Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/39322e3234322e3138382e302f32322d3234203d3e2030.roa
File: 39322e3234322e3138382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: KB2R+1qz4IDkThXfoj5Vho+07M6o+t+WgE7HrhpPPn8=
Subject key identifier: 67:4B:12:05:E6:06:A1:C3:D5:24:40:47:C8:E6:C2:9F:08:4A:9A:66
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 4B0ADF21F3EE24AE47AD50D24DFE2E79AC17DA6B
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/39322e3234322e3138382e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:48:35 +0000
ROA not before: Fri 03 Mar 2023 15:43:35 +0000
ROA not after: Fri 01 Mar 2024 15:48:35 +0000
asID: 0
IP address blocks: 92.242.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0a:df:21:f3:ee:24:ae:47:ad:50:d2:4d:fe:2e:79:ac:17:da:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:43:35 2023 GMT
Not After : Mar 1 15:48:35 2024 GMT
Subject: CN=674B1205E606A1C3D5244047C8E6C29F084A9A66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:6d:88:b8:47:6e:dc:23:f5:d3:4d:e0:72:
36:a4:7b:30:bd:1c:60:77:00:07:90:f7:dc:fd:65:
59:ea:17:c7:ac:af:02:55:65:95:79:3c:6b:bd:6a:
c7:39:8d:76:34:31:29:49:33:88:e3:df:da:c0:03:
fb:41:8d:07:98:3d:ff:04:cf:d0:71:0d:a1:45:2e:
8a:b3:2c:72:4c:5e:97:9e:03:8c:c6:33:49:f7:1b:
83:27:e9:63:02:1a:9e:46:b6:bc:24:0a:32:a6:b9:
15:2c:cb:aa:7e:55:9c:f7:16:d7:4a:ba:cc:44:c1:
2c:fd:51:f2:4a:b5:98:d6:0f:89:6e:8f:1a:47:16:
7f:d7:04:5f:62:7c:05:02:76:5a:5c:4e:49:29:e1:
ca:a2:9b:af:dd:32:b3:58:de:78:8e:93:bd:71:4a:
15:ee:25:7e:02:a2:29:90:5b:57:5f:5c:cc:f6:cf:
69:37:6c:1e:af:33:4b:31:ca:07:1d:b0:f3:f2:1f:
ea:5e:50:a7:ef:f4:fd:b8:09:66:48:f5:7f:bd:23:
60:d4:c4:1c:34:89:f0:ef:33:cd:fe:a4:32:8d:3a:
99:39:a5:bf:c7:68:fc:e4:90:cf:92:83:e8:32:27:
ad:54:61:f6:5d:9e:81:dd:70:73:b1:b7:ec:9f:9c:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:12:05:E6:06:A1:C3:D5:24:40:47:C8:E6:C2:9F:08:4A:9A:66
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/39322e3234322e3138382e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:c9:62:55:ab:69:b6:b0:a9:36:d7:f0:e9:99:19:93:bf:a1:
51:79:6b:4c:75:2d:d8:18:2d:f2:e7:f3:ea:4a:9b:43:d0:a6:
6e:69:9c:e6:20:5b:53:65:9b:10:fc:db:56:83:53:9c:14:50:
fa:06:43:aa:c2:c9:86:ee:ad:06:c7:9e:32:bc:44:0d:6d:0f:
7f:ec:ee:7b:cb:af:ac:2a:ff:61:bb:46:a9:bc:f1:ea:aa:8c:
d9:2b:cb:f8:9f:2d:3b:16:20:08:db:27:8f:fc:39:8f:e4:92:
5c:49:d4:76:f0:3e:9e:11:2c:f7:5b:ec:38:a1:ea:a5:8f:15:
ef:6d:22:7d:71:8c:21:12:34:ab:d4:13:91:34:9e:e6:8e:ec:
c2:16:9a:d3:86:1f:90:64:1b:4f:81:27:d7:bb:a3:10:a5:2b:
94:3d:e4:dc:f2:3c:0e:a1:d0:2e:27:2e:ee:ab:75:e0:84:95:
da:38:68:3a:b0:c7:5e:df:ab:4a:0a:07:72:bb:15:a0:db:69:
0a:6a:1d:e1:e5:e0:d3:45:01:47:a0:de:eb:0e:7f:bb:8a:7f:
f9:91:4c:61:cb:13:a0:74:13:24:23:bd:47:00:04:1d:20:08:
f4:e2:fd:f0:15:97:41:8c:cc:0c:83:a0:40:1b:af:cd:c4:b2:
dc:d1:ed:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org