Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e33352e31352e302f32342d3234203d3e2030.roa
File: 3139342e33352e31352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: d3R5Qwo46MqNWRufnLtaoRTKSiGqXT3jvnb6F+cRPeo=
Subject key identifier: 72:86:58:51:CF:5F:79:C5:35:FF:C5:1D:FF:8D:C9:A6:74:89:F2:DD
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 7B08985E9F30883FAE2E712E95AD26008E614801
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e33352e31352e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:46:51 +0000
ROA not before: Fri 03 Mar 2023 15:41:51 +0000
ROA not after: Fri 01 Mar 2024 15:46:51 +0000
asID: 0
IP address blocks: 194.35.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:08:98:5e:9f:30:88:3f:ae:2e:71:2e:95:ad:26:00:8e:61:48:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:41:51 2023 GMT
Not After : Mar 1 15:46:51 2024 GMT
Subject: CN=72865851CF5F79C535FFC51DFF8DC9A67489F2DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:3f:f4:bc:58:4b:c8:6f:c9:53:d9:dc:15:
96:62:61:de:b4:c8:f2:69:0d:38:88:40:42:ae:67:
bd:45:2e:20:7f:1c:62:ef:20:18:e3:48:39:84:84:
3b:f1:61:4f:e4:9a:ee:e5:f1:54:d8:27:ac:70:a7:
0a:31:1b:1c:de:99:97:6c:ec:7c:fb:b0:8a:9e:97:
89:a9:ee:e4:08:a8:92:bb:63:38:84:3d:71:3a:e2:
89:f9:8f:67:7e:38:27:c3:be:d3:a4:06:0b:e8:26:
66:f5:06:db:98:93:3e:04:c3:40:d3:93:6a:cb:ed:
d1:8b:da:2b:38:ec:a2:b4:5b:be:c8:2d:54:64:a7:
a4:62:63:d4:78:78:5a:ff:2a:b8:b0:59:22:15:af:
2b:37:9b:6c:7b:95:21:92:12:e0:95:64:da:6e:22:
23:76:af:22:e5:3f:e6:09:95:53:86:5a:fd:a6:77:
69:a4:eb:91:ea:06:8f:2c:e9:8b:f5:90:5e:cc:b1:
2a:bf:f9:70:e5:4a:9d:85:3f:72:d8:fc:eb:e9:35:
a3:56:01:c3:33:31:02:91:f2:da:8e:2c:c3:7f:e6:
ed:9a:84:3c:d9:89:c9:1e:bc:a7:7c:ea:13:ad:49:
3e:e5:6d:76:f6:e4:fa:e7:9a:b9:69:bb:4d:da:4e:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:58:51:CF:5F:79:C5:35:FF:C5:1D:FF:8D:C9:A6:74:89:F2:DD
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e33352e31352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7d:93:9f:6b:12:df:bb:1c:03:61:1e:d2:ae:a6:c4:82:97:
91:9d:8a:62:8a:11:db:6b:79:8f:3e:80:71:24:93:56:38:d4:
fd:fd:40:6f:35:86:85:54:9d:90:10:f4:68:50:cd:47:e7:37:
6a:16:c6:9d:70:98:37:04:91:d4:54:23:7e:15:4a:b4:a5:7d:
55:fc:a5:49:11:3f:73:11:1c:3b:f1:e1:d4:f1:3d:58:64:5c:
c9:fb:5c:ae:be:9f:8d:7b:1f:9c:9a:66:3b:5a:cf:14:f6:6c:
8d:88:e1:5f:21:65:69:24:ec:c5:06:2e:3a:9f:f2:6f:13:85:
dd:96:23:03:88:55:89:f0:55:b9:75:99:5a:85:0f:48:96:3e:
90:4e:4b:c4:b2:27:01:9c:a3:27:ea:69:40:d5:b7:be:38:a9:
fa:35:82:df:7b:c8:35:3d:6d:aa:cb:6d:f7:cb:8a:49:a8:e4:
70:55:fe:72:5a:96:1f:6c:da:0a:a3:6a:1e:80:87:2a:9f:e4:
5a:57:f4:8d:db:26:c2:ad:ef:ec:01:e9:94:08:f1:a7:e8:d2:
62:83:30:ba:f8:f2:07:30:be:d6:8e:1c:a4:d6:ec:c5:3f:c0:
c8:85:f6:ae:c4:2b:dd:fa:d6:00:d9:82:14:53:66:32:06:2d:
62:62:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org