Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e203431393434.roa
File: 33312e34302e3231322e302f32342d3234203d3e203431393434.roa (raw, json)
Hash identifier: +Aa4VfWweJDKIqgxjnPCj99UkUyr5xWJDKVUJoYg4fo=
Subject key identifier: 13:4B:1A:C3:32:FA:9A:37:CC:3D:D7:80:54:4B:62:A9:11:A7:42:F9
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 7A4A8C5E4A79D8E91A2F53D637468EFCA2A48D27
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e203431393434.roa
Signing time: Sat 22 Oct 2022 04:33:30 +0000
ROA not before: Sat 22 Oct 2022 04:28:30 +0000
ROA not after: Sat 21 Oct 2023 04:33:30 +0000
asID: 41944
IP address blocks: 31.40.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:4a:8c:5e:4a:79:d8:e9:1a:2f:53:d6:37:46:8e:fc:a2:a4:8d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:30 2022 GMT
Not After : Oct 21 04:33:30 2023 GMT
Subject: CN=134B1AC332FA9A37CC3DD780544B62A911A742F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:c4:a9:0c:65:ab:d5:59:a6:ab:83:a8:1b:
6c:c4:7b:62:e3:cb:8f:4b:af:e5:b6:ac:67:17:31:
3a:35:00:03:49:18:ac:a9:3f:6a:11:e0:72:39:8b:
e4:85:41:b2:94:7c:f6:4e:7a:86:5f:2f:98:56:67:
ba:44:51:44:05:d6:bc:86:84:39:99:e2:30:77:e2:
c3:41:23:22:17:9f:66:50:f4:3c:16:88:f9:ae:9a:
6b:ab:37:ba:29:f4:3c:8b:9e:49:7e:36:4f:3e:c9:
73:dd:4c:9f:09:b0:31:5b:57:92:3f:fc:f7:63:c3:
ce:77:6f:e9:be:76:39:75:0a:4d:c8:ed:b7:e3:ac:
1f:e7:9c:35:92:1e:c3:1e:33:2b:27:3e:da:85:b5:
72:c1:bc:7b:72:98:08:38:20:33:42:24:30:e6:53:
f4:81:8e:c3:4c:e8:d5:13:9f:0f:ab:56:e7:74:39:
ae:0a:e2:af:0a:25:37:52:f6:f4:cc:07:70:ce:19:
1e:c6:da:39:b6:c8:fd:32:2e:ba:03:e7:73:d7:d5:
ea:11:2a:c3:38:59:79:7a:70:48:b4:02:7b:40:2c:
0c:0c:38:8a:21:1a:85:db:39:88:48:5a:9d:a1:a8:
33:33:9b:59:ad:0b:ba:a6:e0:3a:f9:29:d6:74:ae:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4B:1A:C3:32:FA:9A:37:CC:3D:D7:80:54:4B:62:A9:11:A7:42:F9
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e203431393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:24:9e:7b:1e:54:ab:41:ed:6d:ee:95:dc:dd:5c:8f:33:65:
e1:40:f7:60:7a:8b:b9:cc:bd:0f:96:ca:66:f6:b1:fb:05:56:
af:71:a0:12:25:1a:d8:bd:6d:40:38:17:cd:14:7c:62:50:fd:
0d:09:62:f3:60:4e:8e:d1:cb:8f:d6:fc:4d:c1:a9:8d:df:c4:
fb:f7:7d:c5:e6:e1:87:eb:85:22:76:c8:97:bb:18:ba:11:fb:
4c:8e:74:50:fd:60:ba:85:1c:21:92:62:20:7e:dd:e9:65:3a:
18:5a:e1:18:83:55:20:a8:80:96:62:59:09:2b:62:43:58:00:
39:9c:47:b2:ec:2a:94:03:7c:35:69:9d:d7:e7:7b:e1:4f:69:
ab:25:c3:d8:39:8a:d4:77:bc:62:f8:38:e2:a7:05:ec:ac:89:
0e:83:e3:14:5e:b0:be:4e:88:ad:cd:b3:35:64:54:aa:40:d8:
21:c1:b1:88:41:02:55:88:30:21:8f:19:9f:51:41:62:dc:d9:
5d:a7:e8:ae:6f:ea:54:85:a8:7b:74:12:84:0b:bd:ca:ff:8e:
19:a8:98:63:0f:3f:0b:7d:ab:ab:2b:d4:fd:bd:30:c0:30:10:
0a:7d:eb:f9:e4:76:e3:47:ff:3b:47:6f:7c:5b:78:b6:37:43:
40:ae:f5:b5
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUekqMXkp52OkaL1PWN0aO/KKkjScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MzBaFw0yMzEwMjEwNDMzMzBaMDMxMTAvBgNV
BAMTKDEzNEIxQUMzMzJGQTlBMzdDQzNERDc4MDU0NEI2MkE5MTFBNzQyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEy8SpDGWr1Vmmq4OoG2zEe2Lj
y49Lr+W2rGcXMTo1AANJGKypP2oR4HI5i+SFQbKUfPZOeoZfL5hWZ7pEUUQF1ryG
hDmZ4jB34sNBIyIXn2ZQ9DwWiPmummurN7op9DyLnkl+Nk8+yXPdTJ8JsDFbV5I/
/Pdjw853b+m+djl1Ck3I7bfjrB/nnDWSHsMeMysnPtqFtXLBvHtymAg4IDNCJDDm
U/SBjsNM6NUTnw+rVud0Oa4K4q8KJTdS9vTMB3DOGR7G2jm2yP0yLroD53PX1eoR
KsM4WXl6cEi0AntALAwMOIohGoXbOYhIWp2hqDMzm1mtC7qm4Dr5KdZ0rnPLAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUE0sawzL6mjfMPdeAVEtiqRGnQvkwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMzMxMmUzNDMwMmUzMjMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMx
MzkzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAHyjUMA0GCSqGSIb3DQEBCwUAA4IBAQBOJJ57HlSr
Qe1t7pXc3VyPM2XhQPdgeou5zL0Plspm9rH7BVavcaASJRrYvW1AOBfNFHxiUP0N
CWLzYE6O0cuP1vxNwamN38T7933F5uGH64UidsiXuxi6EftMjnRQ/WC6hRwhkmIg
ft3pZToYWuEYg1UgqICWYlkJK2JDWAA5nEey7CqUA3w1aZ3X53vhT2mrJcPYOYrU
d7xi+DjipwXsrIkOg+MUXrC+ToitzbM1ZFSqQNghwbGIQQJViDAhjxmfUUFi3Nld
p+iub+pUhah7dBKEC73K/44ZqJhjDz8LfaurK9T9vTDAMBAKfev55HbjR/87R298
W3i2N0NArvW1
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net