Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36302e302f32342d3234203d3e2030.roa
File: 3130392e3233362e36302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: LHwYViY1oAqer8aCvQU7mzx1QVgJF2nTeqb1HJ2Ghec=
Subject key identifier: F7:15:4A:3E:16:11:71:0F:3F:25:25:EF:0F:A4:5B:D3:60:2F:55:A5
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 31CD2488E6F2BF564D13149593AE25292DF9BE13
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36302e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:09:09 +0000
ROA not before: Fri 03 Mar 2023 16:04:09 +0000
ROA not after: Fri 01 Mar 2024 16:09:09 +0000
asID: 0
IP address blocks: 109.236.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:cd:24:88:e6:f2:bf:56:4d:13:14:95:93:ae:25:29:2d:f9:be:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Mar 3 16:04:09 2023 GMT
Not After : Mar 1 16:09:09 2024 GMT
Subject: CN=F7154A3E1611710F3F2525EF0FA45BD3602F55A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:e1:f4:58:bb:60:cc:cb:59:07:d7:38:84:
8c:92:91:3b:d9:ed:b8:92:7b:f0:6c:3d:b0:19:cf:
32:d6:5f:59:7f:f0:43:f3:ba:1a:1c:c3:3c:88:70:
f3:ea:ce:3e:48:53:d8:8c:fe:78:4e:be:6e:de:04:
31:98:45:62:d8:04:dd:8e:4c:47:0d:f8:1a:4e:a1:
5a:40:a4:44:cd:0b:20:a3:a8:9b:f8:9d:c7:26:a1:
52:ed:66:e2:13:08:38:4f:3d:d0:d6:3b:aa:0b:7d:
c6:a4:18:95:36:99:6f:9c:c5:dc:f2:2f:3d:c7:22:
41:bf:b8:2f:9d:8c:2f:1a:a4:ba:44:2c:11:84:34:
83:dd:f7:13:ac:a2:e8:ab:6c:2f:4c:de:22:4d:2b:
ca:a1:b4:8e:c1:a4:22:31:5a:8c:e5:0d:4e:18:8b:
c7:98:3d:c8:19:20:78:86:5c:5d:0e:92:28:9b:fc:
54:ee:1c:91:ab:cb:4a:12:d9:7a:7a:2d:8c:23:ef:
44:f7:eb:65:95:89:11:cc:23:45:14:11:0d:92:cc:
57:56:ee:a9:28:b2:3a:a0:f2:ac:da:62:2a:87:bf:
36:38:be:d6:70:91:ee:a9:5a:da:a8:53:c3:f8:cf:
75:c3:2e:de:18:c5:3c:a1:17:c6:d0:de:4d:03:a3:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:4A:3E:16:11:71:0F:3F:25:25:EF:0F:A4:5B:D3:60:2F:55:A5
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.60.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6e:71:cc:3c:02:fd:ad:24:65:95:f3:17:54:53:03:42:66:
15:3c:27:51:c9:40:1b:29:ae:61:1a:78:92:8b:de:aa:9b:d2:
10:f1:42:e0:0e:e7:bc:dd:1a:1e:b0:04:2f:ae:23:ae:a5:3f:
d5:b5:a9:0e:2b:20:d9:1f:eb:45:aa:d1:93:18:05:98:f3:c3:
4c:62:e7:00:39:f4:5d:85:5f:8c:14:b7:83:76:65:04:17:59:
5f:9e:d4:b4:82:8b:16:22:43:27:aa:69:e5:fa:10:f8:04:4d:
ad:d7:dd:86:bf:51:15:0e:82:63:ec:c7:61:b8:f6:39:1c:28:
88:fc:20:48:22:c9:20:63:10:bd:b0:6d:dd:92:49:dd:0f:ed:
56:68:6c:0c:c8:af:51:ec:80:c9:84:5d:ea:86:2c:b7:ac:51:
fb:a7:50:09:3f:13:97:3e:f9:fb:aa:0b:69:99:eb:98:33:3e:
44:42:b3:29:44:bc:8f:44:05:25:2a:0d:ee:54:4b:79:37:9c:
fd:aa:fc:19:9c:67:8c:fa:03:40:b5:42:8c:0a:b6:53:e6:2c:
62:3b:ab:75:d2:47:50:65:ac:a1:ce:96:fe:7c:47:d8:f5:6e:
c2:e0:14:e4:a1:39:8d:15:a4:ae:b2:01:f4:26:44:d1:4d:25:
a7:75:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net