Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e33352e3132322e302f32332d3234203d3e2030.roa
File: 3139342e33352e3132322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: T2Bzou/4R/dEvsONK9udKikbClXpuLWSfyoQzFxGJlk=
Subject key identifier: D2:55:4C:98:7A:B9:AF:B6:B8:9B:9A:FF:7D:8B:25:5F:EB:26:FB:B9
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 049CF35E65176DD406A04CFF14921EC2D076A4C6
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e33352e3132322e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:57:09 +0000
ROA not before: Fri 03 Mar 2023 15:52:09 +0000
ROA not after: Fri 01 Mar 2024 15:57:09 +0000
asID: 0
IP address blocks: 194.35.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:9c:f3:5e:65:17:6d:d4:06:a0:4c:ff:14:92:1e:c2:d0:76:a4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:52:09 2023 GMT
Not After : Mar 1 15:57:09 2024 GMT
Subject: CN=D2554C987AB9AFB6B89B9AFF7D8B255FEB26FBB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:1e:3e:c2:e5:4c:f4:65:5d:72:7d:94:05:
d3:f3:3d:59:52:4c:55:bc:35:99:b6:79:3f:93:25:
a7:65:aa:7f:79:52:76:f1:0b:ad:16:b9:41:19:bf:
0c:56:2d:0c:17:13:bd:c5:4a:cc:99:7b:4f:7d:26:
ec:5e:7f:87:24:ad:6a:fd:ca:05:6c:05:1c:07:ec:
e5:0f:30:da:e4:eb:6c:f0:8b:99:c0:b9:c1:bf:a3:
2b:ed:ed:5e:76:be:96:3b:4f:16:e3:aa:b5:b2:c1:
c6:be:b9:54:87:d1:50:3c:27:1b:9b:81:a6:2a:fa:
c2:78:c4:5b:83:1a:5c:be:89:8d:69:92:1a:82:3d:
41:e6:f2:44:9e:54:57:b0:c1:95:f8:3b:7b:02:87:
06:51:e0:15:95:bd:16:05:2a:5b:a6:60:fc:b0:57:
50:28:3e:7c:9a:56:75:27:d9:ce:28:cd:1e:c1:de:
ba:a0:a6:9e:40:fb:aa:c2:dc:ae:d1:a2:b2:48:f3:
19:f3:6a:17:ee:26:2f:ec:19:cd:23:bc:de:0e:17:
41:08:0c:5f:aa:c0:dc:78:1d:71:d9:a3:08:6e:ee:
8b:27:7c:45:f6:32:a2:c1:eb:19:1a:06:90:e2:02:
6b:b2:75:a6:16:dc:1e:ea:db:e3:8b:14:a9:94:54:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:4C:98:7A:B9:AF:B6:B8:9B:9A:FF:7D:8B:25:5F:EB:26:FB:B9
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e33352e3132322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.122.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:7a:ec:c9:f7:24:86:32:47:a0:12:49:08:dd:f2:94:5a:e8:
f6:a7:9d:ef:a4:71:ca:8a:75:74:86:a3:76:e9:23:a4:81:60:
11:c4:cf:67:b7:7b:11:f0:63:b7:b5:55:62:39:b0:94:6c:bb:
4c:f0:52:ee:32:0a:ff:6f:37:35:fb:6e:85:d9:7e:f5:74:e5:
5b:d1:a9:10:35:c0:4b:7d:a0:0e:bd:95:fa:53:c3:80:50:6e:
c8:7d:5b:10:45:46:57:c3:af:cd:ee:0c:64:04:7a:82:8a:60:
b1:c5:90:28:a1:c7:8f:c6:9b:8b:cd:bc:f0:02:c0:10:ab:14:
57:e8:78:52:14:8c:5f:d1:b4:08:4c:67:66:4d:48:94:0d:e7:
29:ef:67:37:27:ea:eb:1c:11:20:20:8d:11:82:c2:3c:03:f1:
5a:1d:a6:a2:aa:61:35:bc:fe:fd:be:ac:c9:a4:19:a4:74:80:
7e:d6:02:56:36:17:21:8e:00:d7:79:1a:da:b7:95:a8:a6:52:
c4:87:f9:f7:65:21:81:dc:a7:3a:9b:18:f1:24:7d:ed:4e:c7:
f5:8c:90:cf:49:59:96:21:36:b6:44:aa:95:00:da:16:df:11:
9f:d0:4b:cc:1d:31:74:05:f6:bd:3d:f0:fa:87:5e:d9:f5:59:
c1:7f:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net