Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e203235303938.roa
File: 3139342e36302e3230302e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier: 6Ej4TPrj/NVWzL7BplqIBkOIjWNGvSHfjXASNzUaV6g=
Subject key identifier: DF:13:23:BE:25:30:77:CD:7C:9E:EB:49:AD:13:B1:C2:F0:A8:13:CF
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 110245AE4893679FEC701775585ACB6B1AF89A7D
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e203235303938.roa
Signing time: Tue 28 Jun 2022 04:41:01 +0000
ROA not before: Tue 28 Jun 2022 04:36:01 +0000
ROA not after: Tue 27 Jun 2023 04:41:01 +0000
asID: 25098
IP address blocks: 194.60.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:02:45:ae:48:93:67:9f:ec:70:17:75:58:5a:cb:6b:1a:f8:9a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Jun 28 04:36:01 2022 GMT
Not After : Jun 27 04:41:01 2023 GMT
Subject: CN=DF1323BE253077CD7C9EEB49AD13B1C2F0A813CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:0d:44:13:39:79:67:ed:61:f6:dc:70:98:
ec:35:f9:91:b7:90:b4:73:7c:80:6e:a7:51:97:37:
7a:8c:e2:45:a2:96:37:b5:63:e1:b4:81:50:56:71:
99:27:72:94:36:f2:cf:c7:03:e6:4d:45:84:75:53:
f5:2e:0d:e4:40:f4:ed:1a:3c:8a:af:9e:ba:f2:45:
d4:01:7f:08:3a:e3:95:8c:4c:40:1f:bc:c9:92:6a:
ea:9f:36:f3:09:76:8e:af:5e:2c:64:f7:53:d8:fd:
4a:de:fe:d6:ca:d7:5e:69:2e:3b:8d:ef:c3:e3:50:
d0:cb:4d:f7:b4:97:21:40:f1:18:ae:08:16:99:cd:
2b:bb:b7:8b:e0:2b:3c:80:43:41:69:5b:58:b2:ba:
34:2a:14:5d:7f:5f:68:82:22:3b:49:aa:ef:c8:ba:
19:eb:4a:42:99:41:d4:a4:50:b3:47:9e:25:29:7c:
57:5c:68:d1:08:ea:6d:43:74:40:93:7e:ab:cb:65:
5a:13:9c:c9:1c:ba:dc:f7:17:86:49:c1:00:ae:77:
47:c1:6c:24:06:0e:60:61:f9:3c:98:26:fb:d5:32:
2c:ea:af:5f:f0:2f:fd:58:30:76:e4:da:12:fb:49:
d9:9f:c6:0f:c8:5b:df:ba:7f:58:ea:8b:30:60:13:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:23:BE:25:30:77:CD:7C:9E:EB:49:AD:13:B1:C2:F0:A8:13:CF
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e203235303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.200.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:ea:27:bb:e4:e3:02:a9:f9:ce:0c:c8:82:72:36:aa:fb:94:
8c:92:66:4f:fd:7f:55:19:42:f9:93:82:ba:6d:22:5b:a7:70:
a3:87:06:d4:43:f4:92:cc:62:94:ee:31:f2:a5:fb:73:be:d1:
a3:b3:88:a3:d9:36:4f:05:b9:07:93:6c:06:b9:06:73:16:4e:
01:ce:af:84:1f:8a:a7:b6:54:34:42:2e:eb:37:79:21:17:cf:
5c:ce:01:6b:e7:93:59:ea:bc:b1:6c:34:63:29:c4:16:46:cc:
cc:6a:32:c4:06:28:88:2c:1d:a8:f8:06:76:d9:38:d6:53:eb:
77:7b:d3:66:a4:a5:84:e4:4a:3e:02:fc:ae:a1:42:39:7e:78:
8b:21:48:28:c6:8c:3a:70:c6:8b:6f:bd:87:18:d2:cc:74:a9:
9c:9a:92:32:ef:30:f7:9e:e8:7d:82:1c:f2:9f:da:d6:5d:48:
9b:ad:e2:dd:51:b5:1b:d8:26:1e:00:64:e6:8f:7a:9e:42:c4:
a8:8f:48:c1:f2:c6:d9:30:16:85:1d:74:34:ce:c2:c9:0d:f8:
4f:9a:a7:9a:d2:13:fb:73:a8:02:3c:2b:5b:1e:f0:88:d9:0f:
67:8b:29:21:67:43:56:16:38:d0:b1:37:07:c1:3c:d7:86:a8:
df:c0:0b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net