Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36332e302f32342d3234203d3e2031323339.roa
File: 3231322e3130332e36332e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: sYGFF4IIafLjOi1fFBhVDKmU0RuLTUybL24/G41/jtA=
Subject key identifier: 3C:42:7D:76:AE:91:9F:B1:84:8D:6D:04:62:69:44:4D:FC:E8:57:41
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 3CA0242C3EBDAC1AC25F4C2D914010D7329950D5
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36332e302f32342d3234203d3e2031323339.roa
Signing time: Sat 22 Oct 2022 04:33:28 +0000
ROA not before: Sat 22 Oct 2022 04:28:28 +0000
ROA not after: Sat 21 Oct 2023 04:33:28 +0000
asID: 1239
IP address blocks: 212.103.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a0:24:2c:3e:bd:ac:1a:c2:5f:4c:2d:91:40:10:d7:32:99:50:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:28 2022 GMT
Not After : Oct 21 04:33:28 2023 GMT
Subject: CN=3C427D76AE919FB1848D6D046269444DFCE85741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:68:b9:5b:3c:71:b9:ca:e2:60:97:0c:e9:
fb:8c:db:18:5a:3e:24:2e:c4:c8:5c:6a:2e:75:73:
a9:23:71:ec:16:e3:14:83:67:a5:47:41:80:b6:16:
d7:ba:d9:5e:15:50:1b:84:c6:f6:c7:2e:e6:6c:c1:
3e:a8:57:e9:77:40:41:1d:f5:76:7e:9c:4a:ed:35:
99:4d:20:66:8a:18:7e:0e:7a:34:f5:0a:5a:59:88:
76:97:89:58:b7:33:9b:14:40:65:b5:5c:9a:a7:20:
31:b5:ea:2e:c8:99:62:f0:1c:49:41:e5:6a:be:e2:
c2:cb:34:a8:b1:17:20:71:43:a3:60:f7:13:a5:97:
81:1a:a5:19:c4:26:cc:af:f3:b0:6d:a4:d4:7c:81:
8b:48:36:d8:37:d6:04:5c:bb:70:d8:f0:d4:b5:18:
6e:e2:cf:d0:01:37:89:fd:76:dc:29:42:37:c3:ce:
bb:68:fa:23:c5:8e:04:80:33:41:66:a6:cd:49:a7:
5e:e6:8a:3b:9a:72:25:db:6c:df:52:f5:08:fb:34:
4f:4b:89:ee:3c:78:b3:a1:0a:d6:6f:31:38:5a:9e:
14:2c:e0:4c:9d:19:f4:60:95:ce:da:f8:85:99:48:
a4:7d:b7:e0:5c:e6:8c:8d:f6:61:59:c1:dd:4a:70:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:7D:76:AE:91:9F:B1:84:8D:6D:04:62:69:44:4D:FC:E8:57:41
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36332e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.63.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a0:d5:03:8c:79:5d:f6:d0:63:d5:6d:a2:d9:e0:f2:c5:0e:
74:fb:38:b8:01:24:d9:6e:7d:52:55:16:6e:15:3c:e9:5e:01:
e7:eb:94:96:b5:05:a3:d5:73:e4:41:77:b5:98:5a:d9:14:ca:
cf:45:9c:f5:60:21:00:c8:bd:fd:87:f2:01:bc:24:db:e5:4c:
8f:73:fd:5f:c4:6d:e4:b1:3b:8a:1f:83:f2:c6:93:9e:db:b6:
b4:df:5e:03:5e:90:3d:2d:12:9a:fe:6c:52:03:b4:8f:ed:19:
c2:a0:bc:57:5a:4e:68:d0:e4:59:0d:56:06:3c:b1:01:a6:ab:
c0:41:48:6a:5a:21:68:57:57:b6:08:17:4c:56:05:8d:b6:1e:
19:7d:9d:8a:81:51:17:86:2e:53:1b:96:f8:ec:73:2c:42:8f:
b0:7c:d1:7a:b1:0b:ea:bc:02:5b:42:19:9b:4a:9c:43:4c:61:
77:3f:26:6d:a5:f4:a0:64:c5:af:95:9b:99:41:44:12:76:73:
f9:37:d8:31:77:c4:60:16:db:ee:37:99:42:90:c0:83:10:0d:
20:42:2a:97:e0:6b:d8:6c:88:83:ad:93:de:22:2f:5d:80:5b:
35:ef:20:2c:8f:c8:9e:a6:e7:80:23:64:19:3a:58:7f:8f:c2:
f8:25:36:fc
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUPKAkLD69rBrCX0wtkUAQ1zKZUNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MjhaFw0yMzEwMjEwNDMzMjhaMDMxMTAvBgNV
BAMTKDNDNDI3RDc2QUU5MTlGQjE4NDhENkQwNDYyNjk0NDRERkNFODU3NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlhGi5WzxxucriYJcM6fuM2xha
PiQuxMhcai51c6kjcewW4xSDZ6VHQYC2Fte62V4VUBuExvbHLuZswT6oV+l3QEEd
9XZ+nErtNZlNIGaKGH4OejT1ClpZiHaXiVi3M5sUQGW1XJqnIDG16i7ImWLwHElB
5Wq+4sLLNKixFyBxQ6Ng9xOll4EapRnEJsyv87BtpNR8gYtINtg31gRcu3DY8NS1
GG7iz9ABN4n9dtwpQjfDzrto+iPFjgSAM0Fmps1Jp17mijuaciXbbN9S9Qj7NE9L
ie48eLOhCtZvMThanhQs4EydGfRglc7a+IWZSKR9t+Bc5oyN9mFZwd1KcLZ/AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUPEJ9dq6Rn7GEjW0EYmlETfzoV0EwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMjMxMzIyZTMxMzAzMzJlMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzIzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQA1Gc/MA0GCSqGSIb3DQEBCwUAA4IBAQCBoNUDjHld
9tBj1W2i2eDyxQ50+zi4ASTZbn1SVRZuFTzpXgHn65SWtQWj1XPkQXe1mFrZFMrP
RZz1YCEAyL39h/IBvCTb5UyPc/1fxG3ksTuKH4PyxpOe27a0314DXpA9LRKa/mxS
A7SP7RnCoLxXWk5o0ORZDVYGPLEBpqvAQUhqWiFoV1e2CBdMVgWNth4ZfZ2KgVEX
hi5TG5b47HMsQo+wfNF6sQvqvAJbQhmbSpxDTGF3PyZtpfSgZMWvlZuZQUQSdnP5
N9gxd8RgFtvuN5lCkMCDEA0gQiqX4GvYbIiDrZPeIi9dgFs17yAsj8iepueAI2QZ
Olh/j8L4JTb8
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org