Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e32392e302f32342d3234203d3e2030.roa
File: 3139342e36312e32392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 2edcKTk7c/vur9CENU79wNkK0CM05+AN67YHoVyQE60=
Subject key identifier: 2D:12:79:35:62:43:79:9D:AB:01:5C:62:99:DC:71:74:B3:45:05:3D
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 773833CBDD042E517A61001C548266858D48365D
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e32392e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:12:29 +0000
ROA not before: Fri 03 Mar 2023 16:07:29 +0000
ROA not after: Fri 01 Mar 2024 16:12:29 +0000
asID: 0
IP address blocks: 194.61.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:38:33:cb:dd:04:2e:51:7a:61:00:1c:54:82:66:85:8d:48:36:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Mar 3 16:07:29 2023 GMT
Not After : Mar 1 16:12:29 2024 GMT
Subject: CN=2D1279356243799DAB015C6299DC7174B345053D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:e8:82:a6:43:e9:eb:0a:25:fa:bd:77:01:
bd:37:a0:a9:23:4e:31:ea:92:73:91:6d:e1:f1:bc:
09:11:ae:75:cf:41:1d:6f:5f:e3:a5:ee:38:3a:ce:
ee:4b:2a:a2:7d:35:a8:be:5d:7f:82:ca:89:29:79:
c4:c5:04:ca:a2:f4:85:da:8b:f2:9a:49:89:36:ab:
1d:e1:9d:95:8c:8c:a6:74:dc:4e:ea:77:50:fb:d9:
37:d8:0e:5d:86:ef:cf:3b:92:88:47:19:6c:33:f1:
34:d0:0c:a3:d2:ca:81:32:10:06:92:55:f9:6d:8c:
8a:2b:a0:8d:76:42:52:97:20:68:46:ea:f3:11:a7:
f3:d2:dc:31:46:34:3a:f6:9e:ff:5c:da:94:a2:d3:
72:4b:57:8d:72:8c:46:7f:57:fd:0a:16:b2:32:7a:
82:2d:48:91:fb:a3:28:b9:55:23:34:95:48:f2:2f:
e8:14:6e:3b:38:08:66:59:39:6d:ee:60:81:ba:72:
c4:2e:e0:ee:8d:1c:f1:25:99:ff:3e:c1:92:b6:a8:
62:c7:80:b8:6b:72:b8:83:06:b9:55:dc:68:ff:2b:
10:2b:66:50:7d:01:03:ed:3a:85:08:6b:1a:5f:b3:
a0:b4:1f:87:de:a3:40:64:49:0e:2a:f4:07:af:4f:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:12:79:35:62:43:79:9D:AB:01:5C:62:99:DC:71:74:B3:45:05:3D
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e32392e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.29.0/24
Signature Algorithm: sha256WithRSAEncryption
01:06:f3:fe:c0:f7:9e:7e:63:46:de:f5:fc:24:3c:21:c4:f1:
33:73:2b:68:7c:7c:76:5a:7b:6c:8c:14:83:87:ea:aa:77:a2:
8b:fe:e9:52:9b:ce:ff:be:71:56:9f:42:17:07:78:58:b5:0b:
7a:81:2a:c7:98:c5:69:32:05:15:07:98:c5:14:10:d4:0f:c0:
74:bd:8a:2e:3f:d2:74:dd:f3:07:68:5c:31:c9:3a:82:c1:fb:
ed:c9:5e:c0:9d:38:c6:20:66:67:fd:e2:7f:19:9d:37:ae:d4:
f0:77:bc:a4:a6:e3:91:4f:ab:85:d5:ab:80:40:6d:ca:d2:bb:
ef:89:5d:3e:dd:eb:0e:09:7c:ad:66:09:9c:ad:ba:aa:16:19:
21:10:aa:ac:fa:93:48:5b:fd:1f:bf:1d:aa:7c:bb:16:3e:db:
13:a7:24:42:5f:ab:e7:ae:71:f8:ae:e0:7c:7b:d7:9f:95:ba:
c4:42:2f:69:7e:d2:0f:89:fd:40:e3:8b:21:72:dc:0a:91:ad:
54:35:cc:77:3d:7d:4b:ac:11:8c:1c:46:a7:14:ad:8f:ba:88:
7a:4e:30:a6:22:d4:4c:ac:10:52:1d:c6:4d:6b:e1:4d:9a:fe:
55:e4:c5:1f:54:f2:68:85:84:53:61:cb:33:ce:fa:42:c2:fc:
7f:83:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org