Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa
File: 3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: gye+s0QkK0zAvn7BSNmDh4BArLNNEVC9c7yZo7MWIQg=
Subject key identifier: 9B:46:A6:81:EA:D6:D3:A0:55:DF:46:1A:63:F6:F5:60:86:DD:74:00
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 172FB611B1B1506DBFB752A1D4340DA1C9F929FE
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 07 Dec 2022 21:49:02 +0000
ROA not before: Wed 07 Dec 2022 21:44:02 +0000
ROA not after: Wed 06 Dec 2023 21:49:02 +0000
asID: 136787
IP address blocks: 194.34.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2f:b6:11:b1:b1:50:6d:bf:b7:52:a1:d4:34:0d:a1:c9:f9:29:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Dec 7 21:44:02 2022 GMT
Not After : Dec 6 21:49:02 2023 GMT
Subject: CN=9B46A681EAD6D3A055DF461A63F6F56086DD7400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:86:c9:04:38:e9:d6:b4:f7:1a:8e:2b:75:
97:e1:71:c7:00:1e:70:1c:ed:37:db:40:3f:f3:c4:
28:0f:df:c9:c4:e6:e6:bc:59:12:70:b9:86:02:8f:
3e:4f:b7:6c:c2:45:ed:20:72:42:2b:7c:48:13:7c:
96:8a:20:3c:69:33:1e:0b:af:63:09:86:fe:10:4c:
5e:ff:29:10:10:fc:43:db:2c:76:18:01:94:e0:31:
a8:6f:c5:06:cc:d9:0a:f2:6e:65:bb:80:8d:40:53:
1a:6d:5c:c8:d8:63:f2:86:a2:a3:9a:5b:cc:95:a0:
0e:b9:42:6d:df:ab:fd:0c:91:a9:33:db:b5:19:1f:
83:30:8a:a3:b6:98:41:c2:07:58:bd:4d:d4:d5:ed:
ea:21:e7:10:22:5d:9e:e8:d4:ac:e0:2a:ed:a1:b8:
cd:cb:87:5d:1d:80:1f:45:4e:94:d6:68:02:2f:87:
a8:98:e6:2b:cd:a7:94:82:c9:91:c1:86:d7:28:11:
82:fc:e0:ea:90:76:8d:3e:65:ff:45:c0:ff:57:da:
62:15:18:4a:3d:0e:60:bb:89:91:c2:cc:15:f1:eb:
4d:62:b6:02:b7:0c:b7:be:48:30:a3:07:a7:ec:09:
de:13:f2:05:77:d3:da:87:f1:36:5e:3a:2c:c2:f0:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:46:A6:81:EA:D6:D3:A0:55:DF:46:1A:63:F6:F5:60:86:DD:74:00
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.234.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f4:ae:b0:44:8a:a9:06:c4:ac:cf:0d:f8:52:67:10:1a:98:
5a:d2:7e:16:e7:eb:4b:07:66:62:75:c5:73:16:b8:11:88:8b:
f4:e2:78:67:c1:2d:0c:e0:a2:62:92:02:41:b0:72:d0:56:fc:
8e:e2:89:5b:8d:30:ab:35:13:23:bf:97:e3:74:99:15:aa:b9:
bd:14:70:22:be:2f:f9:8a:c5:2b:66:2e:41:fa:b7:63:d7:7a:
96:f9:e3:69:4d:ba:5a:49:cf:b2:4e:5c:6f:e1:2f:6c:95:0c:
12:b1:f7:c9:2c:05:17:5b:37:3b:82:47:80:87:48:cc:39:18:
1e:d2:da:ec:63:2b:22:6e:e8:88:93:cc:21:93:13:bc:26:eb:
b0:b3:fe:ee:92:92:0f:fa:fa:32:3c:06:69:fe:9f:85:92:06:
cd:01:9e:68:a6:26:64:f1:ae:5d:62:38:88:71:3f:bc:ae:33:
45:19:20:5b:c8:d3:df:fa:bc:ab:9d:0f:69:e0:67:f8:da:6c:
11:dd:36:df:e9:17:4c:b9:0d:81:12:fd:14:39:7f:60:b7:64:
cf:dd:ae:67:a2:19:3d:35:40:53:22:f9:3b:64:65:34:12:e4:
d2:f9:29:f8:7d:65:a2:fc:ba:2e:b0:cc:07:fc:94:02:a9:f1:
51:5a:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org