Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39362e302f32342d3234203d3e2030.roa
File: 3139332e34322e39362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 8UUKt9ZqQO/hp29k5566DdXCQ3qLFlUQgBH6clcb9ww=
Subject key identifier: C6:83:97:6B:B0:AC:19:0C:55:B1:08:F4:7E:9D:EF:F1:DA:75:F0:B2
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 0BBE79DAB5722F34590555C315D4449225876013
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39362e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:48:54 +0000
ROA not before: Fri 03 Mar 2023 15:43:54 +0000
ROA not after: Fri 01 Mar 2024 15:48:54 +0000
asID: 0
IP address blocks: 193.42.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:be:79:da:b5:72:2f:34:59:05:55:c3:15:d4:44:92:25:87:60:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:43:54 2023 GMT
Not After : Mar 1 15:48:54 2024 GMT
Subject: CN=C683976BB0AC190C55B108F47E9DEFF1DA75F0B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:f8:fb:cb:ed:8d:44:f2:d3:79:3d:5c:bd:
ee:46:29:21:a2:da:ec:eb:83:72:62:69:dd:13:fe:
c1:01:31:80:42:39:5e:d2:2c:ed:77:b7:ab:7a:c2:
2e:98:c2:81:50:bc:79:94:51:d8:a6:a5:7c:c9:71:
b5:35:a9:9c:9b:78:9f:c7:ad:15:b4:24:8c:0b:fe:
f3:13:4c:3c:52:26:d2:16:59:e7:71:f0:62:e2:92:
fb:47:e8:8f:b2:6e:81:8e:01:e1:94:6d:54:62:4f:
3c:a0:de:dc:53:ba:a9:d6:58:45:7c:40:eb:72:e4:
98:6e:8b:8c:95:e0:e8:19:10:0d:9e:99:69:8a:9b:
c6:67:b3:c4:3b:79:16:72:a0:56:b5:f7:6a:41:9c:
7b:1b:e8:55:e0:92:6f:95:ac:7f:ff:2c:75:1c:9b:
21:f8:54:93:df:a9:97:0b:f3:27:dd:bd:99:5d:30:
cd:1b:3a:5f:3d:ea:6e:f6:b3:57:1d:fe:62:74:c8:
7b:32:e2:ec:62:26:48:4e:0e:e9:e9:a6:d1:1c:f5:
95:bc:a6:8f:ca:09:01:68:f3:9e:db:ea:62:b2:23:
b1:aa:b6:d3:0f:66:47:01:49:0b:c1:ce:3d:aa:62:
d1:49:4c:d8:c1:5b:4d:99:66:c8:73:b7:43:15:e7:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:83:97:6B:B0:AC:19:0C:55:B1:08:F4:7E:9D:EF:F1:DA:75:F0:B2
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.96.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1e:4f:49:52:17:6c:8f:e0:a7:a9:e4:95:25:80:88:85:61:
db:0a:f0:85:2e:39:4f:3c:71:85:c3:65:bf:0c:c0:d4:d8:41:
ba:12:9f:5c:3c:3f:1b:27:20:02:92:2c:4d:81:1c:c9:0d:d7:
c8:3e:50:80:26:e2:32:41:a9:91:ec:36:5c:05:ed:12:99:03:
b0:a5:6d:27:47:3e:99:3d:fd:d9:3c:ff:71:d2:ae:73:0d:01:
a4:3b:ec:8c:dc:83:bf:07:37:cd:2a:15:2b:56:56:3b:cf:1c:
a5:dc:57:06:8d:5f:27:93:a9:cb:c7:b1:ef:0d:9f:2d:49:e8:
e8:1b:98:c3:0b:27:a9:f4:05:27:77:00:c4:86:61:b9:23:5e:
f4:36:2a:36:ef:80:0a:b7:b9:b3:5f:61:b7:c2:16:94:52:99:
c8:0a:f6:58:3d:f0:88:e0:6f:8a:23:82:54:e5:d5:c1:72:7e:
30:41:66:e6:3c:c0:55:b9:46:49:a1:1f:c6:a6:9c:60:a6:25:
48:8f:94:d5:be:9f:30:8f:60:6f:f1:3c:3a:01:ff:08:83:2c:
47:64:6b:bb:a7:76:9b:5d:10:53:c3:79:f5:6e:ef:aa:eb:64:
bd:49:4a:18:17:9d:70:0b:88:00:86:99:79:4f:4e:15:38:d2:
29:37:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net