Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235352e3132382e302f32332d3234203d3e2030.roa
File: 3138352e3235352e3132382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: pfy0psVe6u4OTJLX3WXUI4RFMIMMY7F6iuajqvzO6i4=
Subject key identifier: D3:EC:09:40:9B:74:DC:59:15:38:9D:31:6C:FE:66:76:5C:98:4E:80
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 5BA3B34641B44238C83ABCAA026D5873EB6248DE
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235352e3132382e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:44:46 +0000
ROA not before: Fri 03 Mar 2023 15:39:46 +0000
ROA not after: Fri 01 Mar 2024 15:44:46 +0000
asID: 0
IP address blocks: 185.255.128.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a3:b3:46:41:b4:42:38:c8:3a:bc:aa:02:6d:58:73:eb:62:48:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:39:46 2023 GMT
Not After : Mar 1 15:44:46 2024 GMT
Subject: CN=D3EC09409B74DC5915389D316CFE66765C984E80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:8e:18:47:33:89:f2:78:63:9f:60:03:d6:
67:f7:50:37:bb:f2:6c:b0:85:1e:90:a1:c5:6b:0a:
be:25:aa:4e:2f:39:07:e9:36:00:51:18:fb:0f:66:
a3:5d:ec:50:91:5d:d3:be:0c:db:45:fb:90:d9:6d:
94:6d:3e:9f:b2:d0:17:d3:46:44:b4:4d:b0:37:23:
3c:f7:a0:c4:6e:ea:1c:f9:52:5a:6c:dc:eb:dd:73:
23:a5:1c:44:35:36:68:de:f6:7d:7f:ea:d6:2c:49:
66:e9:05:b7:a0:7a:77:54:57:48:93:a7:9b:79:8d:
ca:82:03:75:2e:cc:70:de:11:e0:3e:51:a0:b9:54:
00:33:22:5d:7c:84:cb:8a:60:0c:39:e0:36:e1:da:
51:7e:e3:75:21:e8:2c:bb:ff:f8:51:40:18:5c:88:
18:2a:08:18:a0:c9:c0:da:03:d5:82:d3:3c:7c:f9:
e9:9a:2d:77:4c:fa:72:33:ce:e8:d6:42:8a:f8:6d:
fc:23:37:07:1d:56:4b:59:cd:a5:2e:2e:54:d8:98:
43:f6:f4:5b:cb:f3:ac:2c:e9:8a:6a:15:a4:3a:45:
62:b6:ec:4f:ff:e1:b1:ee:ee:20:ad:36:5a:ce:09:
07:bc:c9:d6:ed:a9:63:c0:56:ab:5f:e1:38:8b:76:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EC:09:40:9B:74:DC:59:15:38:9D:31:6C:FE:66:76:5C:98:4E:80
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235352e3132382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.128.0/23
Signature Algorithm: sha256WithRSAEncryption
58:0f:b7:0c:d1:48:0c:d6:85:be:8a:fe:8f:c6:e6:68:07:2e:
eb:89:3f:a9:03:95:a8:5d:7e:c1:99:6a:b7:33:b7:88:c6:e5:
f6:c6:5a:5f:03:bf:fb:8b:d0:07:8e:40:88:e5:e1:6e:6e:c1:
77:4b:22:9c:ad:c8:0f:5e:36:7e:42:dc:5a:95:4d:ec:40:13:
ad:1c:ad:75:df:d2:43:33:fe:05:2e:65:61:a0:d5:2a:6e:5b:
89:2e:25:00:4a:b8:8f:1f:67:1a:af:bf:38:b1:9a:44:22:ca:
34:44:c5:7f:a7:1e:2c:22:47:95:2e:80:b1:6b:bd:4c:5b:e2:
48:24:96:0a:9b:30:10:3d:f6:80:c5:73:9d:e8:56:44:a5:4b:
aa:59:b6:96:78:f6:2b:b5:73:01:67:ea:d6:b2:cf:82:f4:e0:
6a:8c:2e:b1:80:6e:4b:d2:5e:60:6e:25:72:67:e6:11:ca:ad:
76:d3:62:61:1e:2a:dc:53:92:aa:c7:d1:87:0a:2f:fc:2f:f7:
bb:09:b5:7b:69:47:42:c4:2d:6c:cc:43:67:43:02:63:bb:a8:
67:a2:a0:00:ac:84:f0:be:4b:08:89:85:23:ae:19:f0:0a:43:
61:26:50:6e:13:73:b7:2d:07:dd:51:78:bb:62:96:aa:97:e5:
1f:f9:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net