Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131312e302f32342d3332203d3e203531313637.roa
File: 39312e3233302e3131312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: hZRoSuJiavAp7WDMlRObEicAQAmkPdpnoxinMAME/G0=
Subject key identifier: 88:6E:DA:93:25:D9:4B:F7:A3:6E:51:DE:1F:5E:E8:A5:7F:F8:A9:02
Certificate issuer: /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial: 28F5D3EFDBBCE9B4B874A7F13621295EE2AE8FE2
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131312e302f32342d3332203d3e203531313637.roa
Signing time: Sat 22 Oct 2022 04:33:40 +0000
ROA not before: Sat 22 Oct 2022 04:28:40 +0000
ROA not after: Sat 21 Oct 2023 04:33:40 +0000
asID: 51167
IP address blocks: 91.230.111.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f5:d3:ef:db:bc:e9:b4:b8:74:a7:f1:36:21:29:5e:e2:ae:8f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Validity
Not Before: Oct 22 04:28:40 2022 GMT
Not After : Oct 21 04:33:40 2023 GMT
Subject: CN=886EDA9325D94BF7A36E51DE1F5EE8A57FF8A902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:df:18:da:ea:4e:96:50:46:ff:82:f7:5a:
5d:48:fe:67:2e:b9:36:5f:69:a3:84:a6:c6:44:55:
06:0b:76:b4:ff:ac:0d:86:74:f2:0c:f7:c8:3a:5b:
7b:c6:b1:d0:dc:a8:ce:8e:70:e1:09:f0:78:3c:f5:
82:38:40:ed:b1:6b:ad:1f:22:67:a9:d0:28:44:38:
ba:82:83:f9:74:b5:7b:cf:2d:34:a0:d0:a3:92:a8:
cf:d6:96:21:2b:ba:00:dd:c1:37:41:09:64:1d:f0:
2e:58:ec:4c:d7:8c:47:bc:e0:e2:95:e8:95:ef:cd:
71:1e:27:92:58:59:8a:b8:50:c5:21:4a:f1:a6:e2:
05:00:9f:c0:5b:a1:ea:ce:e8:7c:b7:35:ba:3f:04:
fe:b2:5a:60:ba:0f:3f:7c:ba:10:e7:fb:6b:91:14:
5b:3f:fb:3c:54:61:a5:a0:79:9e:d2:18:5a:92:a1:
24:e0:b8:57:20:da:55:e4:f8:92:e2:ee:22:ef:ea:
60:25:27:d7:66:8e:e0:a0:ad:53:f5:3c:a9:cb:69:
8f:48:d5:61:c4:36:1e:e3:e5:f7:27:7f:a2:d5:90:
89:dd:e6:33:ce:34:85:c5:45:ed:4e:58:9e:40:87:
dd:9d:b1:9a:83:80:c0:27:73:f5:ac:19:87:55:c4:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6E:DA:93:25:D9:4B:F7:A3:6E:51:DE:1F:5E:E8:A5:7F:F8:A9:02
X509v3 Authority Key Identifier:
keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.111.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ad:fe:8c:ce:ef:4c:1d:9f:07:2c:b6:02:cd:66:68:e7:ef:
af:ef:4c:65:86:4a:fc:6a:f8:2e:fd:4e:a7:62:00:fc:05:e5:
e9:3a:37:87:63:18:3d:53:f2:cf:f0:c8:50:d5:b2:e9:df:d5:
b8:7a:03:73:b7:4a:9c:ad:69:41:a2:75:37:aa:a1:3d:20:39:
cd:c9:b1:2b:b8:f0:c0:be:b9:e8:e2:b0:5c:6f:c7:4f:28:3f:
84:dd:73:f8:ae:36:f1:f6:29:7e:60:78:4c:63:42:12:f9:c2:
39:89:7a:ea:3f:3f:d1:84:61:c4:80:6c:0a:c8:0d:fd:33:ac:
10:66:28:0a:96:24:d5:30:d6:78:37:07:b6:56:c5:e0:35:2b:
a0:db:e9:49:f4:1d:ba:b7:62:9e:c1:d8:ba:73:14:6c:27:03:
78:54:78:ba:05:1b:f1:bd:5a:2d:79:f6:b8:32:af:93:b3:2f:
5f:6e:a5:1b:9e:68:fa:e1:ee:f1:73:3e:a1:73:fc:fc:80:ee:
bc:9a:9a:e7:d7:9c:04:aa:a5:19:b3:85:43:a0:4b:c5:cc:f0:
94:9a:bd:37:23:ad:f2:7c:cd:a3:3c:e3:29:3d:cb:be:e1:d9:
4d:36:99:12:21:f7:70:b6:12:64:a6:34:ea:0d:2a:17:b9:81:
0d:64:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-fra.rpki-client.org