Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/39322e3131392e38302e302f32322d3234203d3e2030.roa
File: 39322e3131392e38302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: NSgmlkCxp7E/OE/45HFHK5sP94MK1HmB+rAaEFB7qCs=
Subject key identifier: 25:17:EF:64:1B:9D:AE:E1:FF:7F:55:D7:5B:A6:A2:F2:AF:F6:59:9B
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 303AB85B55E914F5713956F9AC557FADB20F4622
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/39322e3131392e38302e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:52:41 +0000
ROA not before: Fri 03 Mar 2023 15:47:41 +0000
ROA not after: Fri 01 Mar 2024 15:52:41 +0000
asID: 0
IP address blocks: 92.119.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3a:b8:5b:55:e9:14:f5:71:39:56:f9:ac:55:7f:ad:b2:0f:46:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:47:41 2023 GMT
Not After : Mar 1 15:52:41 2024 GMT
Subject: CN=2517EF641B9DAEE1FF7F55D75BA6A2F2AFF6599B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:a4:76:79:63:a4:03:ec:cf:6f:ff:f4:6f:
2a:c2:57:f7:83:eb:dc:34:5b:82:a0:03:f4:27:4d:
2b:61:c9:c6:4a:51:2c:a4:e9:e9:f8:4e:21:61:32:
84:da:e6:a7:14:c0:47:06:59:3e:64:e9:6c:65:66:
c7:40:66:01:75:2c:e2:14:2f:2d:9c:5d:19:c4:ec:
b3:87:20:50:da:fa:7e:df:d9:63:c2:17:3b:57:b4:
eb:b1:dc:60:db:74:c9:bd:45:65:e9:38:e4:57:c0:
91:24:bd:00:6c:50:88:d3:8b:d8:7b:e9:64:9e:89:
21:8d:40:87:5f:64:00:5b:b4:ee:1e:12:2a:ff:19:
ff:22:51:73:f3:0c:52:12:84:3c:63:e3:c5:15:45:
1c:f2:e0:ea:05:5b:b9:8b:d4:40:16:24:9a:a9:8d:
b7:a8:5e:4c:7d:15:72:e9:86:33:8b:51:50:1d:40:
5d:ad:05:88:79:20:e6:ab:09:c4:b3:66:e8:aa:73:
db:3d:e1:4c:c5:04:02:df:6a:ca:64:fd:68:50:05:
17:0b:b5:ba:ec:30:88:a8:cd:3b:e7:6f:b2:1c:a3:
bc:70:50:a3:da:51:8e:bc:9a:f3:ed:e2:bb:b5:05:
f6:b6:89:c7:35:02:61:8d:c5:40:a6:a4:fa:59:e8:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:17:EF:64:1B:9D:AE:E1:FF:7F:55:D7:5B:A6:A2:F2:AF:F6:59:9B
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/39322e3131392e38302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.80.0/22
Signature Algorithm: sha256WithRSAEncryption
96:85:cc:97:1d:3b:a5:fe:ba:01:71:e9:de:71:b0:6f:d6:7a:
4c:7c:7e:5f:64:4b:f2:af:99:b8:7c:2a:53:27:e4:21:0e:65:
99:ed:bd:a7:5b:8b:5c:63:90:bf:dc:68:e5:f1:91:f3:d7:b4:
12:24:04:66:8b:c5:c3:02:cc:33:36:05:2a:b6:1b:1a:a2:2e:
33:0b:90:9a:73:69:41:dc:32:02:09:ce:70:28:9c:79:98:ef:
99:24:1a:1e:48:01:5a:50:91:af:e1:cf:e8:33:47:08:1c:59:
43:b1:82:dc:86:e0:f9:ff:cb:ea:12:ee:aa:fe:ba:65:45:51:
2d:78:ac:05:4e:80:63:13:ea:d7:78:2e:9d:93:31:bc:ea:30:
4f:97:12:18:05:96:dc:bc:ab:7f:4f:4c:9b:87:e4:f4:6c:3d:
20:de:7f:43:38:a8:cb:06:5d:2a:1e:96:52:91:eb:a6:7b:ac:
56:e6:5e:1d:cd:c0:a9:02:71:f8:4f:7c:a7:63:e6:7f:28:00:
fe:cd:1e:10:b0:41:7c:d2:96:16:fd:4c:49:c4:ba:77:02:7a:
4c:bf:9a:bc:4e:42:cc:e3:19:be:b0:50:6c:02:4c:0d:ae:04:
16:ac:6c:7b:38:ff:b3:e4:4b:58:c6:54:da:ce:49:98:cf:d3:
11:5a:2a:f0
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUMDq4W1XpFPVxOVb5rFV/rbIPRiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMzAzMDMxNTQ3NDFaFw0yNDAzMDExNTUyNDFaMDMxMTAvBgNV
BAMTKDI1MTdFRjY0MUI5REFFRTFGRjdGNTVENzVCQTZBMkYyQUZGNjU5OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzaR2eWOkA+zPb//0byrCV/eD
69w0W4KgA/QnTSthycZKUSyk6en4TiFhMoTa5qcUwEcGWT5k6WxlZsdAZgF1LOIU
Ly2cXRnE7LOHIFDa+n7f2WPCFztXtOux3GDbdMm9RWXpOORXwJEkvQBsUIjTi9h7
6WSeiSGNQIdfZABbtO4eEir/Gf8iUXPzDFIShDxj48UVRRzy4OoFW7mL1EAWJJqp
jbeoXkx9FXLphjOLUVAdQF2tBYh5IOarCcSzZuiqc9s94UzFBALfaspk/WhQBRcL
tbrsMIiozTvnb7Ico7xwUKPaUY68mvPt4ru1Bfa2icc1AmGNxUCmpPpZ6MnVAgMB
AAGjggHmMIIB4jAdBgNVHQ4EFgQUJRfvZBudruH/f1XXW6ai8q/2WZswHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJy
c3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8y
LzM5MzIyZTMxMzEzOTJlMzgzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMwLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCXHdQMA0GCSqGSIb3DQEBCwUAA4IBAQCWhcyXHTul/roBcenecbBv
1npMfH5fZEvyr5m4fCpTJ+QhDmWZ7b2nW4tcY5C/3Gjl8ZHz17QSJARmi8XDAswz
NgUqthsaoi4zC5Cac2lB3DICCc5wKJx5mO+ZJBoeSAFaUJGv4c/oM0cIHFlDsYLc
huD5/8vqEu6q/rplRVEteKwFToBjE+rXeC6dkzG86jBPlxIYBZbcvKt/T0ybh+T0
bD0g3n9DOKjLBl0qHpZSkeume6xW5l4dzcCpAnH4T3ynY+Z/KAD+zR4QsEF80pYW
/UxJxLp3AnpMv5q8TkLM4xm+sFBsAkwNrgQWrGx7OP+z5EtYxlTazkmYz9MRWirw
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org