Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3134382e302f32332d3234203d3e203631333137.roa
File: 352e3138302e3134382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: nBzPkNCVT0HrY5vy9HoWymhV0Gtfx5neu3cpGrJG18Y=
Subject key identifier: E1:FF:20:82:BF:5C:56:A0:5F:D5:C7:F3:BB:18:44:E6:86:03:C5:C6
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 68D54D5E72F7D9F7A52C1799F3B689B547DBB6B4
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3134382e302f32332d3234203d3e203631333137.roa
Signing time: Sat 22 Oct 2022 04:33:36 +0000
ROA not before: Sat 22 Oct 2022 04:28:36 +0000
ROA not after: Sat 21 Oct 2023 04:33:36 +0000
asID: 61317
IP address blocks: 5.180.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d5:4d:5e:72:f7:d9:f7:a5:2c:17:99:f3:b6:89:b5:47:db:b6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:36 2022 GMT
Not After : Oct 21 04:33:36 2023 GMT
Subject: CN=E1FF2082BF5C56A05FD5C7F3BB1844E68603C5C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:34:a8:69:39:bb:2f:76:3e:f0:8e:7e:53:
40:ad:c4:23:22:e1:ca:ce:d5:e2:cd:41:5d:e8:7c:
64:55:9d:f7:fe:1e:e7:40:07:c4:fc:84:13:58:83:
47:ef:94:94:db:59:49:6d:d4:7f:31:a5:63:10:c6:
80:cf:b1:f3:e4:61:a3:8d:17:28:57:4d:8d:37:33:
0b:d1:8a:6e:c4:83:a3:e8:d3:7f:84:c3:1c:d5:cd:
85:92:02:3b:e3:10:a4:d9:a5:29:5d:8e:08:bb:45:
9e:0f:5d:5d:a5:3f:dd:5a:00:a4:d4:b4:4e:7d:6e:
ec:6f:50:1c:3c:f1:99:45:e3:08:56:06:14:fe:e4:
78:7e:49:6f:2f:c2:89:83:d3:18:5f:26:10:ba:3f:
0c:10:04:13:21:b3:3a:8c:00:6e:2c:d4:8a:ef:a2:
8e:6c:a8:c6:2d:b4:e0:2a:64:36:55:bf:54:90:d9:
0b:64:fe:0c:d5:b4:58:47:63:99:8d:b0:de:58:bb:
d2:85:6c:d6:d1:95:d8:30:bc:50:d9:74:f5:14:e1:
5f:c5:24:25:f7:94:7e:84:c4:1d:83:cb:85:e2:22:
a2:fa:3b:6a:0c:3f:24:a1:c0:50:ef:35:f1:c0:46:
f6:62:f1:11:6a:94:da:b9:dd:4c:d5:9e:43:aa:db:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FF:20:82:BF:5C:56:A0:5F:D5:C7:F3:BB:18:44:E6:86:03:C5:C6
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3134382e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.148.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:01:3f:8e:ff:d9:3e:63:d7:53:bf:11:7c:c2:c6:16:78:f0:
e1:80:36:d9:08:30:b6:5c:65:92:d9:6c:51:20:17:38:4d:00:
be:b8:6e:85:84:93:6b:6d:ea:b3:29:e9:96:42:ef:81:d2:9d:
39:53:62:c7:d5:b5:1c:a4:98:1f:48:7c:e9:a7:de:31:19:b7:
02:8e:33:49:ca:67:19:89:c9:78:f9:f5:bf:89:e2:40:d8:d6:
45:3d:35:f7:39:e6:1e:50:86:7a:50:4c:2a:41:46:2e:68:57:
b8:7c:4e:d0:84:3a:84:b9:0e:80:60:48:30:4f:5d:5f:9f:db:
70:fa:b2:ad:7f:fb:09:23:9f:f1:0e:47:86:90:ce:ea:06:57:
72:21:a3:d5:22:39:12:32:ae:98:c2:ec:4a:8d:d6:36:bb:8c:
2f:6f:76:be:2a:ba:75:6f:af:61:d2:e3:51:13:e9:d6:9e:7b:
3c:6f:0c:8b:dc:a2:66:9c:f9:6b:c3:52:1a:11:d0:0a:a7:32:
c0:4d:8c:7b:6b:c3:51:49:2c:ab:dc:f3:f3:43:7a:b0:47:b7:
8c:c4:2e:51:7d:e9:78:3f:95:0d:c5:6c:ca:2c:da:aa:9c:b1:
20:fb:b6:75:12:55:10:a2:9b:af:55:b7:a5:00:15:98:a7:b1:
1a:59:74:a3
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUaNVNXnL32felLBeZ87aJtUfbtrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MzZaFw0yMzEwMjEwNDMzMzZaMDMxMTAvBgNV
BAMTKEUxRkYyMDgyQkY1QzU2QTA1RkQ1QzdGM0JCMTg0NEU2ODYwM0M1QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOTSoaTm7L3Y+8I5+U0CtxCMi
4crO1eLNQV3ofGRVnff+HudAB8T8hBNYg0fvlJTbWUlt1H8xpWMQxoDPsfPkYaON
FyhXTY03MwvRim7Eg6Po03+EwxzVzYWSAjvjEKTZpSldjgi7RZ4PXV2lP91aAKTU
tE59buxvUBw88ZlF4whWBhT+5Hh+SW8vwomD0xhfJhC6PwwQBBMhszqMAG4s1Irv
oo5sqMYttOAqZDZVv1SQ2Qtk/gzVtFhHY5mNsN5Yu9KFbNbRldgwvFDZdPUU4V/F
JCX3lH6ExB2Dy4XiIqL6O2oMPyShwFDvNfHARvZi8RFqlNq53UzVnkOq2/uFAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQU4f8ggr9cVqBf1cfzuxhE5oYDxcYwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNTJlMzEzODMwMmUzMTM0MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMx
MzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBBbSUMA0GCSqGSIb3DQEBCwUAA4IBAQC/AT+O/9k+
Y9dTvxF8wsYWePDhgDbZCDC2XGWS2WxRIBc4TQC+uG6FhJNrbeqzKemWQu+B0p05
U2LH1bUcpJgfSHzpp94xGbcCjjNJymcZicl4+fW/ieJA2NZFPTX3OeYeUIZ6UEwq
QUYuaFe4fE7QhDqEuQ6AYEgwT11fn9tw+rKtf/sJI5/xDkeGkM7qBldyIaPVIjkS
Mq6YwuxKjdY2u4wvb3a+Krp1b69h0uNRE+nWnns8bwyL3KJmnPlrw1IaEdAKpzLA
TYx7a8NRSSyr3PPzQ3qwR7eMxC5Rfel4P5UNxWzKLNqqnLEg+7Z1ElUQopuvVbel
ABWYp7EaWXSj
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net