Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39352e3231342e3231362e302f32332d3234203d3e2030.roa
File: 39352e3231342e3231362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: WS0zvw0mkMmpmBqn64aBwkPXwcVJszQOnUJ/lUO8rWI=
Subject key identifier: 94:D0:86:62:B3:F8:90:95:11:27:67:21:DD:68:45:16:17:32:B9:70
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 37D4B309B681D4D0A5B740F446B1AF01FEE36D1D
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/39352e3231342e3231362e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:14:02 +0000
ROA not before: Fri 03 Mar 2023 16:09:02 +0000
ROA not after: Fri 01 Mar 2024 16:14:02 +0000
asID: 0
IP address blocks: 95.214.216.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d4:b3:09:b6:81:d4:d0:a5:b7:40:f4:46:b1:af:01:fe:e3:6d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Mar 3 16:09:02 2023 GMT
Not After : Mar 1 16:14:02 2024 GMT
Subject: CN=94D08662B3F8909511276721DD6845161732B970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:9a:8a:8b:38:ad:29:2e:af:13:f4:23:2a:
85:8f:36:0b:78:41:2b:21:57:e6:cc:9c:6d:5b:a6:
c5:bf:b3:2b:95:0d:d9:7a:3a:3a:06:f4:ce:e4:2c:
2e:3f:12:eb:db:18:0c:66:a9:a4:74:33:dc:25:06:
0d:c4:b1:ad:97:b4:db:7b:da:04:10:53:2f:86:3c:
2d:03:38:0f:9a:8e:c8:33:e7:cb:66:65:bf:e0:b0:
62:2a:04:a7:c5:12:3b:ac:72:37:a1:bc:90:ad:94:
02:c7:d5:39:d7:99:d6:ba:57:0f:75:d8:49:27:13:
2b:a4:57:6e:2f:62:c6:4a:6b:aa:3c:49:a5:3f:57:
cf:11:0c:d7:c4:a5:5d:2e:a4:36:68:fc:84:e3:0b:
a9:ab:50:65:f4:68:7d:2d:8f:a5:2b:74:3f:ab:b0:
6a:8f:75:d6:09:cd:6f:c4:7d:f4:27:a7:e1:06:78:
fd:dc:b6:09:7b:b0:dd:ea:6c:2e:77:ba:0f:86:ba:
39:79:2c:f9:00:5b:61:d7:a2:73:f2:98:64:cb:ce:
07:1b:1f:44:d8:fd:56:4d:9b:dd:7e:48:71:68:f2:
a9:14:cb:94:ea:c6:82:54:39:fa:14:58:ba:56:20:
71:be:69:23:b6:5e:f2:4b:6b:84:74:0d:b5:38:4b:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:86:62:B3:F8:90:95:11:27:67:21:DD:68:45:16:17:32:B9:70
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39352e3231342e3231362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.216.0/23
Signature Algorithm: sha256WithRSAEncryption
80:73:60:65:19:37:51:bb:56:83:43:f6:ad:ba:68:da:91:02:
47:81:1a:31:26:ab:dd:1e:cf:a1:cb:4c:9c:a9:3c:bf:3d:88:
9f:44:aa:5f:50:9f:b1:70:54:b6:46:b1:61:80:86:0e:12:1b:
ab:32:bc:00:f3:0b:75:5a:f1:8b:99:3d:35:59:81:66:f9:d7:
b6:6c:13:6d:de:29:8d:68:31:45:81:e2:ca:d5:2d:dd:13:ae:
a0:27:c5:a7:e7:63:e9:f0:88:d6:29:b7:d7:91:d2:93:bc:7b:
f0:69:72:ac:a7:36:7e:c2:f5:6c:95:6e:5d:f6:5b:ed:47:f9:
b4:f4:47:15:aa:df:ff:b8:7a:0b:02:cd:ae:74:47:7f:75:40:
86:bd:1e:dd:70:c1:f5:ba:cd:87:4c:d1:7a:92:22:f4:01:fc:
8e:0c:e4:4e:38:46:4a:5b:c5:09:55:23:68:5e:1e:d1:bc:93:
31:e7:0b:54:f5:9f:92:a1:89:a8:34:99:b7:98:95:03:86:14:
a4:35:cc:88:9d:1d:f4:cd:1c:93:33:26:62:3e:87:e8:2e:91:
83:1a:79:e6:21:9c:24:2f:b3:5f:58:3b:d7:34:3b:2f:71:39:
4f:a9:84:99:06:87:b2:4f:b9:cd:cc:bc:58:09:96:f5:b3:d6:
1b:b9:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net