Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e203233343730.roa
File: 3139332e34322e302e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: Eg/sGBNHdfBQB+DUkkwbTReGP8eUmHTDR+mYg5m77ic=
Subject key identifier: E3:17:D6:D1:2D:05:3D:4B:70:15:52:94:7D:5A:79:C2:F6:3D:62:50
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 190A862FBA0E0DAEED46F468D6F638B242236B42
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e203233343730.roa
Signing time: Tue 28 Jun 2022 04:40:34 +0000
ROA not before: Tue 28 Jun 2022 04:35:34 +0000
ROA not after: Tue 27 Jun 2023 04:40:34 +0000
asID: 23470
IP address blocks: 193.42.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:0a:86:2f:ba:0e:0d:ae:ed:46:f4:68:d6:f6:38:b2:42:23:6b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Jun 28 04:35:34 2022 GMT
Not After : Jun 27 04:40:34 2023 GMT
Subject: CN=E317D6D12D053D4B701552947D5A79C2F63D6250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:d5:56:4a:48:c5:34:76:7c:1f:4b:83:5b:
93:84:13:e9:2b:be:2a:ce:24:ff:d7:ac:96:20:46:
54:a3:b2:a9:47:0b:9f:e2:14:70:de:0e:3e:dd:34:
8f:d0:0e:67:85:bc:8a:39:c6:d7:8b:55:33:75:85:
cb:6e:c8:9e:d2:f8:51:01:bb:3f:f2:45:f5:3d:24:
43:c6:e4:f3:87:c1:67:26:ac:83:60:72:e9:99:27:
0e:ef:64:00:da:18:02:4c:74:17:e2:cf:86:18:72:
f6:f3:5f:97:ae:d4:11:a4:68:46:cd:fb:0c:47:a9:
db:ae:5e:ae:5a:35:7c:5b:86:dc:f5:df:36:56:83:
fd:03:a8:60:c7:33:55:f1:e0:6d:05:2c:93:9a:24:
1c:b6:31:56:e2:27:60:94:49:ad:24:7b:3c:49:e5:
59:6b:0f:6a:62:46:bd:a4:a1:42:f7:7e:0e:2e:ca:
f7:14:c9:c5:ef:0a:61:0f:0f:6a:95:71:bf:6d:3c:
31:62:25:c4:5a:01:d7:55:39:b1:16:bf:24:3b:fd:
27:1f:58:50:15:80:bb:bb:0d:7f:76:56:8c:e7:d5:
16:57:e5:2b:24:54:00:7a:63:4e:c2:04:8d:e9:03:
55:ea:54:87:50:f2:ba:f1:09:7c:7d:a3:c9:53:44:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:17:D6:D1:2D:05:3D:4B:70:15:52:94:7D:5A:79:C2:F6:3D:62:50
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.0.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c8:62:db:34:fd:a6:12:f5:9c:fb:9d:20:40:e6:06:67:3b:
d2:7c:76:12:13:ba:a5:c1:71:90:8c:dd:18:6f:c4:9b:c8:59:
f6:bc:fb:f0:7c:db:d9:92:cd:3a:c3:f8:2a:43:43:12:be:a3:
18:ae:e1:e0:16:bc:10:6a:59:f9:ab:74:74:1e:d1:58:bb:7d:
a3:05:5f:f4:84:cc:3b:4f:73:65:be:4d:9b:59:f4:3c:6d:15:
29:4c:9b:45:11:33:fd:8a:59:3d:99:45:87:bf:8a:83:53:0c:
96:97:3f:c7:fb:3b:fb:91:d6:28:09:11:e7:8f:68:64:b9:26:
29:55:5a:23:4a:e8:22:3c:a4:bb:ad:33:48:28:45:3e:94:49:
f6:76:5b:f2:3f:d9:f5:c8:e2:c4:7b:9c:1f:27:f9:20:02:8b:
b5:73:8c:34:84:bb:96:88:c3:17:45:f4:21:5c:44:08:bb:20:
b2:d5:47:25:87:3c:df:92:c6:2a:1e:fa:a2:5c:b5:34:ff:0c:
18:a9:a2:0f:a6:33:af:c8:ec:d9:ca:4e:df:26:10:8a:5c:00:
61:ba:24:b8:dc:ed:d6:15:ac:0c:00:2b:6f:bd:34:72:2a:0b:
d2:a7:b1:ff:8a:b6:9e:c6:27:77:b8:0a:95:2d:4e:57:59:46:
4a:14:98:61
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUGQqGL7oODa7tRvRo1vY4skIja0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjA2MjgwNDM1MzRaFw0yMzA2MjcwNDQwMzRaMDMxMTAvBgNV
BAMTKEUzMTdENkQxMkQwNTNENEI3MDE1NTI5NDdENUE3OUMyRjYzRDYyNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0n9VWSkjFNHZ8H0uDW5OEE+kr
virOJP/XrJYgRlSjsqlHC5/iFHDeDj7dNI/QDmeFvIo5xteLVTN1hctuyJ7S+FEB
uz/yRfU9JEPG5POHwWcmrINgcumZJw7vZADaGAJMdBfiz4YYcvbzX5eu1BGkaEbN
+wxHqduuXq5aNXxbhtz13zZWg/0DqGDHM1Xx4G0FLJOaJBy2MVbiJ2CUSa0kezxJ
5VlrD2piRr2koUL3fg4uyvcUycXvCmEPD2qVcb9tPDFiJcRaAddVObEWvyQ7/Scf
WFAVgLu7DX92Vozn1RZX5SskVAB6Y07CBI3pA1XqVIdQ8rrxCXx9o8lTRGFzAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQU4xfW0S0FPUtwFVKUfVp5wvY9YlAwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM5MzMyZTM0MzIyZTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM0
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMEqADANBgkqhkiG9w0BAQsFAAOCAQEAcchi2zT9phL1
nPudIEDmBmc70nx2EhO6pcFxkIzdGG/Em8hZ9rz78Hzb2ZLNOsP4KkNDEr6jGK7h
4Ba8EGpZ+at0dB7RWLt9owVf9ITMO09zZb5Nm1n0PG0VKUybRREz/YpZPZlFh7+K
g1MMlpc/x/s7+5HWKAkR549oZLkmKVVaI0roIjyku60zSChFPpRJ9nZb8j/Z9cji
xHucHyf5IAKLtXOMNIS7lojDF0X0IVxECLsgstVHJYc835LGKh76oly1NP8MGKmi
D6Yzr8js2cpO3yYQilwAYbokuNzt1hWsDAArb700cioL0qex/4q2nsYnd7gKlS1O
V1lGShSYYQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org