Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/322e35392e3135372e302f32342d3234203d3e20313431303339.roa
File: 322e35392e3135372e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: qgf5FFAyRkWkzZSE5A7j0AplFn6/lHsvXPKRz0TXzFQ=
Subject key identifier: 07:DF:C8:F6:93:B3:A8:EC:FF:2D:9F:BA:54:4B:1F:BF:91:F2:95:F4
Certificate issuer: /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial: 0CC1F3E1DAD43312DD1C97F31202A17A709A5EA5
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/108/322e35392e3135372e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 09 Dec 2022 10:03:35 +0000
ROA not before: Fri 09 Dec 2022 09:58:35 +0000
ROA not after: Fri 08 Dec 2023 10:03:35 +0000
asID: 141039
IP address blocks: 2.59.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c1:f3:e1:da:d4:33:12:dd:1c:97:f3:12:02:a1:7a:70:9a:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Validity
Not Before: Dec 9 09:58:35 2022 GMT
Not After : Dec 8 10:03:35 2023 GMT
Subject: CN=07DFC8F693B3A8ECFF2D9FBA544B1FBF91F295F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:f1:e4:71:c4:36:18:17:1a:02:f5:c5:92:
dd:26:12:94:d0:dc:05:9b:17:5e:24:04:a2:32:bb:
2e:bf:7e:d4:48:d3:71:31:8c:2e:d3:01:51:71:4e:
72:e8:01:c7:1b:65:ce:cc:f7:76:20:64:50:c6:4a:
ef:8a:be:83:13:f5:fd:4b:e2:25:22:dd:33:71:3a:
6d:a2:8f:9b:12:03:0c:b5:cb:72:42:46:7d:67:a9:
9f:84:0b:93:3d:2a:c8:fa:fc:b3:36:63:32:45:a5:
16:7e:d1:86:f5:91:65:d2:ca:e7:61:a3:96:b0:f3:
b9:15:95:40:33:29:51:16:e3:b1:37:b0:d7:38:aa:
50:8f:47:9c:88:ca:23:a2:44:6e:f2:74:00:de:87:
8c:62:be:73:ee:33:92:48:5b:ee:ce:29:be:ce:90:
82:cb:80:bd:cf:75:9f:f3:16:2e:91:70:98:0a:cb:
47:e4:4f:5d:0a:2f:63:84:f4:84:f5:a7:b2:31:3a:
be:11:be:e6:3f:8b:a6:f0:ab:0d:7d:eb:41:3f:46:
2a:c7:c1:0c:e2:3d:80:b9:4b:39:b3:26:9c:6a:77:
04:01:09:3d:0f:c7:51:51:ae:86:a5:31:af:ff:37:
ed:55:38:28:92:99:f8:2a:c6:b0:b2:ba:46:86:b6:
6c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DF:C8:F6:93:B3:A8:EC:FF:2D:9F:BA:54:4B:1F:BF:91:F2:95:F4
X509v3 Authority Key Identifier:
keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/322e35392e3135372e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.157.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ae:97:eb:48:cd:c8:17:b4:5b:e7:20:70:b7:91:9f:a9:6e:
19:3b:89:86:81:34:e9:e8:cb:92:fb:d7:54:5e:4d:41:b0:4c:
15:f5:f2:4a:e3:34:d3:91:33:05:d8:1a:b2:50:42:02:18:30:
42:8a:79:2b:55:a0:06:5a:a7:37:63:a2:39:8e:9f:58:63:c7:
7d:a4:8f:61:8d:b2:6d:39:c3:1b:27:ec:36:ac:b1:40:69:4d:
38:9d:ff:5e:1d:44:1e:c9:86:a2:de:54:d6:7e:34:ae:ee:44:
f8:b0:65:78:6a:64:17:d8:c4:6b:a5:48:86:de:e3:4d:c5:1c:
27:7b:21:46:23:1a:a2:57:be:77:2c:49:0a:d5:ae:48:f6:05:
9f:18:68:9e:21:8b:f3:c0:d2:15:d9:05:26:b6:08:98:0c:e8:
07:1b:1f:96:c6:89:8f:8c:31:b0:66:7a:95:c3:d2:7e:e6:e1:
8a:d1:5a:8b:84:8f:94:00:a1:e2:48:72:e2:13:4e:d8:64:d5:
6a:98:31:ac:1b:8d:2a:a1:6d:5a:34:7e:8a:59:c7:86:9a:41:
30:a0:9b:47:8f:ae:e9:4d:15:1a:0b:f8:c1:7f:c2:c6:9e:4d:
f4:80:0b:56:ca:c1:53:5b:60:d9:82:7c:26:5c:f5:3d:38:39:
e2:f7:68:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net