Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e203432383938.roa
File: 3138352e3230392e3232332e302f32342d3234203d3e203432383938.roa (raw, json)
Hash identifier: +EWuJe/OqxLPhUpd6WDav/QUSawcGd3ZmwTqLDZ1sFM=
Subject key identifier: 23:EA:4F:71:5C:3B:30:BF:EC:78:BA:BD:F1:66:46:A5:87:C4:F0:AA
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 7CE4DAED803E67BCA24431DA781A41B1FD81E70C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e203432383938.roa
Signing time: Fri 31 Dec 2021 17:00:00 +0000
ROA not before: Fri 31 Dec 2021 16:55:00 +0000
ROA not after: Fri 30 Dec 2022 17:00:00 +0000
asID: 42898
IP address blocks: 185.209.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e4:da:ed:80:3e:67:bc:a2:44:31:da:78:1a:41:b1:fd:81:e7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Dec 31 16:55:00 2021 GMT
Not After : Dec 30 17:00:00 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:7a:55:e6:2e:7b:d2:f5:f2:ba:52:0e:8c:
b7:90:1b:c8:af:e3:c8:95:29:a5:90:c6:23:c9:4d:
cb:95:f6:76:90:b7:77:37:89:27:ce:9c:a6:61:e0:
8b:0e:fa:0a:7e:48:37:35:ea:7e:09:57:0e:c9:77:
c8:ab:ae:28:a1:ee:60:3d:ab:49:94:8b:43:24:f9:
81:8b:b5:1e:b3:cf:1b:df:1c:77:bd:2e:cc:86:25:
f9:62:42:5a:95:99:ba:c8:e6:b3:d9:64:ab:eb:ac:
58:11:98:d8:3a:6b:45:53:be:5f:80:2f:6a:a1:55:
b1:d7:8b:a0:eb:16:5c:6e:b2:14:6b:d8:79:94:79:
de:2c:6e:98:51:4b:df:eb:d6:ca:66:99:2f:2e:f6:
bc:22:64:9c:24:09:59:34:92:b7:84:8e:a4:4f:24:
13:01:0d:86:95:5b:1c:ee:fa:c1:90:9a:73:1c:b4:
46:98:27:48:a2:60:d7:70:9c:65:53:8b:d4:eb:16:
00:46:dd:d1:05:b0:08:c9:7e:d2:75:c1:4c:0b:00:
a1:0d:6e:20:7f:b0:f3:30:d1:7b:51:ee:66:87:ba:
1a:85:75:2b:1a:13:fb:11:65:4b:74:52:dc:89:73:
29:71:ef:51:f8:51:06:0a:42:e6:d5:72:32:24:1c:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:4F:71:5C:3B:30:BF:EC:78:BA:BD:F1:66:46:A5:87:C4:F0:AA
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e203432383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.223.0/24
Signature Algorithm: sha256WithRSAEncryption
f1:ca:85:b7:2a:73:c3:41:b3:80:d6:15:4e:47:f0:54:14:ed:
3f:72:5a:02:36:be:73:9f:40:1d:e8:4b:f8:3c:eb:f8:10:6b:
26:9c:ab:75:09:76:fb:e6:23:ce:0a:92:83:cf:37:77:0e:91:
c2:37:09:1d:de:0c:88:07:b0:93:6e:d8:f2:95:e1:11:ea:21:
62:16:33:70:cc:a3:af:e9:70:c5:0d:b5:fe:83:39:bf:74:6a:
ff:8b:b7:56:a0:8e:39:fb:d0:05:22:7f:01:8b:31:2b:a5:38:
2c:6a:92:f6:89:07:53:e0:a5:0c:66:1d:7c:e3:21:76:03:f8:
03:b6:83:a8:65:7e:e8:32:85:50:56:e6:9e:0f:30:34:78:b3:
16:81:04:b3:d5:54:1b:b4:0e:de:40:c1:19:01:22:d9:5b:83:
a8:b8:25:32:52:3b:62:58:c7:fb:f0:b5:e0:91:c8:62:15:4f:
e7:07:59:fe:c0:e3:64:c4:7c:d0:f8:4a:b5:48:1d:85:e2:f5:
0f:52:08:01:2e:d7:29:4e:47:d3:83:2c:14:ea:6d:52:b0:be:
7a:cf:90:3c:ab:54:e0:cc:64:68:88:a6:ab:b6:f1:ee:65:dc:
b0:2e:e6:94:c9:33:29:d7:b7:91:6a:af:f7:1a:89:f0:9d:a8:
49:4e:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org