Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139342e35332e3130382e302f32322d3234203d3e2030.roa
File: 3139342e35332e3130382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: 3oRv9DgnBu7gp/CLEoeZraIuai5Y/06NTBQ9siMRyS4=
Subject key identifier: C9:97:EE:8E:A2:78:46:5A:78:67:2C:E0:3D:FC:BA:64:24:73:63:3F
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 2ED1080905F37166A1A956E33B67D6FAFCE3ED31
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e35332e3130382e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:07:03 +0000
ROA not before: Fri 03 Mar 2023 16:02:03 +0000
ROA not after: Fri 01 Mar 2024 16:07:03 +0000
asID: 0
IP address blocks: 194.53.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d1:08:09:05:f3:71:66:a1:a9:56:e3:3b:67:d6:fa:fc:e3:ed:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Mar 3 16:02:03 2023 GMT
Not After : Mar 1 16:07:03 2024 GMT
Subject: CN=C997EE8EA278465A78672CE03DFCBA642473633F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:92:30:49:7d:eb:3d:51:0a:e5:22:b3:d5:
61:d0:63:3a:42:ba:af:59:bb:4b:57:a1:81:23:be:
b1:f0:43:23:98:e7:e3:a3:f2:e4:71:30:08:43:ae:
2e:78:47:04:18:94:fb:eb:2e:8d:86:0b:f0:d9:8f:
68:8a:c1:49:84:a7:d2:3c:4a:be:a6:3b:5b:13:5e:
f5:f4:86:8d:4b:b3:a7:4b:43:d8:46:9d:f8:2a:e0:
29:64:5b:f6:44:4c:90:28:32:98:8c:13:e7:6c:aa:
b9:56:08:59:f8:44:35:8c:66:03:a8:bb:9b:0c:07:
fe:fe:97:f4:30:78:50:c7:8f:28:39:dd:fc:14:a4:
c1:64:30:8e:38:75:92:b8:5e:09:ac:60:c7:f0:51:
9b:1b:c2:ac:95:53:ae:1d:3c:24:f4:f0:f9:07:c6:
c4:78:4f:d9:f1:f8:ca:d2:a0:c8:c6:09:27:7c:96:
7c:fb:b9:97:21:22:99:ea:d2:79:89:ea:e7:7c:bd:
72:54:30:f9:de:d7:21:f5:e4:90:27:3b:15:18:00:
98:b2:09:b9:7d:8b:b4:bc:6c:c9:a7:e0:52:54:ce:
a9:35:96:cf:3f:89:2a:8b:85:6d:8c:ef:4e:d8:00:
d6:3b:cc:f5:ec:4a:a8:f8:29:ba:fe:db:06:a5:b2:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:EE:8E:A2:78:46:5A:78:67:2C:E0:3D:FC:BA:64:24:73:63:3F
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e35332e3130382e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:5d:50:ba:d0:3a:33:b2:b6:50:f4:16:18:90:31:fd:c6:f3:
cf:0d:fe:bd:70:8c:96:5e:09:90:a6:99:d6:a3:aa:df:50:de:
e1:42:02:64:8b:6a:51:4a:b5:fc:ce:7c:86:16:e2:6e:91:0f:
7f:6c:73:68:de:22:02:5d:46:4f:49:f0:92:4a:c2:f9:36:35:
b6:04:f7:a2:11:67:83:1b:d5:41:fa:20:5a:f5:f4:77:6b:2f:
57:e5:6f:a7:c2:50:9c:cf:03:c0:ab:a1:79:25:f4:be:02:dc:
ac:3b:91:58:4b:a3:30:83:40:0e:ce:51:98:d8:95:2f:98:b8:
f8:20:b5:22:25:80:3f:b7:0d:e9:ab:53:f3:75:b7:f8:5f:aa:
a9:be:8d:40:28:64:6b:9b:25:84:67:92:41:f9:b8:2e:5e:63:
34:2f:4b:9b:90:e1:6a:78:64:3b:4a:a1:bb:fc:5c:d8:6b:17:
92:38:c0:4a:34:6c:3a:3f:da:49:31:10:ed:a7:16:a3:d1:e7:
b2:ae:12:42:a0:20:65:56:85:e8:cf:2f:4d:e1:3d:58:f3:5e:
de:69:68:d8:3d:c2:b8:c1:f8:90:10:2f:9b:0d:4a:8e:bb:93:
16:9f:9a:b8:b4:61:0c:cf:12:0e:db:99:50:c7:c4:32:fe:5d:
ee:42:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net