Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e33352e31322e302f32332d3234203d3e20323033333830.roa
File: 3139342e33352e31322e302f32332d3234203d3e20323033333830.roa (raw, json)
Hash identifier: hDn767cWkCSoR4i/OTBOH1q8hcvTl5WKHlu9a/mLROE=
Subject key identifier: 31:A2:6C:33:65:F2:36:86:17:43:1B:16:0C:48:76:B9:3C:C2:8F:26
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 772436C9D7F5A4DD14159DBD994F8D0E2C773F2E
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e33352e31322e302f32332d3234203d3e20323033333830.roa
Signing time: Tue 07 Feb 2023 14:09:10 +0000
ROA not before: Tue 07 Feb 2023 14:04:10 +0000
ROA not after: Tue 06 Feb 2024 14:09:10 +0000
asID: 203380
IP address blocks: 194.35.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:24:36:c9:d7:f5:a4:dd:14:15:9d:bd:99:4f:8d:0e:2c:77:3f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Feb 7 14:04:10 2023 GMT
Not After : Feb 6 14:09:10 2024 GMT
Subject: CN=31A26C3365F2368617431B160C4876B93CC28F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:00:30:5b:08:e1:76:e9:97:f2:7c:6b:17:
3b:ea:42:cb:aa:12:e4:77:d6:0f:7d:7f:f0:a5:0f:
fc:e6:41:97:8a:f9:53:c2:ef:08:60:81:fd:22:c2:
e2:ad:a7:7f:dc:7a:d5:47:58:0f:f8:ed:ea:f1:54:
dc:1f:9a:14:07:ee:af:eb:bb:b7:5f:19:66:8e:47:
89:ae:d1:ac:b5:86:af:e8:fb:15:24:49:9a:20:91:
35:67:21:07:fc:b7:0e:78:89:b4:88:d4:93:56:77:
db:83:90:0c:1b:22:58:2c:33:b3:3b:4f:c1:82:28:
30:b5:93:a0:71:97:bc:1f:49:df:21:be:0f:26:9f:
7c:38:db:55:0f:03:18:3b:1d:e9:47:68:74:ed:f0:
99:4e:ca:7e:9e:6b:82:19:84:5d:38:a9:d2:ad:87:
e7:b9:84:49:fc:16:7f:1f:c8:09:df:2e:f3:13:e8:
36:20:a8:d6:e2:3d:3f:96:2e:da:6b:03:b3:2b:86:
77:d8:2d:32:a9:38:ec:e0:7b:f2:24:ad:65:c9:6e:
10:89:c2:49:d4:be:c4:72:51:e6:4c:da:b1:2f:8e:
4a:a7:4e:c9:1c:7f:58:af:9b:ef:c8:cf:05:22:6f:
a5:87:b6:a5:92:1a:12:c4:3a:06:8c:5e:ed:b7:42:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A2:6C:33:65:F2:36:86:17:43:1B:16:0C:48:76:B9:3C:C2:8F:26
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e33352e31322e302f32332d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.12.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:ca:33:7e:7a:fa:4d:02:c4:e9:9f:d5:75:c7:b9:be:2f:91:
80:9a:b5:e2:7e:b8:e2:d9:ca:3e:f0:69:47:ce:4c:ce:95:d7:
5c:96:bd:2b:24:49:3e:f0:30:a2:a9:cb:d1:92:3b:81:12:fe:
5c:eb:27:86:b4:d2:76:e0:0f:f0:87:ac:8d:bc:ad:8e:5f:eb:
56:d6:08:09:d9:66:d6:63:83:f0:90:c4:f6:36:08:5c:72:c2:
71:20:24:ef:a7:aa:95:80:95:24:63:01:ee:15:4e:ea:54:f0:
8f:12:89:45:d7:25:23:8d:c3:f6:9c:88:fb:b6:c8:60:85:f0:
bf:76:b5:53:29:f1:90:ae:d7:34:f9:66:9e:84:34:7c:d8:b9:
a7:3d:2b:75:66:32:ce:51:90:40:ac:a2:3c:69:e7:93:c0:e2:
f3:49:ab:f9:7b:e4:57:54:cd:c3:a7:be:2c:4d:f6:9e:05:9a:
ee:41:f3:d4:b0:40:30:41:25:28:8f:16:fe:cc:e1:cf:3c:d0:
2e:d6:f7:aa:31:82:18:e0:74:33:f3:b1:47:09:1f:27:73:6e:
9c:3b:43:76:09:ce:28:85:d4:5a:a8:8c:35:a5:d8:6d:76:d4:
14:a3:33:75:58:db:4b:eb:c1:1f:9e:ae:9f:df:43:07:e2:3c:
f8:8f:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net