Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232312e302f32342d3234203d3e2030.roa
File: 39312e3139362e3232312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: dRkdI2zyXmB9eNOodYSUEr8yzFzfI6JmgeQRFgbLm24=
Subject key identifier: 19:62:85:AC:EF:72:C6:CC:AB:14:06:D0:B4:0C:C5:B0:81:F9:FD:10
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 38D3CC7E33AF2C0A69BEC02C0A938D40B8C15C0B
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232312e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:54:09 +0000
ROA not before: Fri 03 Mar 2023 15:49:09 +0000
ROA not after: Fri 01 Mar 2024 15:54:09 +0000
asID: 0
IP address blocks: 91.196.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d3:cc:7e:33:af:2c:0a:69:be:c0:2c:0a:93:8d:40:b8:c1:5c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:49:09 2023 GMT
Not After : Mar 1 15:54:09 2024 GMT
Subject: CN=196285ACEF72C6CCAB1406D0B40CC5B081F9FD10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:f3:ef:3b:14:d9:64:6d:1b:06:87:33:fc:
cc:ef:9a:4d:27:04:22:ea:fe:f9:cf:f2:19:60:ad:
33:20:45:70:8e:ce:ae:62:16:9e:4c:d1:fc:90:e5:
c3:dc:eb:8d:b7:cb:70:15:2d:0f:24:67:40:4c:a5:
4e:a8:8c:54:60:be:0f:87:11:fc:ab:7b:85:72:ff:
e8:a5:4e:f5:3e:9c:da:2a:a8:6b:7d:ee:43:90:52:
7f:d7:b6:17:26:e5:07:71:57:ce:d0:3b:06:5c:0f:
6b:f3:6b:06:0e:b1:b6:b8:02:b2:a5:bd:5b:b9:4c:
4e:e3:6e:7d:46:c0:0a:1e:b7:5b:68:5e:0e:73:0c:
eb:d0:ca:a7:d3:5d:60:2a:62:8f:f5:4c:49:85:68:
dc:c8:0f:54:10:cd:fb:50:c6:1b:45:91:5d:3a:de:
25:18:0c:07:c5:b6:12:9f:19:bd:86:07:b9:6a:4f:
62:1e:25:4d:47:f1:2d:41:b5:04:c0:bc:85:d6:07:
08:2a:3c:3a:1c:c5:61:26:1b:b6:2f:33:df:40:d4:
43:8d:4f:a7:29:d8:c9:b5:75:a0:de:6b:8f:cc:bf:
c6:14:1e:0d:a2:5c:a3:81:a3:de:a2:1b:2a:06:27:
72:18:97:3d:e3:54:b0:c0:ae:7d:21:d4:91:5e:e5:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:85:AC:EF:72:C6:CC:AB:14:06:D0:B4:0C:C5:B0:81:F9:FD:10
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.221.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:d7:ef:7c:50:fa:c5:c4:33:1e:0c:87:3b:94:87:ed:ec:2f:
c7:c3:95:10:54:b2:73:3d:2d:95:af:f0:67:cf:de:db:17:dd:
35:5c:9b:86:39:43:0b:fe:81:aa:f6:46:3c:d6:8c:1e:59:d8:
e7:6e:cb:7e:86:53:7b:67:50:7f:ef:96:5c:db:04:fe:59:59:
63:94:75:d7:1b:2e:91:e5:77:24:65:d2:08:3d:d5:aa:a3:0f:
9d:ad:d5:7d:1b:9d:db:c1:9f:e8:13:52:53:26:b7:da:f4:13:
d5:af:7c:a7:0b:d1:69:b9:ea:e3:dd:d4:cd:ed:75:9c:81:08:
b6:b8:a8:4b:3b:31:e4:0e:ce:91:ad:0f:9d:aa:ce:8f:da:42:
54:ed:d0:39:2f:5d:9a:54:01:cb:ef:42:36:d7:cc:fd:d4:f2:
90:3c:42:8c:17:f3:51:cc:7c:fe:44:22:93:7b:3b:f2:da:65:
72:16:2d:55:41:6e:5f:f4:87:6f:a6:46:c6:5e:79:78:dd:21:
63:b3:f5:68:9e:ef:f7:3d:41:a8:09:f9:8c:9b:ab:4c:b0:a3:
ef:3f:e3:de:76:61:89:f1:0c:fb:77:4c:14:00:89:0f:b6:2d:
3a:21:0f:50:7b:ba:c8:7c:76:60:d8:a5:2b:f3:e4:52:76:ef:
b4:05:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org