Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233322e31322e302f32332d3234203d3e2030.roa
File: 3138352e3233322e31322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: rQj5WjCbrOJ5P15EOXnzCzVFzp39pkcplJ1SU/4oRnQ=
Subject key identifier: 3C:D2:EB:6A:E2:77:57:28:54:45:7B:FF:3C:AE:D9:29:F9:27:42:66
Certificate issuer: /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial: 5F927D373B5A841612D88CB523ABAC0A2DC8FEA8
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233322e31322e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:40:26 +0000
ROA not before: Fri 03 Mar 2023 15:35:26 +0000
ROA not after: Fri 01 Mar 2024 15:40:26 +0000
asID: 0
IP address blocks: 185.232.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:92:7d:37:3b:5a:84:16:12:d8:8c:b5:23:ab:ac:0a:2d:c8:fe:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
Validity
Not Before: Mar 3 15:35:26 2023 GMT
Not After : Mar 1 15:40:26 2024 GMT
Subject: CN=3CD2EB6AE277572854457BFF3CAED929F9274266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:d3:ac:5e:13:bd:02:d8:e7:9c:e1:a7:0f:
aa:2d:85:9f:88:e8:a6:d3:2c:ea:db:ff:73:18:10:
d2:74:6d:f5:de:8f:e8:f9:42:bc:78:6d:b4:cc:2f:
f0:34:1e:78:c9:21:fa:71:ac:86:5e:99:07:5d:05:
61:fc:65:fa:f8:50:08:c7:4e:a4:77:f5:6e:2a:78:
16:d4:ef:a3:b7:a4:aa:3d:07:95:a0:f8:e6:d3:ee:
2a:e8:39:72:5f:3b:d8:9b:b4:5b:73:c0:d9:2f:cb:
39:ff:ee:a0:38:96:88:cf:fe:af:ae:98:3c:94:a3:
0c:36:b2:fd:61:6f:e7:cc:74:67:7e:98:53:e0:16:
68:2d:2d:54:2f:17:c4:5d:70:40:7c:24:3b:11:a2:
cc:76:4c:85:c4:f4:bf:5f:d3:82:0e:65:8b:ba:95:
96:51:d6:98:0b:4d:2e:e8:63:ee:e6:e5:e7:81:40:
51:38:f2:ae:f8:dd:90:d6:82:74:9f:c7:a1:a6:03:
79:e9:ff:54:f9:7a:1e:61:ed:14:29:9a:64:9d:02:
d5:ab:d6:11:94:c7:2b:30:81:18:c0:5b:2b:70:d4:
86:78:d9:8e:23:64:2a:40:62:a8:a5:2a:f8:4d:ba:
0d:af:0c:70:d0:c2:fe:26:a8:2d:85:25:35:87:84:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D2:EB:6A:E2:77:57:28:54:45:7B:FF:3C:AE:D9:29:F9:27:42:66
X509v3 Authority Key Identifier:
keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3233322e31322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.12.0/23
Signature Algorithm: sha256WithRSAEncryption
93:8f:68:63:8a:56:20:a4:7a:a9:f7:6b:74:0c:15:ee:2b:d5:
24:47:35:72:cc:33:a3:a5:2f:47:40:f3:9c:c2:f2:fe:32:f3:
8d:94:31:fc:77:51:cb:92:19:1f:d9:44:83:0a:4d:20:04:00:
94:f4:f6:9d:1a:f6:f3:11:e3:8f:95:a6:62:65:87:a6:b1:24:
c2:15:d6:19:90:f9:a8:ae:a7:e8:5c:f4:0f:8a:68:df:54:08:
18:87:c4:0a:8f:2c:e6:27:c4:9e:3e:2c:4e:49:bb:ba:fb:0a:
7b:6a:51:20:5c:97:84:4e:15:64:5f:04:23:46:ee:77:a5:02:
64:fb:c9:8e:fa:c4:9f:be:35:f0:8f:ba:78:3c:50:a2:b5:c7:
4a:89:ed:a5:0c:e8:bd:2e:cc:b4:09:c8:f5:88:3a:22:b3:b2:
54:cd:4f:cd:32:88:45:c7:65:0e:85:e2:57:07:e8:ce:23:20:
ca:0e:2c:0b:7a:91:a5:26:20:6c:96:07:84:52:f3:b4:a3:75:
6c:49:60:58:99:c2:7b:3f:b9:53:07:cd:07:1f:b9:f8:92:5e:
3d:06:31:75:2a:70:dd:b4:00:83:15:cf:42:62:a9:7a:55:b0:
1d:96:43:fe:e3:fc:cd:c7:a9:73:01:d3:ae:95:a2:86:b3:e2:
ef:42:0d:d0
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUX5J9NztahBYS2Iy1I6usCi3I/qgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJkMjljOTk2YWJjYzcyYzcyMjc5ZWY3ODk4Nzk1MWI4
MjVhZTQwMDAeFw0yMzAzMDMxNTM1MjZaFw0yNDAzMDExNTQwMjZaMDMxMTAvBgNV
BAMTKDNDRDJFQjZBRTI3NzU3Mjg1NDQ1N0JGRjNDQUVEOTI5RjkyNzQyNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/tOsXhO9AtjnnOGnD6othZ+I
6KbTLOrb/3MYENJ0bfXej+j5Qrx4bbTML/A0HnjJIfpxrIZemQddBWH8Zfr4UAjH
TqR39W4qeBbU76O3pKo9B5Wg+ObT7iroOXJfO9ibtFtzwNkvyzn/7qA4lojP/q+u
mDyUoww2sv1hb+fMdGd+mFPgFmgtLVQvF8RdcEB8JDsRosx2TIXE9L9f04IOZYu6
lZZR1pgLTS7oY+7m5eeBQFE48q743ZDWgnSfx6GmA3np/1T5eh5h7RQpmmSdAtWr
1hGUxyswgRjAWytw1IZ42Y4jZCpAYqilKvhNug2vDHDQwv4mqC2FJTWHhLL3AgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUPNLrauJ3VyhURXv/PK7ZKfknQmYwHwYDVR0j
BBgwFoAUItKcmWq8xyxyJ573iYeVG4Ja5AAwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzMvMjJEMjlDOTk2QUJDQzcyQzcyMjc5RUY3ODk4Nzk1MUI4
MjVBRTQwMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0l0S2NtV3E4eHl4eUo1
NzNpWWVWRzRKYTVBQS5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
My8zMTM4MzUyZTMyMzMzMjJlMzEzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBuegMMA0GCSqGSIb3DQEBCwUAA4IBAQCTj2hjilYgpHqp92t0
DBXuK9UkRzVyzDOjpS9HQPOcwvL+MvONlDH8d1HLkhkf2USDCk0gBACU9PadGvbz
EeOPlaZiZYemsSTCFdYZkPmorqfoXPQPimjfVAgYh8QKjyzmJ8SePixOSbu6+wp7
alEgXJeEThVkXwQjRu53pQJk+8mO+sSfvjXwj7p4PFCitcdKie2lDOi9Lsy0Ccj1
iDois7JUzU/NMohFx2UOheJXB+jOIyDKDiwLepGlJiBslgeEUvO0o3VsSWBYmcJ7
P7lTB80HH7n4kl49BjF1KnDdtACDFc9CYql6VbAdlkP+4/zNx6lzAdOulaKGs+Lv
Qg3Q
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net