Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3138352e39372e3134372e302f32342d3234203d3e2030.roa
File: 3138352e39372e3134372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 4clOgIEE2xxHsY0BDFGV1TC1TwAaHc+2Ava0unadF28=
Subject key identifier: 2B:B0:A9:01:F5:0D:C2:1D:3A:EF:5D:01:CB:91:45:87:F1:90:9B:FF
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 5519F02AF88D353BACC7DB59B3A3DEBA69A1EBE5
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e39372e3134372e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:44:02 +0000
ROA not before: Fri 03 Mar 2023 15:39:02 +0000
ROA not after: Fri 01 Mar 2024 15:44:02 +0000
asID: 0
IP address blocks: 185.97.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:19:f0:2a:f8:8d:35:3b:ac:c7:db:59:b3:a3:de:ba:69:a1:eb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:39:02 2023 GMT
Not After : Mar 1 15:44:02 2024 GMT
Subject: CN=2BB0A901F50DC21D3AEF5D01CB914587F1909BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:2b:0c:4c:1b:90:4a:47:2b:61:ed:8c:f0:
46:de:20:93:2d:fe:6f:2f:bf:5c:56:aa:e4:f7:9f:
13:49:9d:6d:7d:38:db:47:50:c1:fa:f0:d4:a5:09:
09:e9:bc:c7:e3:90:b2:63:b5:88:3a:28:57:a0:85:
b7:52:8c:c4:39:92:92:3e:8f:f6:19:51:0d:db:d9:
d7:b8:ed:99:a0:bb:a5:ef:a0:64:de:5f:a9:0f:f5:
89:0c:55:2c:fe:90:1d:23:5a:86:e7:c4:50:e9:9e:
63:76:c5:ba:e9:cf:4c:6e:da:f7:9a:25:9f:2f:a5:
39:d6:97:ed:11:2a:cd:3b:bf:f5:92:42:e2:aa:80:
d3:63:5c:19:70:36:9b:8d:d4:c6:c2:ae:27:87:b9:
e7:87:26:d7:a2:c0:db:80:14:ec:f6:87:5d:b9:ff:
cb:1a:43:4b:3a:46:d2:08:3d:5a:07:f4:30:10:c1:
4f:60:ec:e4:d4:fb:ec:55:17:28:f6:bc:b9:23:de:
3a:9b:32:3a:62:12:37:56:66:4a:8e:70:8b:07:45:
72:4c:2a:cd:51:da:8b:85:b2:4a:07:c3:f7:26:13:
c0:78:2a:90:a5:7a:f0:59:77:f6:65:cf:1d:08:40:
34:49:4a:ad:71:ae:26:60:ca:92:09:d4:36:e2:59:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B0:A9:01:F5:0D:C2:1D:3A:EF:5D:01:CB:91:45:87:F1:90:9B:FF
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e39372e3134372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.147.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9a:f6:3e:98:ac:2c:bb:13:b1:89:5b:f1:07:87:c3:e0:d4:
4a:89:ac:86:1d:2b:55:ec:af:4f:ee:58:d2:ad:40:8f:ff:9d:
78:01:e1:f4:74:c4:2e:d5:e0:65:7c:81:6c:8b:46:34:97:45:
91:8b:fd:89:cf:d7:bb:fd:4d:5b:c2:58:f8:65:60:fc:3b:55:
18:93:18:5a:58:da:f0:f2:79:d0:bb:58:b7:61:6a:02:39:4d:
58:c8:a4:87:a8:9f:73:58:e6:57:4f:95:85:bb:ec:12:57:ef:
d1:e3:31:66:c1:30:05:c1:02:ae:23:a5:23:f3:05:56:0b:4f:
6f:8e:6c:65:32:59:ac:4c:35:67:e5:55:cb:b1:62:f6:6f:54:
73:8f:e1:91:8a:a7:7f:b0:9c:8c:61:21:d1:a0:2f:5a:44:ba:
21:04:1b:f9:22:49:ff:6c:8a:58:4d:00:0e:f0:95:e1:2a:83:
a7:a7:fe:69:72:02:a7:dd:b8:64:f7:47:0d:11:cf:5a:3a:16:
6a:12:64:4e:58:bf:c9:ce:8d:48:e2:17:7a:7e:1a:fd:ec:23:
72:92:ec:1b:91:1f:5f:b2:8c:a0:1f:9b:e8:41:ae:08:27:9e:
6c:23:e3:73:59:de:22:56:d0:f6:29:99:40:2a:ee:ed:db:7e:
df:37:1b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net