Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139322e3134352e33362e302f32342d3234203d3e2030.roa
File: 3139322e3134352e33362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: N+p4oOqg0MmSFU3sz+l6jlFZkx1yl3iNYVh8H7wekcI=
Subject key identifier: 4A:C1:56:82:D4:69:19:DE:01:60:FE:EB:73:56:F6:02:11:2A:00:71
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 6DD06AC222E366CE324073EEB93FEE40FFF76A6D
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139322e3134352e33362e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:13:27 +0000
ROA not before: Fri 03 Mar 2023 16:08:27 +0000
ROA not after: Fri 01 Mar 2024 16:13:27 +0000
asID: 0
IP address blocks: 192.145.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d0:6a:c2:22:e3:66:ce:32:40:73:ee:b9:3f:ee:40:ff:f7:6a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Mar 3 16:08:27 2023 GMT
Not After : Mar 1 16:13:27 2024 GMT
Subject: CN=4AC15682D46919DE0160FEEB7356F602112A0071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:f3:3e:1a:73:b1:74:98:1c:ae:d7:80:55:
ee:7c:a1:02:77:d7:39:f8:32:1d:73:4c:fa:ec:90:
3d:79:1c:48:a5:f3:bc:55:6a:c5:8f:16:4b:b2:3a:
d7:f6:a8:d8:a8:90:4f:fc:af:59:b3:2e:c8:6e:87:
b7:90:9a:67:84:39:26:c9:ca:e6:41:b0:e4:25:87:
b6:3f:5a:ac:0e:4b:13:f4:a7:96:88:52:f1:44:5a:
65:f5:0d:64:be:3c:6c:6a:6b:a5:bc:45:5f:a2:e9:
61:f9:ab:5a:41:3f:39:0b:b5:66:1f:95:59:73:1f:
c0:b7:67:37:41:9a:ab:96:bb:8c:6b:6e:90:6e:26:
af:fc:19:7f:87:c1:dd:33:f5:f1:ee:5f:65:fe:50:
9b:83:fe:de:52:85:e3:e2:0a:1b:e4:04:e7:b7:d8:
9b:cb:ec:31:8e:2e:94:d8:f7:bc:fe:90:7c:c8:a4:
ab:1e:09:3d:c6:7e:0a:4c:6a:6c:e5:f4:6c:5b:ee:
84:54:9a:bf:7f:f3:80:94:5e:0f:92:f5:0b:c9:ee:
59:6d:dc:e6:1e:32:7d:e8:ee:a7:8b:2f:58:3a:2a:
3f:99:3d:77:66:3f:91:1c:14:87:0c:00:d6:11:fc:
0d:40:9c:10:0c:58:7b:8a:76:05:23:73:b7:12:e9:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:56:82:D4:69:19:DE:01:60:FE:EB:73:56:F6:02:11:2A:00:71
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139322e3134352e33362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.36.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:5b:75:6c:cf:55:96:f3:4b:9a:da:bd:94:bf:d1:d9:00:e1:
d5:4b:bb:4b:b9:56:c8:69:e7:e8:5c:11:b0:fe:0f:8e:9e:87:
3c:fe:ee:18:e7:b7:08:be:2a:2c:18:d9:f3:aa:52:4c:de:6d:
5e:f9:93:8a:1c:e6:d6:8d:d4:74:cd:77:6c:ba:70:c5:b7:3b:
54:66:bb:dc:cf:bb:e0:8e:2f:01:5b:c9:2a:c2:9f:72:ee:79:
ed:3d:1f:a1:b4:d6:8f:53:0a:93:59:4a:dc:86:fd:2d:53:71:
02:17:a9:a2:51:a4:9f:dd:58:d3:e3:35:3a:de:a3:0b:da:74:
70:dd:cf:34:90:95:ed:cd:bf:83:42:8c:52:d4:61:dd:7d:04:
aa:d3:4c:9c:b8:4d:48:ce:96:94:54:4b:ea:fe:a8:b3:59:f9:
86:d5:f0:76:ef:31:f3:fe:49:28:ce:93:1a:00:39:f3:f5:db:
c5:f4:63:01:4f:ce:ba:fc:b7:da:85:37:fb:fe:a3:7d:42:05:
f0:26:0f:3c:e1:a4:20:bd:f9:15:14:df:29:7f:60:79:56:41:
d7:eb:ff:33:9b:db:30:cd:28:94:30:41:4c:2d:31:b6:4d:41:
50:3f:70:9b:ab:f3:44:9e:18:4f:85:88:48:5b:61:8b:3a:0e:
b7:3c:c8:2f
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUbdBqwiLjZs4yQHPuuT/uQP/3am0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMzAzMDMxNjA4MjdaFw0yNDAzMDExNjEzMjdaMDMxMTAvBgNV
BAMTKDRBQzE1NjgyRDQ2OTE5REUwMTYwRkVFQjczNTZGNjAyMTEyQTAwNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNvM+GnOxdJgcrteAVe58oQJ3
1zn4Mh1zTPrskD15HEil87xVasWPFkuyOtf2qNiokE/8r1mzLshuh7eQmmeEOSbJ
yuZBsOQlh7Y/WqwOSxP0p5aIUvFEWmX1DWS+PGxqa6W8RV+i6WH5q1pBPzkLtWYf
lVlzH8C3ZzdBmquWu4xrbpBuJq/8GX+Hwd0z9fHuX2X+UJuD/t5ShePiChvkBOe3
2JvL7DGOLpTY97z+kHzIpKseCT3GfgpMamzl9Gxb7oRUmr9/84CUXg+S9QvJ7llt
3OYeMn3o7qeLL1g6Kj+ZPXdmP5EcFIcMANYR/A1AnBAMWHuKdgUjc7cS6U1PAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUSsFWgtRpGd4BYP7rc1b2AhEqAHEwHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zMTM5MzIyZTMxMzQzNTJlMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAwJEkMA0GCSqGSIb3DQEBCwUAA4IBAQC9W3Vsz1WW80ua2r2U
v9HZAOHVS7tLuVbIaefoXBGw/g+Onoc8/u4Y57cIviosGNnzqlJM3m1e+ZOKHObW
jdR0zXdsunDFtztUZrvcz7vgji8BW8kqwp9y7nntPR+htNaPUwqTWUrchv0tU3EC
F6miUaSf3VjT4zU63qML2nRw3c80kJXtzb+DQoxS1GHdfQSq00ycuE1IzpaUVEvq
/qizWfmG1fB27zHz/kkozpMaADnz9dvF9GMBT866/LfahTf7/qN9QgXwJg884aQg
vfkVFN8pf2B5VkHX6/8zm9swzSiUMEFMLTG2TUFQP3Cbq/NEnhhPhYhIW2GLOg63
PMgv
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net