Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32322e302f32342d3234203d3e2030.roa
File: 38342e35342e32322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: JNuXYSUxAb23qyh0TVEb4J5rI8w5fTgXmesrobLSJSA=
Subject key identifier: 54:FA:A0:E3:0F:09:F1:D4:06:76:8A:25:FB:9D:98:FF:1E:4D:1F:C5
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 5CF83399634021AD6E56CEA2479103672BB2618A
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32322e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:19:08 +0000
ROA not before: Fri 03 Mar 2023 16:14:08 +0000
ROA not after: Fri 01 Mar 2024 16:19:08 +0000
asID: 0
IP address blocks: 84.54.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f8:33:99:63:40:21:ad:6e:56:ce:a2:47:91:03:67:2b:b2:61:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Mar 3 16:14:08 2023 GMT
Not After : Mar 1 16:19:08 2024 GMT
Subject: CN=54FAA0E30F09F1D406768A25FB9D98FF1E4D1FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:5a:30:25:98:85:8a:12:a0:7d:5c:c0:2d:
a2:1c:a0:5e:99:cd:6a:d5:78:fc:bc:a2:55:c7:50:
5d:89:d0:bb:d4:60:a6:21:87:4d:f3:02:be:59:ac:
78:a8:8b:d3:34:44:a0:50:0f:f7:cc:d4:ac:d5:7e:
ac:51:17:b6:0d:99:69:aa:cd:60:c7:91:6c:39:4a:
ef:95:1d:fc:fe:6a:24:84:bd:07:37:ab:9c:e3:ca:
be:97:fe:f5:84:03:18:d7:66:3b:ed:cb:e0:c8:5f:
04:cb:1e:c6:62:e0:c9:ec:a7:7c:5e:cb:ad:3c:3e:
f1:36:7b:0a:b8:9a:90:a2:d4:ca:bb:4a:33:ae:e0:
ea:06:3d:85:aa:0f:ec:bb:1b:b6:c8:2c:f0:42:5c:
1c:a1:e9:17:85:33:94:23:c0:90:25:1e:70:74:00:
bc:60:65:a8:5b:40:b8:63:10:a5:85:c2:60:06:6b:
3e:28:b0:1e:e0:b9:30:84:02:fc:4a:8f:f9:ee:c8:
43:f6:1d:87:c3:25:c8:4f:63:7a:7d:ec:60:3e:2a:
ba:11:9a:ce:6d:f6:d7:4e:09:d7:63:bc:ec:19:df:
50:ce:1d:b4:df:7b:26:bf:87:97:b1:7c:cc:39:84:
4d:98:43:3e:b6:77:47:7a:ad:07:6f:73:e1:f0:85:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FA:A0:E3:0F:09:F1:D4:06:76:8A:25:FB:9D:98:FF:1E:4D:1F:C5
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ff:12:4e:82:8b:0e:67:bf:4b:a7:20:8e:2f:d4:44:3e:ad:
12:fa:fc:07:06:83:b4:dc:30:f6:55:7b:2f:84:5e:ef:97:6a:
ec:ef:16:93:26:27:72:31:ac:0f:cc:f9:8d:d4:04:7c:cf:0e:
57:b0:14:b0:c2:1a:f9:8b:94:80:dd:f5:41:0d:8a:dd:a6:c2:
85:cf:7b:10:5b:39:7b:08:e3:bd:f2:9b:a3:2f:7c:89:a1:71:
3c:cf:a3:0f:56:b7:ea:b4:5e:e9:3b:35:96:f9:31:39:0d:08:
6d:b4:5a:47:15:c8:44:59:81:90:37:10:43:67:4b:ec:8f:ee:
8f:f8:98:47:78:6c:4a:df:7c:c0:b6:1d:a5:1d:b1:6b:26:f9:
7e:ce:c1:a3:ef:2b:93:cf:cd:dd:50:59:1e:dd:01:bd:d3:f1:
74:5e:9e:32:17:98:5f:62:5a:27:19:a7:e0:10:c2:55:c9:db:
29:be:49:d7:a0:34:3b:2f:3b:32:17:13:33:df:ce:59:e1:c4:
02:c4:c2:65:0d:5b:8f:1a:84:03:fa:7e:e4:6f:d3:ea:68:ac:
71:f3:f6:9b:23:d7:29:fa:a7:14:47:67:eb:0e:8e:7c:78:4a:
ed:12:2f:14:34:7e:41:08:62:fd:1c:9d:69:e6:08:ab:62:79:
de:12:ad:ff
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUXPgzmWNAIa1uVs6iR5EDZyuyYYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMzAzMDMxNjE0MDhaFw0yNDAzMDExNjE5MDhaMDMxMTAvBgNV
BAMTKDU0RkFBMEUzMEYwOUYxRDQwNjc2OEEyNUZCOUQ5OEZGMUU0RDFGQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HlowJZiFihKgfVzALaIcoF6Z
zWrVePy8olXHUF2J0LvUYKYhh03zAr5ZrHioi9M0RKBQD/fM1KzVfqxRF7YNmWmq
zWDHkWw5Su+VHfz+aiSEvQc3q5zjyr6X/vWEAxjXZjvty+DIXwTLHsZi4Mnsp3xe
y608PvE2ewq4mpCi1Mq7SjOu4OoGPYWqD+y7G7bILPBCXByh6ReFM5QjwJAlHnB0
ALxgZahbQLhjEKWFwmAGaz4osB7guTCEAvxKj/nuyEP2HYfDJchPY3p97GA+KroR
ms5t9tdOCddjvOwZ31DOHbTfeya/h5exfMw5hE2YQz62d0d6rQdvc+HwhSKRAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUVPqg4w8J8dQGdool+52Y/x5NH8UwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmBy
c3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82
LzM4MzQyZTM1MzQyZTMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAFQ2FjANBgkqhkiG9w0BAQsFAAOCAQEAGv8SToKLDme/S6cgji/URD6t
Evr8BwaDtNww9lV7L4Re75dq7O8WkyYncjGsD8z5jdQEfM8OV7AUsMIa+YuUgN31
QQ2K3abChc97EFs5ewjjvfKboy98iaFxPM+jD1a36rRe6Ts1lvkxOQ0IbbRaRxXI
RFmBkDcQQ2dL7I/uj/iYR3hsSt98wLYdpR2xayb5fs7Bo+8rk8/N3VBZHt0BvdPx
dF6eMheYX2JaJxmn4BDCVcnbKb5J16A0Oy87MhcTM9/OWeHEAsTCZQ1bjxqEA/p+
5G/T6miscfP2myPXKfqnFEdn6w6OfHhK7RIvFDR+QQhi/RydaeYIq2J53hKt/w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net