Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3234203d3e2033333536.roa
File: 3139332e35382e3133322e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier: W85cRjlhMfjRfgvXw2bNQvGZE84zDK/xzu+pVgfwO2g=
Subject key identifier: 5A:2A:C1:4A:E4:61:1C:EB:FD:80:08:F1:6B:CE:EA:98:07:0B:46:34
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 3128AB2AEFBE62D66029A8132CC3C6098AA1E8D2
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3234203d3e2033333536.roa
Signing time: Tue 28 Jun 2022 04:41:02 +0000
ROA not before: Tue 28 Jun 2022 04:36:02 +0000
ROA not after: Tue 27 Jun 2023 04:41:02 +0000
asID: 3356
IP address blocks: 193.58.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:28:ab:2a:ef:be:62:d6:60:29:a8:13:2c:c3:c6:09:8a:a1:e8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Jun 28 04:36:02 2022 GMT
Not After : Jun 27 04:41:02 2023 GMT
Subject: CN=5A2AC14AE4611CEBFD8008F16BCEEA98070B4634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:5b:3e:ba:31:3d:81:a8:c7:e7:78:d2:95:
98:49:0d:da:49:9f:8f:e6:4f:21:90:89:2f:7a:38:
2d:0c:c6:32:ee:40:56:fe:92:88:c5:d5:36:84:4e:
71:b2:16:e9:6e:1d:7a:b6:5a:10:67:ad:51:32:dd:
e5:f3:d4:83:24:47:e9:46:e6:cb:fb:03:22:84:10:
57:6d:86:91:e4:17:9e:70:44:8d:6d:27:58:b8:d8:
d0:c4:1e:45:24:80:dc:ca:c6:ec:7b:bc:54:3f:a1:
9f:65:16:d6:6d:6d:92:a3:77:dc:53:df:47:91:7d:
bc:77:82:45:76:c9:86:af:d9:a7:54:11:6f:5a:40:
7a:9d:ae:f2:ce:09:43:4b:8b:2c:28:8f:f5:ab:54:
5f:c1:43:02:3e:a2:27:73:7f:93:ae:56:2d:e0:f9:
53:a3:f6:ac:4c:e0:f7:0e:af:27:7e:94:88:fd:14:
77:17:fb:6e:c1:f7:8b:7e:be:af:26:49:af:e6:20:
e0:b6:a9:54:aa:97:bb:67:52:88:57:2f:e9:de:88:
ef:0e:fb:5e:5d:a7:58:9b:0d:50:e3:cb:8f:a9:40:
d7:79:dc:b5:50:ad:e0:1a:a8:13:c0:30:63:00:83:
b7:05:ee:6d:a6:17:78:34:bb:da:62:45:99:05:28:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2A:C1:4A:E4:61:1C:EB:FD:80:08:F1:6B:CE:EA:98:07:0B:46:34
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.132.0/22
Signature Algorithm: sha256WithRSAEncryption
49:53:dd:89:57:09:b7:8d:fc:40:42:d7:7b:b0:d7:95:a0:11:
b6:0c:05:0f:6e:7a:3e:98:1c:27:2c:a1:f1:7d:7d:f5:79:e8:
57:05:75:a2:b2:4b:9a:65:3f:6e:0c:06:bc:a8:1b:8a:9b:7a:
80:87:a7:85:cf:72:d3:9d:9f:15:e1:b3:45:65:08:af:3e:d5:
1f:93:4f:f6:91:61:af:bb:b0:3d:72:1d:a4:8c:9a:28:12:a3:
8a:8b:98:65:48:c2:59:44:2f:2e:d2:a9:26:a6:2f:5b:fa:18:
74:14:cb:51:9f:b9:bb:15:b1:c3:ff:c5:97:89:a8:a9:54:78:
5d:2a:9f:62:d7:da:0a:ac:69:a3:9c:d8:10:99:0b:ad:25:97:
af:e3:18:18:30:39:c1:ed:24:f5:92:5b:02:fc:a5:21:3a:29:
f9:5b:3c:50:6b:d1:10:6d:83:62:6c:c2:b3:9a:d9:54:98:52:
fb:9b:4b:25:c3:2b:38:d8:05:c7:19:a9:1f:9a:16:41:19:c8:
4e:01:0c:aa:ef:e3:01:f9:f7:99:e8:0a:99:58:7b:64:e8:17:
2d:90:00:0f:db:e5:33:33:d7:1a:fb:3f:de:fb:e8:ba:73:51:
4f:43:12:dc:23:af:9b:b4:f0:b5:82:96:a6:1e:f0:ec:20:f4:
46:04:95:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org