Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e2033333536.roa
File: 3139332e34322e302e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: 7Bl6Md7cH3EKO6faAv8ygBuwAUAmlv/aUk80pBuQQ84=
Subject key identifier: 06:99:1C:61:CC:F1:8D:A0:B0:EC:B1:99:E0:B8:D5:CF:2C:F6:B0:9E
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 07965EAB30E7D71260283F9E17C3CD67C4779F65
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e2033333536.roa
Signing time: Tue 28 Jun 2022 04:40:52 +0000
ROA not before: Tue 28 Jun 2022 04:35:52 +0000
ROA not after: Tue 27 Jun 2023 04:40:52 +0000
asID: 3356
IP address blocks: 193.42.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:96:5e:ab:30:e7:d7:12:60:28:3f:9e:17:c3:cd:67:c4:77:9f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Jun 28 04:35:52 2022 GMT
Not After : Jun 27 04:40:52 2023 GMT
Subject: CN=06991C61CCF18DA0B0ECB199E0B8D5CF2CF6B09E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:ea:83:27:db:1e:85:a7:f4:80:6c:02:5c:
7d:88:70:71:e0:5b:14:b4:f6:5d:ca:37:47:96:a4:
35:17:aa:df:59:a0:86:c8:25:fa:bf:91:58:d5:92:
90:46:63:04:e2:bd:6e:bb:87:b8:db:91:7b:89:08:
1b:3c:a7:a6:18:72:c5:3b:9b:0f:d1:58:d8:1a:43:
6d:a0:0f:f6:cb:16:67:59:de:4a:50:f3:51:49:47:
3b:c9:7b:61:b3:8f:81:60:33:d7:65:a0:90:52:f8:
43:11:47:56:fd:cf:82:e8:89:d5:55:d3:1d:19:a7:
e9:24:3c:b5:d4:d7:4f:50:7a:56:08:ad:4c:c4:9b:
ab:dc:4d:5a:e7:35:f3:67:bf:89:7a:ee:d1:e3:00:
f2:ca:43:24:e1:6e:2e:b0:10:85:cb:f4:3b:6c:49:
be:38:28:58:77:15:a4:92:09:ff:e3:10:64:03:c0:
8f:ed:60:e3:52:3f:61:4b:59:eb:ee:85:f5:15:cb:
96:19:96:2b:ed:82:c3:d7:ab:7a:93:da:c0:96:57:
22:93:25:f7:4d:24:cd:5e:63:72:d4:ec:cd:85:18:
44:17:08:b0:3a:f5:7a:02:61:1c:bf:b9:33:2c:cb:
8b:0c:af:5b:31:41:b2:68:e6:d3:f1:45:7c:1d:f5:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:99:1C:61:CC:F1:8D:A0:B0:EC:B1:99:E0:B8:D5:CF:2C:F6:B0:9E
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:df:d8:ed:e8:9a:47:d3:e3:ca:1b:27:bc:59:a2:e8:4d:1e:
1c:9f:7a:3b:f5:88:58:18:5a:2a:20:44:a7:a7:30:90:12:e2:
87:a4:ce:c8:81:64:33:1a:36:47:70:7c:8e:0d:3e:36:7a:9f:
7e:3e:3d:a9:d3:45:c4:49:a2:ce:ba:6b:a4:0b:38:22:0c:33:
a1:4d:b0:d1:bb:f3:fd:41:56:8d:4c:bb:71:46:01:28:5c:48:
ae:62:ee:a0:b4:a0:50:36:5c:ce:32:bd:2a:d0:f0:19:9b:79:
d5:35:9e:fa:72:87:01:6e:24:8e:35:37:c5:ae:17:52:5d:41:
69:a5:54:1d:e2:2f:e5:49:bf:99:90:32:51:41:44:71:a7:7f:
cb:5a:b0:24:25:79:9c:4f:53:88:2a:62:54:b3:b9:ed:23:34:
81:64:40:e1:30:72:47:2f:6d:0c:20:65:d8:88:44:ee:ec:ee:
0c:5a:68:4f:9c:80:eb:15:84:23:10:22:58:bf:a9:a0:2a:28:
8a:d4:02:89:6b:74:b5:3a:15:a7:3d:f9:b2:ca:1b:85:80:d0:
5d:45:dc:3a:68:52:7c:6c:ad:6c:db:5e:9e:6b:26:e1:05:c4:
aa:b0:c2:00:e8:89:43:9a:fa:14:6f:67:f1:39:c2:52:62:77:
a1:3e:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:39 2023 by rpki-client on console-ams.rpki-client.org