Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e20313336373837.roa
File: 3139332e32322e3135332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: BSeLgvRTcjJ6wdPplk1TjbKhMvk900aYR+wDsdrcYV8=
Subject key identifier: 86:70:FF:C0:38:DA:46:01:F5:F5:59:D4:C3:E3:A8:95:7C:D8:23:B2
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 102D8575BF169E6927907A98BA17E17FA9241539
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 22 Oct 2022 04:33:38 +0000
ROA not before: Sat 22 Oct 2022 04:28:38 +0000
ROA not after: Sat 21 Oct 2023 04:33:38 +0000
asID: 136787
IP address blocks: 193.22.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2d:85:75:bf:16:9e:69:27:90:7a:98:ba:17:e1:7f:a9:24:15:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:38 2022 GMT
Not After : Oct 21 04:33:38 2023 GMT
Subject: CN=8670FFC038DA4601F5F559D4C3E3A8957CD823B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4e:81:71:1c:92:e0:cb:67:21:9d:b7:dc:4c:
66:27:9b:84:2d:11:14:78:ed:4f:2f:89:40:10:ad:
cb:c7:38:45:3b:30:be:f1:3f:79:1a:53:cf:0d:3f:
52:58:a1:81:9c:da:f1:fd:d2:fe:81:1b:83:12:ea:
04:58:b9:11:cc:fe:a8:ce:5d:e3:88:6b:ad:bb:5a:
17:aa:4e:87:66:35:cf:a6:32:89:7f:c4:33:a2:87:
35:c3:1f:31:6e:19:4a:05:13:f5:d1:66:0f:4d:2f:
1f:29:01:25:80:27:0b:5e:6d:56:e9:62:5a:05:bb:
68:9e:f3:21:e3:88:af:85:52:d8:ac:60:cb:88:f3:
c9:63:30:c5:fb:d0:6d:5b:5c:ad:ad:16:39:01:ed:
44:ec:f1:91:5f:fe:5a:eb:88:6d:b4:2f:7b:85:05:
eb:4b:59:fc:af:ea:b6:3f:b2:d8:24:19:d6:a7:05:
95:e4:74:54:37:33:61:0c:32:38:0d:4f:92:e8:7a:
15:d6:bb:b9:7f:4a:d9:d6:95:ee:97:a8:89:6e:bb:
80:94:70:1a:7b:1f:7f:09:6f:d8:ee:04:f1:1a:8f:
56:04:11:4f:db:20:d2:e8:f5:cd:dd:d8:2d:21:a5:
8f:67:9b:0b:06:e6:7d:43:2e:47:53:7b:b9:0e:f1:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:70:FF:C0:38:DA:46:01:F5:F5:59:D4:C3:E3:A8:95:7C:D8:23:B2
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.153.0/24
Signature Algorithm: sha256WithRSAEncryption
87:7a:9e:a1:59:44:ab:ec:7f:da:0c:42:da:b9:e2:82:f5:ed:
e1:f2:93:d7:12:3d:63:f0:a8:ce:cf:82:63:9c:bb:85:8e:5a:
66:fa:69:4c:f3:2f:e9:fd:cf:23:69:1d:02:0d:88:c3:6e:3b:
c3:34:4d:23:09:61:37:2d:85:56:db:41:be:ee:9f:4b:39:72:
37:67:c1:89:35:5d:23:af:e9:2c:1a:1d:de:f9:ba:9b:61:d7:
7b:b5:17:6d:c3:11:41:6c:de:87:ca:5a:92:49:21:46:70:dd:
dc:89:b5:c4:b9:e1:65:8e:cd:e4:f1:69:be:14:26:14:8d:04:
b3:cc:3c:05:18:a8:78:3e:cc:76:ab:15:9f:59:b2:50:28:49:
29:07:95:8d:1e:09:ab:05:ea:a0:43:38:b0:e1:5a:7b:98:08:
af:77:95:e5:32:06:be:1e:2a:36:0f:3c:34:3d:5f:b8:62:2e:
8d:5a:38:4e:7a:e1:d4:50:58:47:74:d5:d7:4f:95:f5:99:50:
af:f1:08:a0:e9:b1:0b:be:96:ba:09:1c:ac:18:56:2a:f5:77:
f6:d6:18:c9:74:22:6f:11:6d:d8:80:f6:02:3e:f6:e9:a2:39:
bb:ec:07:ec:fb:f0:5d:29:bc:a3:b1:6c:de:a2:66:73:d0:19:
6a:ea:ce:2a
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUEC2Fdb8WnmknkHqYuhfhf6kkFTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MzhaFw0yMzEwMjEwNDMzMzhaMDMxMTAvBgNV
BAMTKDg2NzBGRkMwMzhEQTQ2MDFGNUY1NTlENEMzRTNBODk1N0NEODIzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxToFxHJLgy2chnbfcTGYnm4Qt
ERR47U8viUAQrcvHOEU7ML7xP3kaU88NP1JYoYGc2vH90v6BG4MS6gRYuRHM/qjO
XeOIa627WheqTodmNc+mMol/xDOihzXDHzFuGUoFE/XRZg9NLx8pASWAJwtebVbp
YloFu2ie8yHjiK+FUtisYMuI88ljMMX70G1bXK2tFjkB7UTs8ZFf/lrriG20L3uF
BetLWfyv6rY/stgkGdanBZXkdFQ3M2EMMjgNT5LoehXWu7l/StnWle6XqIluu4CU
cBp7H38Jb9juBPEaj1YEEU/bINLo9c3d2C0hpY9nmwsG5n1DLkdTe7kO8UJxAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUhnD/wDjaRgH19VnUw+OolXzYI7IwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMTM5MzMyZTMyMzIyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEWmTANBgkqhkiG9w0BAQsFAAOCAQEAh3qe
oVlEq+x/2gxC2rnigvXt4fKT1xI9Y/Cozs+CY5y7hY5aZvppTPMv6f3PI2kdAg2I
w247wzRNIwlhNy2FVttBvu6fSzlyN2fBiTVdI6/pLBod3vm6m2HXe7UXbcMRQWze
h8pakkkhRnDd3Im1xLnhZY7N5PFpvhQmFI0Es8w8BRioeD7MdqsVn1myUChJKQeV
jR4JqwXqoEM4sOFae5gIr3eV5TIGvh4qNg88ND1fuGIujVo4Tnrh1FBYR3TV10+V
9ZlQr/EIoOmxC76WugkcrBhWKvV39tYYyXQibxFt2ID2Aj726aI5u+wH7PvwXSm8
o7Fs3qJmc9AZaurOKg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org