Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133362e302f32342d3234203d3e203235303938.roa
File: 3139332e34322e3133362e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier: 3ATF3d4rSbVP2wUtOzGN72aVAy6etuw6A0yaH5K6CNM=
Subject key identifier: E0:48:95:10:03:9A:C8:B7:71:F7:3D:D5:11:6F:7B:D9:0D:A6:1C:9D
Certificate issuer: /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial: 61A332B7436B21CA0E6F7A42925A141EA907C8DF
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133362e302f32342d3234203d3e203235303938.roa
Signing time: Wed 09 Dec 2020 13:05:08 +0000
ROA not before: Wed 09 Dec 2020 13:00:08 +0000
ROA not after: Wed 08 Dec 2021 13:05:08 +0000
asID: 25098
IP address blocks: 193.42.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a3:32:b7:43:6b:21:ca:0e:6f:7a:42:92:5a:14:1e:a9:07:c8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Validity
Not Before: Dec 9 13:00:08 2020 GMT
Not After : Dec 8 13:05:08 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:58:e8:2e:7d:77:6b:29:02:0c:12:8e:aa:
1a:65:6b:d7:1c:01:6e:74:3d:18:59:91:d3:37:c5:
ca:cd:28:2d:b8:9f:31:b3:c4:bf:99:fb:2b:fd:4a:
1e:81:17:ab:96:0f:38:cd:f7:39:90:c4:88:49:ef:
c0:ac:63:21:97:3f:4e:3e:3c:7f:4b:40:6d:6a:91:
b5:20:42:e8:af:2a:6c:39:d1:31:0d:1f:eb:37:9c:
02:1e:60:fd:38:af:ec:a2:f7:4b:68:c6:81:ee:d6:
0a:4a:cd:63:88:10:4f:eb:ec:f2:41:32:ba:7f:af:
7a:c2:63:cb:22:24:eb:77:b3:1d:ef:ea:12:51:1d:
f5:3b:e9:0b:a0:13:3e:aa:93:56:11:8c:13:7f:5e:
66:98:0c:3d:65:40:bc:55:f1:46:97:3c:cf:1e:84:
71:4f:c0:5a:82:83:57:f3:f8:8b:b4:e5:d6:2c:49:
c5:35:1d:7a:b8:dc:36:bd:fe:4b:3b:45:a8:e3:56:
7b:6f:c9:be:3c:40:8e:11:aa:50:9f:fd:78:d8:1a:
f3:64:f0:d9:94:86:d0:bb:2f:76:01:4f:6b:8f:ba:
8d:13:d7:08:58:9f:75:bc:36:c9:45:d1:c8:f8:18:
b2:08:50:f2:5a:15:fd:1c:d6:18:7e:cd:07:d9:8e:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:48:95:10:03:9A:C8:B7:71:F7:3D:D5:11:6F:7B:D9:0D:A6:1C:9D
X509v3 Authority Key Identifier:
keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133362e302f32342d3234203d3e203235303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.136.0/24
Signature Algorithm: sha256WithRSAEncryption
17:23:c7:29:15:f8:2e:6d:85:45:7e:4a:bf:d1:98:b6:f4:73:
ee:e7:6f:5e:50:31:dd:c2:4c:2e:ee:ac:a7:b9:2c:5e:9f:12:
0c:97:af:cf:72:a2:f4:ef:6b:1c:50:c2:c8:33:33:b2:30:52:
01:57:47:9c:ef:03:80:f5:46:99:77:b2:43:67:e4:a8:b6:5d:
5c:ab:bc:55:cc:08:cd:a3:bd:b1:54:a6:33:3a:0d:14:b1:2f:
53:6d:be:d1:dd:e8:7e:ad:d2:e0:0c:08:4d:28:ce:a9:7b:d6:
e3:1c:c4:c0:80:73:59:bd:cf:0d:bb:d0:37:38:b2:9e:52:b4:
4e:8c:ec:3e:e6:ec:8f:3e:52:34:d7:7f:3f:1f:a0:80:6d:51:
65:eb:db:0c:01:04:9b:0d:82:3e:f5:6b:1f:e8:ee:c8:84:93:
