Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39382e302f32332d3234203d3e2030.roa
File: 3139332e34322e39382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: 2T1JMSUvtF9Qgx/VVeol6CWMQvRNYsG+hs8dnkem4VM=
Subject key identifier: AE:11:3B:BC:CE:40:32:CB:55:64:57:09:ED:01:E2:F2:0F:1E:74:FF
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 3F660D8FD0F18052C66AFA19333498F5800125B3
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39382e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:49:11 +0000
ROA not before: Fri 03 Mar 2023 15:44:11 +0000
ROA not after: Fri 01 Mar 2024 15:49:11 +0000
asID: 0
IP address blocks: 193.42.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:66:0d:8f:d0:f1:80:52:c6:6a:fa:19:33:34:98:f5:80:01:25:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:44:11 2023 GMT
Not After : Mar 1 15:49:11 2024 GMT
Subject: CN=AE113BBCCE4032CB55645709ED01E2F20F1E74FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:2f:92:91:67:54:5c:32:2f:ef:0b:fc:0d:
78:2f:30:fc:f5:d2:17:ae:c6:29:d1:9e:58:2c:1f:
6c:94:af:ff:92:a0:d4:1d:a6:02:a6:6b:6e:17:5c:
55:06:36:3f:5e:4c:59:91:7d:3c:fa:8a:72:37:e0:
6a:ed:6c:5e:ed:34:52:00:18:a2:93:d4:70:9c:39:
8b:6e:c7:4f:3e:38:58:55:b2:f6:88:9c:d5:f4:bf:
35:58:a3:4f:83:01:91:bd:2d:7c:92:57:13:9e:1b:
3d:07:4b:71:85:71:c7:08:5d:14:67:72:d7:97:92:
a8:8e:73:55:ae:5c:83:16:bc:72:7c:57:87:7b:c6:
2b:e0:06:f6:9e:f7:43:23:93:22:e4:f0:93:90:11:
09:bc:ac:7a:b0:2c:fe:a4:f3:6d:94:5d:5d:27:3d:
a4:c4:b8:75:fe:19:3a:dd:6a:23:93:d5:b6:60:76:
5e:36:97:5d:af:5c:25:4e:cb:d0:d7:ee:e5:2d:6d:
48:76:08:4a:2a:36:92:2e:68:a4:cc:55:eb:22:00:
32:9d:9e:f9:de:23:d7:d2:65:cd:6c:d4:74:b8:6e:
e6:04:09:3a:13:d7:13:05:37:95:2d:2e:2f:2b:4e:
6d:f8:f0:52:72:17:42:17:fd:86:78:ca:b0:5f:ae:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:3B:BC:CE:40:32:CB:55:64:57:09:ED:01:E2:F2:0F:1E:74:FF
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.98.0/23
Signature Algorithm: sha256WithRSAEncryption
32:fa:cc:f7:c2:07:01:d2:c1:9d:36:d9:df:8b:32:01:a8:d7:
85:be:79:42:f8:22:83:d1:3a:98:6d:e9:f2:69:92:8b:9f:1c:
79:20:da:3d:fb:33:53:d5:ea:d5:e5:5e:cb:33:08:e9:ef:f4:
b8:36:aa:d1:40:66:cc:ec:dc:2e:2a:cf:d4:fc:2d:51:bf:c0:
c4:81:3e:23:c3:ff:a4:bc:5c:9b:1c:64:44:a3:b8:b4:ea:38:
13:6a:18:18:6e:10:9c:c8:98:c8:b4:0f:02:6d:ee:94:c2:23:
0e:49:04:11:3e:fd:c1:65:fc:7e:e6:d5:9f:f3:4d:f5:40:fa:
28:07:a8:83:08:9d:02:5c:94:ca:38:fa:b6:8c:ea:e3:73:34:
72:98:38:70:22:45:7f:8e:2b:80:be:1f:57:6b:a4:09:77:f9:
b1:64:97:0f:ba:7d:87:ee:97:22:f5:a4:1f:96:7c:bd:16:3b:
c5:d3:b0:e1:64:41:9e:5d:ba:a0:5b:0a:0f:b8:7a:38:19:90:
00:2c:0b:f3:5f:94:26:49:81:8a:9e:c4:36:de:39:5f:b8:29:
63:39:e1:20:1b:7b:18:21:0a:a9:f7:84:f4:b2:ed:9b:f1:56:
4d:3d:ea:ab:f7:a7:b2:60:27:f5:06:da:19:a0:6b:6e:98:65:
e5:6a:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net