Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38312e32322e33362e302f32342d3332203d3e20313336373837.roa
File: 38312e32322e33362e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: f0WuE1l134LB+WPo+n5t4rAaejQ/B5fn82tXYx444Hg=
Subject key identifier: 28:7A:E6:37:96:5D:64:9B:4C:67:9E:57:53:4C:29:4D:EE:49:52:81
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 52606971FAF414021EC8E88DD9BEDF53160640F9
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/38312e32322e33362e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 28 Dec 2022 09:41:19 +0000
ROA not before: Wed 28 Dec 2022 09:36:19 +0000
ROA not after: Wed 27 Dec 2023 09:41:19 +0000
asID: 136787
IP address blocks: 81.22.36.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:60:69:71:fa:f4:14:02:1e:c8:e8:8d:d9:be:df:53:16:06:40:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Dec 28 09:36:19 2022 GMT
Not After : Dec 27 09:41:19 2023 GMT
Subject: CN=287AE637965D649B4C679E57534C294DEE495281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:5d:d1:d7:51:4d:a9:0a:d0:ba:1a:bb:a6:
3a:03:3f:55:38:17:1b:e9:1d:a8:d2:b8:9a:68:e0:
e5:b3:d6:3c:0f:d2:90:54:29:30:dd:b1:1d:fb:5b:
aa:32:c3:d0:af:cf:dc:52:b2:10:08:42:02:12:08:
72:1a:c9:8e:1d:fd:0b:44:f2:5a:09:33:85:95:79:
80:e3:f6:0c:dc:fb:25:f5:4d:e4:55:ce:8d:1c:11:
67:80:11:e9:8a:76:84:a0:62:11:3e:1e:d2:c4:90:
4b:11:97:72:13:51:7c:d2:14:12:6e:f2:fc:22:5e:
4c:9e:cb:e2:3c:74:bd:76:dc:5d:10:fd:a8:da:4b:
42:a7:f6:e5:89:c1:81:88:c9:1e:3a:28:8a:66:c7:
10:4b:a0:03:13:3f:d0:99:32:56:c6:83:dc:84:5e:
62:f5:3b:13:04:87:81:da:be:7d:ab:1e:08:cc:2c:
81:9e:a1:0b:b5:24:b6:b8:a5:3a:a1:f9:d1:23:65:
f5:f3:dd:aa:c3:df:41:3d:32:24:81:d7:6a:bd:b3:
73:3a:ab:0b:b4:df:3c:44:14:35:9d:de:4c:1b:58:
de:95:83:eb:43:8a:b3:02:36:5e:58:ce:8b:21:4a:
02:03:02:54:51:e1:b1:37:57:9b:8f:ff:5b:d2:70:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7A:E6:37:96:5D:64:9B:4C:67:9E:57:53:4C:29:4D:EE:49:52:81
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38312e32322e33362e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.36.0/24
Signature Algorithm: sha256WithRSAEncryption
65:81:0c:fd:37:8d:3c:a3:52:40:fc:fa:50:c3:05:8b:a9:1d:
49:2e:07:0e:26:15:c9:8c:8c:58:2e:b0:c5:1d:eb:b4:eb:91:
ae:8b:9e:a1:3b:25:4a:18:a4:13:28:06:3e:b2:4d:a9:2e:3a:
53:22:3f:98:0d:47:54:d4:1c:70:07:61:bc:d8:db:71:cd:6a:
38:a4:08:3c:0b:77:52:39:25:f1:e6:ea:6c:48:b0:d7:c8:44:
fe:c1:d4:7f:e4:68:2b:ff:51:c0:96:d4:2b:a5:7a:1b:58:2d:
18:c0:16:39:59:6a:dd:ba:5d:95:97:20:81:95:0a:f6:36:75:
fb:0f:13:e3:48:3e:07:9c:d3:ff:4e:08:f9:d3:4e:85:5c:c7:
5d:5d:54:4f:60:62:a1:e6:f7:a7:4e:bb:f5:a6:21:c9:ad:b8:
37:de:49:8d:f7:5d:00:93:ca:06:8b:72:8e:7b:29:7b:f2:6a:
e7:d2:f2:f4:f6:fe:c5:75:96:ab:84:3c:3c:02:4b:10:b0:66:
fb:ad:ec:d0:12:26:e9:c0:8d:08:6c:5f:91:33:2c:78:ed:4a:
07:6f:a0:3f:67:ec:83:30:78:a2:c4:77:08:c7:a0:c2:96:5f:
ec:fb:c2:51:ed:55:32:4a:f0:ed:a9:d1:c6:2c:c1:a4:ee:0f:
51:0f:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org