a1:c0:6f:4e:c6:47:14:de:bb:ca:63:6c:d4:24:f0:15:32:e2:
4e:8b:f2:74:8d:91:38:1c:64:cb:8e:0f:80:23:da:71:df:dc:
3c:60:b4:61:8a:4b:e5:c8:85:0f:cb:ed:49:29:5d:e6:3e:71:
ac:b3:91:1f:19:f4:65:c8:3e:2e:c3:4f:b6:bc:07:cd:e8:0e:
50:b4:45:08:29:34:05:63:e7:ad:4e:65:62:6b:bf:f9:f2:9e:
4e:aa:b5:72
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUYaMyt0NrIcoOb3pCkloUHqkHyN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdhNmU1MjA2YmUzNTAxZGRkMzhkNmYzMWMzMzY4MjAw
YzQzYTQ3MzAeFw0yMDEyMDkxMzAwMDhaFw0yMTEyMDgxMzA1MDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM2RTU4RTgyRTdENzc2QjI5
MDIwQzEyOEVBQTFBNjU2QkQ3MUMwMTZFNzQzRDE4NTk5MUQzMzdDNUNBQ0QyODJE
Qjg5RjMxQjNDNEJGOTlGQjJCRkQ0QTFFODExN0FCOTYwRjM4Q0RGNzM5OTBDNDg4
NDlFRkMwQUM2MzIxOTczRjRFM0UzQzdGNEI0MDZENkE5MUI1MjA0MkU4QUYyQTZD
MzlEMTMxMEQxRkVCMzc5QzAyMUU2MEZEMzhBRkVDQTJGNzRCNjhDNjgxRUVENjBB
NEFDRDYzODgxMDRGRUJFQ0YyNDEzMkJBN0ZBRjdBQzI2M0NCMjIyNEVCNzdCMzFE
RUZFQTEyNTExREY1M0JFOTBCQTAxMzNFQUE5MzU2MTE4QzEzN0Y1RTY2OTgwQzNE
NjU0MEJDNTVGMTQ2OTczQ0NGMUU4NDcxNEZDMDVBODI4MzU3RjNGODhCQjRFNUQ2
MkM0OUM1MzUxRDdBQjhEQzM2QkRGRTRCM0I0NUE4RTM1NjdCNkZDOUJFM0M0MDhF
MTFBQTUwOUZGRDc4RDgxQUYzNjRGMEQ5OTQ4NkQwQkIyRjc2MDE0RjZCOEZCQThE
MTNENzA4NTg5Rjc1QkMzNkM5NDVEMUM4RjgxOEIyMDg1MEYyNUExNUZEMUNENjE4
N0VDRDA3RDk4RTk0QkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs25Y6C59d2spAgwSjqoaZWvXHAFudD0YWZHTN8XKzSgtuJ8xs8S/
mfsr/UoegRerlg84zfc5kMSISe/ArGMhlz9OPjx/S0BtapG1IELorypsOdExDR/r
N5wCHmD9OK/sovdLaMaB7tYKSs1jiBBP6+zyQTK6f696wmPLIiTrd7Md7+oSUR31
O+kLoBM+qpNWEYwTf15mmAw9ZUC8VfFGlzzPHoRxT8BagoNX8/iLtOXWLEnFNR16
uNw2vf5LO0Wo41Z7b8m+PECOEapQn/142BrzZPDZlIbQuy92AU9rj7qNE9cIWJ91
vDbJRdHI+BiyCFDyWhX9HNYYfs0H2Y6UvwIDAQABo4IB9TCCAfEwHQYDVR0OBBYE
FOBIlRADmsi3cfc91RFve9kNphydMB8GA1UdIwQYMBaAFGem5SBr41Ad3TjW8xwz
aCAMQ6RzMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNzgvNjdB
NkU1MjA2QkUzNTAxREREMzhENkYzMUMzMzY4MjAwQzQzQTQ3My5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL1o2YmxJR3ZqVUIzZE9OYnpIRE5vSUF4RHBITS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTc4LzMxMzkzMzJlMzQzMjJl
MzEzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMwMzkzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMEqiDANBgkqhkiG9w0BAQsFAAOCAQEAFyPHKRX4Lm2FRX5Kv9GYtvRz7udv
XlAx3cJMLu6sp7ksXp8SDJevz3Ki9O9rHFDCyDMzsjBSAVdHnO8DgPVGmXeyQ2fk
qLZdXKu8VcwIzaO9sVSmMzoNFLEvU22+0d3ofq3S4AwITSjOqXvW4xzEwIBzWb3P
DbvQNziynlK0TozsPubsjz5SNNd/Px+ggG1RZevbDAEEmw2CPvVrH+juyISTocBv
TsZHFN67ymNs1CTwFTLiTovydI2ROBxky44PgCPacd/cPGC0YYpL5ciFD8vtSSld
5j5xrLORHxn0Zcg+LsNPtrwHzegOULRFCCk0BWPnrU5lYmu/+fKeTqq1cg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net