39:b6:28:c8:da:bb:8f:50:e7:dc:bc:e2:
fd:fa:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org