Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232322e302f32332d3234203d3e2030.roa
File: 39312e3139362e3232322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: KjZ5gt1IMfB2HyBtHx4poy9kzEZPRNwd8JBXb/yxmHc=
Subject key identifier: D0:C7:2B:F8:EF:8D:56:A2:01:E7:24:26:39:79:BA:67:1B:02:22:6B
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 2C8283BBBE30599B775A0A13D5746F5E88DC195F
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232322e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:54:27 +0000
ROA not before: Fri 03 Mar 2023 15:49:27 +0000
ROA not after: Fri 01 Mar 2024 15:54:27 +0000
asID: 0
IP address blocks: 91.196.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:82:83:bb:be:30:59:9b:77:5a:0a:13:d5:74:6f:5e:88:dc:19:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:49:27 2023 GMT
Not After : Mar 1 15:54:27 2024 GMT
Subject: CN=D0C72BF8EF8D56A201E724263979BA671B02226B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:42:6c:37:7a:b6:22:69:b9:a3:a8:e8:18:
f9:55:e1:7e:30:36:b9:3c:55:de:4a:d1:6a:f4:0f:
61:02:e2:c6:ee:84:17:47:42:06:6f:9e:2b:40:40:
38:10:59:1d:60:49:18:d7:3f:74:92:43:d9:4f:e2:
8c:c7:93:54:8b:44:55:26:a1:6d:c4:3a:da:75:ac:
e1:23:0e:16:4d:46:6c:a3:bc:68:70:88:bb:a1:0c:
0c:3e:0a:f7:de:96:0a:f4:0e:64:3b:b3:e9:fc:c1:
ab:90:a1:45:5b:a9:68:99:f9:62:7a:48:a8:a3:0c:
ec:cb:25:64:3d:ed:41:cd:89:f3:f5:15:db:88:4a:
94:cb:29:2e:34:e9:81:6c:e4:87:bc:5f:c8:30:c9:
3c:36:ea:9b:0f:2c:d9:49:7a:36:2d:a0:52:32:c1:
4d:49:f2:74:9b:a8:75:f3:0b:93:f7:e6:e3:06:1a:
33:44:b3:3e:84:fe:f1:00:84:d7:1b:96:9f:63:cf:
8b:b7:40:a2:b0:7f:05:09:8b:9c:8e:38:51:92:95:
0e:e0:ca:8b:92:e9:5d:de:94:7a:51:c2:50:46:af:
aa:a7:ac:ed:18:cd:7b:12:8e:86:8e:ed:45:85:af:
8d:7d:0c:40:48:32:e8:07:0c:f4:4b:5e:a6:50:b9:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C7:2B:F8:EF:8D:56:A2:01:E7:24:26:39:79:BA:67:1B:02:22:6B
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.222.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:24:8d:08:aa:ce:28:84:92:92:7a:d5:b7:51:d9:42:0a:a8:
9e:76:09:49:0b:ff:e2:65:68:ea:3b:12:c0:ae:41:27:58:01:
3b:03:fb:18:5f:66:92:5e:b7:28:16:c3:28:1b:d8:09:16:24:
6c:ae:ee:69:95:df:1b:35:b1:14:13:d6:8f:fc:de:d5:86:fa:
7b:e4:9a:71:87:3c:f9:cc:1e:4d:2f:b5:40:9b:66:8e:e1:e6:
fe:ba:43:f2:de:7b:eb:68:ae:fc:a2:50:ee:2b:d6:46:6f:35:
7d:bf:8f:c1:00:aa:b9:01:d1:4b:c4:ab:28:92:d4:c6:29:a0:
7d:8c:f2:88:d0:89:f5:2b:e5:bd:ac:26:a7:4d:0f:d8:c1:c6:
56:87:3f:9d:58:a6:ab:82:0e:db:6b:09:56:b6:ad:38:8a:5b:
27:61:8e:ce:1f:37:b1:fd:17:2f:3c:53:d0:0e:08:58:87:81:
34:7b:4f:b1:b1:7e:a8:e4:bb:3a:b8:76:e9:96:c0:47:90:26:
78:96:0b:f3:ba:ff:36:b6:37:44:44:b5:d9:e9:66:c2:33:a4:
2a:51:cf:34:76:7d:11:d9:c0:29:f8:df:f8:38:60:5f:cb:be:
67:26:f8:8b:2c:e7:12:31:e1:58:48:1d:8c:b9:59:f9:d9:2e:
46:f8:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org