Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139342e352e3135332e302f32342d3234203d3e2030.roa
File: 3139342e352e3135332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: EqMT5CqJwyHkFx1UJa+a9N5SurkoTNu/pEPenLNtcS8=
Subject key identifier: A0:9E:67:01:29:4C:D3:68:E9:C2:09:9B:12:2D:BF:96:C8:F2:BF:CD
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 38484C338EB69807906912D1DBFC1764778552DE
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e352e3135332e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:06:26 +0000
ROA not before: Fri 03 Mar 2023 16:01:26 +0000
ROA not after: Fri 01 Mar 2024 16:06:26 +0000
asID: 0
IP address blocks: 194.5.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:48:4c:33:8e:b6:98:07:90:69:12:d1:db:fc:17:64:77:85:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Mar 3 16:01:26 2023 GMT
Not After : Mar 1 16:06:26 2024 GMT
Subject: CN=A09E6701294CD368E9C2099B122DBF96C8F2BFCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:a5:4a:5d:fd:ca:9b:c4:0c:d4:b5:cc:45:
4a:0a:58:af:cd:27:71:cc:05:9f:0c:69:91:b3:31:
7b:5a:eb:f9:f9:e5:79:f6:1b:d7:d8:33:0c:8b:f3:
59:c3:21:32:06:e7:5d:00:3b:ab:e0:3e:69:7e:37:
8e:b9:60:9f:3f:46:ee:9b:8f:ba:21:31:09:8c:41:
e3:ba:50:71:2f:32:0a:f3:02:1e:ef:0a:51:eb:8d:
c4:87:d6:92:f8:2f:47:1b:40:bb:8c:74:dc:f8:d1:
98:8c:14:8a:f2:bf:74:23:19:b9:fa:54:ad:2d:5d:
e2:a1:52:97:75:7b:c9:fd:ef:48:5c:ae:8c:46:ed:
5c:3b:8a:a1:c8:85:19:07:92:16:ed:bf:47:2b:62:
99:1a:87:0c:44:4d:9c:a4:e5:44:27:1b:d9:3c:8e:
60:15:ca:e5:a6:0d:16:84:ae:2d:8e:1f:d2:91:39:
95:86:b5:e7:1a:d7:0f:6c:9a:88:b4:66:41:95:67:
1f:b9:64:f8:5d:39:07:80:d6:7c:1f:fd:43:3e:81:
7f:5d:ca:7b:d7:0f:bf:54:b6:83:f7:e4:6d:d1:d6:
fd:55:0a:37:7b:3d:55:fc:03:a4:97:21:ed:57:d8:
a4:39:61:3a:c1:95:e0:ae:bb:68:db:a0:d8:5c:56:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9E:67:01:29:4C:D3:68:E9:C2:09:9B:12:2D:BF:96:C8:F2:BF:CD
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e352e3135332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ad:0b:d8:b7:46:d1:4a:a9:f9:17:97:cf:b2:f3:3f:bb:5c:
98:fd:de:47:60:76:3d:c1:d3:d6:87:4f:3a:1d:27:24:c0:29:
55:54:24:73:be:f0:2c:e3:3c:c3:5e:88:a4:f0:ad:e9:76:c5:
a6:9f:9f:85:5e:06:88:90:04:d3:0f:c1:11:96:29:be:78:83:
63:a9:4f:98:80:96:92:ed:56:10:4b:ac:da:70:09:56:87:d8:
1a:90:fe:55:24:39:3f:12:19:73:47:29:cd:94:92:9d:da:4c:
53:30:3c:45:9a:83:43:1c:59:05:e5:b0:8a:77:9d:30:82:16:
4c:ff:a0:97:c4:d4:04:6a:a0:af:0d:bd:6f:c9:c5:8d:2e:27:
df:40:f9:38:87:8e:c7:84:6d:16:80:83:c7:85:c0:6b:ed:78:
b9:6e:86:c8:ba:b9:55:44:3e:62:04:5d:fb:69:d1:54:52:8c:
04:97:ca:f9:92:67:08:0f:07:b7:a7:d1:d4:33:9e:29:f4:4e:
bb:6b:c9:59:09:d5:cf:7f:6a:bd:48:56:3a:d8:2d:a6:71:5e:
ed:2a:f7:98:a2:68:ed:be:76:1b:c5:f3:4e:e1:08:d0:71:f3:
66:05:87:cc:94:26:93:74:db:cc:82:05:a7:8e:f8:3c:5f:3a:
d9:38:55:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org