Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231332e302f32342d3234203d3e2030.roa
File: 33312e34302e3231332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: i3wUelqAv5v3nSJnoVDmyorPpdQu7hzfBiIwFojXr+w=
Subject key identifier: FB:2E:53:0F:EC:BA:16:A1:C9:FD:8A:DC:F7:AD:80:67:42:9D:94:C2
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 603CE5EC800B0333C8AE17A3F0F0CC979EC9ACA4
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231332e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:50:32 +0000
ROA not before: Fri 03 Mar 2023 15:45:32 +0000
ROA not after: Fri 01 Mar 2024 15:50:32 +0000
asID: 0
IP address blocks: 31.40.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3c:e5:ec:80:0b:03:33:c8:ae:17:a3:f0:f0:cc:97:9e:c9:ac:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:45:32 2023 GMT
Not After : Mar 1 15:50:32 2024 GMT
Subject: CN=FB2E530FECBA16A1C9FD8ADCF7AD8067429D94C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:1f:bb:2b:6b:b4:6c:6c:30:ff:fb:b3:a7:
02:5f:a3:4f:3a:76:d0:8e:10:a9:d6:8f:25:30:d1:
b6:5a:2a:0a:6a:b6:f0:da:26:0a:37:b9:e7:94:e5:
35:28:76:af:fe:bc:53:d8:b9:c8:20:96:05:8f:11:
18:b4:fe:bf:0b:46:ee:05:43:f0:27:fc:58:77:13:
e5:b9:e2:4f:98:37:b6:c0:56:f1:13:21:15:d1:ae:
92:a1:62:24:56:bf:15:ce:19:8c:24:86:d2:5d:d7:
11:c2:f8:46:e6:ab:3f:07:83:ee:33:2b:69:18:46:
4c:73:3b:58:c5:28:d9:c1:63:41:f1:d9:0b:a4:21:
04:73:54:c7:50:67:18:f5:4c:87:f1:9f:f8:a5:5e:
c9:3f:12:97:a4:11:bf:5e:4c:d9:a3:97:3b:3b:3f:
83:74:99:75:cf:03:b9:1d:67:86:8d:de:47:dc:66:
74:b1:9d:a5:de:4f:00:e8:79:4f:dd:be:d6:a4:25:
23:c0:93:1e:59:d2:04:7b:2c:bf:13:99:9e:93:85:
25:da:5e:a6:77:e9:1f:98:d3:f4:b1:ea:a6:df:7a:
5b:93:a4:70:53:8f:ea:ae:c7:6c:51:e4:e9:29:de:
a5:c9:da:6e:d4:12:df:29:f3:12:f7:31:e0:33:af:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2E:53:0F:EC:BA:16:A1:C9:FD:8A:DC:F7:AD:80:67:42:9D:94:C2
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.213.0/24
Signature Algorithm: sha256WithRSAEncryption
42:93:40:4d:7d:9a:7e:a2:16:62:82:92:ab:2e:7b:da:a0:88:
a4:e3:2a:8e:d9:dc:5e:46:d4:61:df:fe:01:ca:43:e7:6c:17:
08:53:20:6c:bc:7f:34:22:f3:d6:e7:20:a3:c4:39:3d:b5:6c:
8a:a8:11:7d:9b:2d:cc:2f:d2:b8:09:96:6f:59:04:d2:50:5b:
44:30:2e:4f:c4:98:ba:f4:b0:53:57:ce:17:a7:32:45:d8:74:
cd:b0:62:ec:34:f6:c3:75:8c:45:07:ac:44:f3:04:b1:e3:24:
77:6c:d6:a3:30:a4:63:97:11:72:bc:87:ad:ef:d3:91:0a:69:
6b:4c:89:78:ac:16:ba:a2:f0:d1:74:47:e5:4f:ea:76:60:97:
a1:80:e7:ef:42:c1:f8:63:25:cd:06:76:64:77:cf:c9:d7:f9:
82:9b:c3:ce:92:e9:4a:b0:e9:6f:7b:7a:b5:06:67:1e:10:70:
d7:8c:84:56:b3:71:15:78:eb:38:02:78:2d:65:c0:ee:f4:b8:
b2:b2:60:4e:7f:49:09:64:03:d6:84:0f:40:a3:4d:31:29:6c:
a0:2a:48:30:2a:79:8c:63:d2:bb:9f:09:4e:64:de:25:7f:43:
4c:38:b2:ea:2e:e5:67:78:6e:0f:13:30:ab:a9:16:76:77:42:
db:77:94:3a
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUYDzl7IALAzPIrhej8PDMl57JrKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMzAzMDMxNTQ1MzJaFw0yNDAzMDExNTUwMzJaMDMxMTAvBgNV
BAMTKEZCMkU1MzBGRUNCQTE2QTFDOUZEOEFEQ0Y3QUQ4MDY3NDI5RDk0QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbB+7K2u0bGww//uzpwJfo086
dtCOEKnWjyUw0bZaKgpqtvDaJgo3ueeU5TUodq/+vFPYucgglgWPERi0/r8LRu4F
Q/An/Fh3E+W54k+YN7bAVvETIRXRrpKhYiRWvxXOGYwkhtJd1xHC+Ebmqz8Hg+4z
K2kYRkxzO1jFKNnBY0Hx2QukIQRzVMdQZxj1TIfxn/ilXsk/EpekEb9eTNmjlzs7
P4N0mXXPA7kdZ4aN3kfcZnSxnaXeTwDoeU/dvtakJSPAkx5Z0gR7LL8TmZ6ThSXa
XqZ36R+Y0/Sx6qbfeluTpHBTj+qux2xR5Okp3qXJ2m7UEt8p8xL3MeAzry5rAgMB
AAGjggHmMIIB4jAdBgNVHQ4EFgQU+y5TD+y6FqHJ/Yrc962AZ0KdlMIwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJy
c3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8y
LzMzMzEyZTM0MzAyZTMyMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAHyjVMA0GCSqGSIb3DQEBCwUAA4IBAQBCk0BNfZp+ohZigpKrLnva
oIik4yqO2dxeRtRh3/4BykPnbBcIUyBsvH80IvPW5yCjxDk9tWyKqBF9my3ML9K4
CZZvWQTSUFtEMC5PxJi69LBTV84XpzJF2HTNsGLsNPbDdYxFB6xE8wSx4yR3bNaj
MKRjlxFyvIet79ORCmlrTIl4rBa6ovDRdEflT+p2YJehgOfvQsH4YyXNBnZkd8/J
1/mCm8POkulKsOlve3q1BmceEHDXjIRWs3EVeOs4AngtZcDu9LiysmBOf0kJZAPW
hA9Ao00xKWygKkgwKnmMY9K7nwlOZN4lf0NMOLLqLuVneG4PEzCrqRZ2d0Lbd5Q6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org