Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36302e302f32332d3234203d3e2030.roa
File: 39322e3131382e36302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: LnOUd2fu0XttNJk6DWBSNY7HqILwbTyhL58qzSQ4Sng=
Subject key identifier: 3A:0B:BA:C5:B6:2D:1A:60:11:1D:02:69:DA:C5:23:8F:9B:C3:DE:C8
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 136C9E1CC24BB181545085D035113C0184D63B32
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36302e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:58:01 +0000
ROA not before: Fri 03 Mar 2023 15:53:01 +0000
ROA not after: Fri 01 Mar 2024 15:58:01 +0000
asID: 0
IP address blocks: 92.118.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6c:9e:1c:c2:4b:b1:81:54:50:85:d0:35:11:3c:01:84:d6:3b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:53:01 2023 GMT
Not After : Mar 1 15:58:01 2024 GMT
Subject: CN=3A0BBAC5B62D1A60111D0269DAC5238F9BC3DEC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:9d:19:1d:e5:3b:7c:b9:b1:77:ee:fe:f6:
83:6c:ca:6f:08:5f:53:60:cc:b8:c7:75:d3:ca:34:
d7:80:dd:02:8f:db:12:ed:6d:f5:7a:e7:3d:55:d5:
ea:d3:a1:b0:ae:05:07:7f:84:07:0d:be:6b:6f:63:
ca:cd:4b:4e:63:3a:73:e9:26:ff:bd:a6:10:31:d6:
01:bb:ff:de:c0:ca:a0:5a:8b:ba:80:ef:a5:51:7d:
f0:5e:90:d2:8f:24:39:39:5b:bd:4f:db:4b:b0:83:
d2:8f:6e:58:ab:c7:e1:47:c3:80:d8:0c:79:8d:46:
18:14:f8:61:0e:3f:91:2b:8d:60:1c:a7:d9:b5:d8:
51:ee:a1:23:15:8b:e4:08:b6:b6:93:5d:15:e2:fd:
b4:e1:43:a7:72:01:d0:73:6d:c3:92:0d:b8:43:d6:
dd:ba:22:87:b5:71:32:1a:f6:b4:92:f3:a7:4c:99:
c9:8d:1c:3c:dc:44:71:5f:cf:27:99:2d:cc:4c:5c:
2d:aa:cb:1b:3f:96:00:70:fb:ac:b3:82:6c:8f:c4:
ff:89:d1:77:84:3f:22:ca:bb:62:b3:f8:1f:5a:21:
e0:e8:b2:3e:98:68:4e:84:e3:a7:e2:59:ad:c9:6e:
c4:08:0d:8b:f9:c9:79:c7:3c:60:89:3e:65:49:85:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0B:BA:C5:B6:2D:1A:60:11:1D:02:69:DA:C5:23:8F:9B:C3:DE:C8
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36302e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:09:a4:3a:3b:b8:76:48:7e:71:40:bf:43:f8:38:73:c4:75:
2a:e0:55:aa:8c:14:c6:dd:73:7f:ae:68:7e:ec:33:af:b7:72:
9c:e2:25:00:3b:9c:24:84:c1:de:e1:c4:6e:f3:7c:18:28:f1:
32:6b:e0:32:87:05:ce:a7:06:89:6e:ec:f7:e7:68:5d:f6:b0:
41:30:d6:60:2e:c8:3e:ea:fe:8e:cd:23:62:2e:78:55:17:34:
33:70:62:bd:7e:07:13:8b:db:0e:ce:d8:16:7e:90:59:fd:7b:
c8:b9:af:c5:8d:4b:78:b6:1d:06:cf:3b:4e:2a:a0:af:00:09:
03:67:9c:33:e0:c3:73:ea:d7:04:61:69:06:40:cd:60:3d:d9:
93:9b:17:5c:c5:43:15:c1:fe:b7:3d:b4:95:d3:d7:14:77:c0:
5b:20:7e:6c:bd:e0:a0:b4:74:35:4b:eb:63:9f:e7:a0:b1:60:
6e:5c:6f:07:76:78:33:0f:0c:85:1d:73:b5:fa:39:87:57:fe:
0e:20:3b:fb:c7:50:19:18:c8:d8:0a:be:c6:3a:a6:0b:39:bf:
c1:e1:71:72:d5:9e:45:7b:57:c3:03:de:dc:70:9f:86:44:d0:
40:23:d0:cf:6f:70:b2:b2:89:e7:54:3e:95:4b:19:a2:d8:66:
72:dd:7b:85
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUE2yeHMJLsYFUUIXQNRE8AYTWOzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMzAzMDMxNTUzMDFaFw0yNDAzMDExNTU4MDFaMDMxMTAvBgNV
BAMTKDNBMEJCQUM1QjYyRDFBNjAxMTFEMDI2OURBQzUyMzhGOUJDM0RFQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wZ0ZHeU7fLmxd+7+9oNsym8I
X1NgzLjHddPKNNeA3QKP2xLtbfV65z1V1erTobCuBQd/hAcNvmtvY8rNS05jOnPp
Jv+9phAx1gG7/97AyqBai7qA76VRffBekNKPJDk5W71P20uwg9KPblirx+FHw4DY
DHmNRhgU+GEOP5ErjWAcp9m12FHuoSMVi+QItraTXRXi/bThQ6dyAdBzbcOSDbhD
1t26Ioe1cTIa9rSS86dMmcmNHDzcRHFfzyeZLcxMXC2qyxs/lgBw+6yzgmyPxP+J
0XeEPyLKu2Kz+B9aIeDosj6YaE6E46fiWa3JbsQIDYv5yXnHPGCJPmVJhavzAgMB
AAGjggHmMIIB4jAdBgNVHQ4EFgQUOgu6xbYtGmARHQJp2sUjj5vD3sgwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJy
c3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC83
LzM5MzIyZTMxMzEzODJlMzYzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMwLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBXHY8MA0GCSqGSIb3DQEBCwUAA4IBAQCfCaQ6O7h2SH5xQL9D+Dhz
xHUq4FWqjBTG3XN/rmh+7DOvt3Kc4iUAO5wkhMHe4cRu83wYKPEya+AyhwXOpwaJ
buz352hd9rBBMNZgLsg+6v6OzSNiLnhVFzQzcGK9fgcTi9sOztgWfpBZ/XvIua/F
jUt4th0GzztOKqCvAAkDZ5wz4MNz6tcEYWkGQM1gPdmTmxdcxUMVwf63PbSV09cU
d8BbIH5sveCgtHQ1S+tjn+egsWBuXG8HdngzDwyFHXO1+jmHV/4OIDv7x1AZGMjY
Cr7GOqYLOb/B4XFy1Z5Fe1fDA97ccJ+GRNBAI9DPb3CysonnVD6VSxmi2GZy3XuF
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net