Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/164/3139352e3230302e3232312e302f32342d3332203d3e20313336373837.roa
File: 3139352e3230302e3232312e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: c3Wj6oyxR4Chnm9oSpLHYFpv+Q2/8mRCvXA9xEQEsK4=
Subject key identifier: 68:AA:7C:9D:71:42:4A:D6:AF:22:42:E1:EC:D8:DB:91:FC:1B:1E:FA
Certificate issuer: /CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Certificate serial: 5E26B9DC6D8B4CF325B7ECA25EFC836C5C43F749
Authority key identifier: 7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/164/3139352e3230302e3232312e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 28 Dec 2022 09:36:44 +0000
ROA not before: Wed 28 Dec 2022 09:31:44 +0000
ROA not after: Wed 27 Dec 2023 09:36:44 +0000
asID: 136787
IP address blocks: 195.200.221.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:26:b9:dc:6d:8b:4c:f3:25:b7:ec:a2:5e:fc:83:6c:5c:43:f7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Validity
Not Before: Dec 28 09:31:44 2022 GMT
Not After : Dec 27 09:36:44 2023 GMT
Subject: CN=68AA7C9D71424AD6AF2242E1ECD8DB91FC1B1EFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:47:49:8a:15:bb:2b:64:00:c8:af:a9:3e:
bf:b8:11:17:36:82:07:f6:1b:48:8c:50:aa:51:09:
92:c2:8a:38:06:f5:68:ec:26:b6:11:18:f6:73:57:
cd:23:c4:d0:16:f5:3f:27:67:f1:82:48:17:dc:e7:
bc:0e:2b:33:1e:eb:70:d5:21:da:46:78:e6:ad:b4:
50:eb:cf:4a:fe:c9:cc:23:9d:62:7a:9f:d7:68:cf:
c8:c5:bf:be:b1:c4:5b:47:79:68:77:fa:f1:d6:33:
89:78:b3:2e:65:54:ce:80:04:0d:b7:d4:09:a7:75:
ba:0b:8d:88:fe:e4:f5:c5:5f:84:12:89:4e:11:88:
bd:e2:95:59:42:a4:5f:c8:9d:eb:f4:8a:74:84:1f:
dd:5f:e9:46:3a:bd:7a:48:59:52:b1:7f:bc:8d:00:
b0:2c:69:5b:de:ca:f7:70:8d:bd:1e:09:83:02:5d:
aa:63:5b:61:eb:5a:a0:c6:39:83:f5:02:dd:27:82:
cc:38:6b:0a:e6:1f:80:1c:d0:00:29:f9:fc:fd:65:
ab:b5:e4:40:fc:c1:1b:c3:12:8c:6f:b5:fd:e6:1e:
63:f4:a6:48:f5:18:9e:e6:26:ad:f3:54:e9:6f:3e:
0f:93:e0:a9:db:fe:ae:19:13:1d:86:d3:d8:16:66:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AA:7C:9D:71:42:4A:D6:AF:22:42:E1:EC:D8:DB:91:FC:1B:1E:FA
X509v3 Authority Key Identifier:
keyid:7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/7EBD1421D6EE46B714647FB7D198AE4601B63729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/3139352e3230302e3232312e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.221.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2d:54:b9:39:83:3b:ff:48:e7:77:c2:e3:19:fc:4a:c3:71:
a6:2b:34:ab:ec:59:ee:9a:70:bb:f3:d2:19:c1:a4:89:20:4f:
63:d7:da:a1:c4:46:f4:41:b5:13:d1:4b:33:66:9e:39:6d:50:
8f:be:c8:75:47:c5:73:9f:a9:4f:80:bf:17:27:c8:0e:1e:be:
f6:b0:9c:3f:c4:f5:dc:7d:b5:2d:61:37:2d:a0:17:f8:96:2e:
56:64:5f:75:b8:24:dd:ab:f2:05:c3:e2:35:9b:6f:3a:84:b8:
25:a8:6c:2b:8a:22:f1:a5:94:6b:1b:ad:13:ac:a4:fe:5b:5c:
49:d1:be:6e:d2:ec:59:f6:94:f9:82:39:79:4a:0d:96:d9:48:
0d:db:b6:26:97:bd:79:80:ff:3b:4d:3d:0c:4e:5f:67:b4:79:
c3:17:28:ba:92:fd:72:b7:a1:ad:4f:b9:cf:07:30:54:67:35:
49:e4:fd:be:57:6e:fb:fd:e8:7e:dd:eb:46:00:ef:fd:13:2f:
d5:52:be:db:5c:aa:be:3e:30:f8:37:c8:0f:40:b1:3d:95:f4:
96:57:2b:47:7d:ad:4a:8b:b0:a0:3a:bf:03:c2:29:fc:65:e1:
e1:28:80:ee:3b:0b:ad:cd:ac:31:ca:68:7b:b4:02:59:59:50:
9d:4d:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net