Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232332e3235342e302f32332d3234203d3e2030.roa
File: 3138352e3232332e3235342e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: Z3YS2gulQrEgi9MORBaFoKrIhqcdq6KSJtiQbBpK7eo=
Subject key identifier: 13:4F:34:47:D0:E5:D6:45:64:64:E6:EC:56:25:1F:94:74:47:66:B6
Certificate issuer: /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial: 15B5667CBE521BA8765B5800C1AA5937BB76EF95
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232332e3235342e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:37:23 +0000
ROA not before: Fri 03 Mar 2023 15:32:23 +0000
ROA not after: Fri 01 Mar 2024 15:37:23 +0000
asID: 0
IP address blocks: 185.223.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b5:66:7c:be:52:1b:a8:76:5b:58:00:c1:aa:59:37:bb:76:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
Validity
Not Before: Mar 3 15:32:23 2023 GMT
Not After : Mar 1 15:37:23 2024 GMT
Subject: CN=134F3447D0E5D6456464E6EC56251F94744766B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:de:88:f9:41:8e:bd:d2:b4:4c:67:27:30:
17:a7:82:e9:5b:a0:eb:a7:86:fa:6f:0a:c9:72:12:
79:ae:60:ec:f5:da:dd:a0:ec:4c:a1:9b:17:d1:88:
60:79:21:d9:a5:d0:cd:c7:58:09:12:93:d2:10:a6:
72:fb:fd:e7:9e:e1:68:f3:35:38:eb:98:47:07:a9:
72:6f:7a:cf:96:59:48:52:93:65:fd:b3:0f:16:55:
e4:e3:4d:73:c8:f8:cc:01:eb:42:ff:5a:2c:96:97:
99:b0:cc:33:6e:e8:c1:88:2a:2f:20:6b:dc:6e:f6:
85:c0:57:90:24:94:4c:fc:7c:c7:65:1e:79:e0:1c:
3a:07:57:b3:58:da:ce:1c:3e:8f:8e:3c:58:23:e4:
8f:d8:b2:1a:f1:45:ee:db:f7:3a:d1:95:0f:7b:d6:
5e:86:c4:46:75:b3:d7:93:93:e3:5f:07:e0:20:43:
40:17:2d:ad:41:2c:e2:6d:9f:f1:0e:3f:90:b5:87:
7f:59:74:db:af:81:78:e7:2d:12:e1:27:47:1b:3a:
82:e1:23:ac:db:46:3e:3c:a4:2b:54:fa:1d:f8:b6:
f6:23:df:af:9c:d6:cd:c5:52:f2:f9:cc:1e:0a:db:
96:eb:f1:35:1d:e1:1f:31:aa:1d:e9:0c:e9:99:38:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4F:34:47:D0:E5:D6:45:64:64:E6:EC:56:25:1F:94:74:47:66:B6
X509v3 Authority Key Identifier:
keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232332e3235342e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.254.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:aa:4a:c3:29:e9:ff:c4:0f:93:dc:fc:59:b1:fd:e5:9a:c5:
07:a5:7e:3c:92:33:a1:2c:0b:9d:23:6d:6f:68:64:7e:fc:d6:
30:61:a2:29:84:11:e3:56:be:90:07:c8:78:30:d6:b9:21:05:
2f:ca:40:87:74:65:18:db:be:6b:38:9d:3c:19:a3:f5:77:87:
15:33:b2:33:ce:d4:9c:2e:62:d0:f0:51:27:c5:ca:5c:0e:c4:
a2:24:f3:6d:6c:22:0e:25:8a:3b:50:34:c0:c7:71:67:77:32:
f3:0e:dc:a9:27:ef:4b:fb:5b:1f:f9:09:1a:e3:66:43:1f:a5:
fb:7b:32:be:14:ad:ad:b1:8f:4b:3c:a3:b1:ac:c3:32:c2:ac:
c2:8d:ea:50:04:0a:c4:82:b8:fc:ab:96:ec:9b:c6:a6:c3:a2:
4a:38:0a:0f:7f:d2:0b:5f:a2:92:12:ce:43:25:22:71:dd:58:
b1:39:16:63:e1:2f:98:93:e0:a2:e4:8c:7c:76:8c:b7:1f:f4:
7f:a7:7e:c3:47:6d:39:9f:46:24:b8:a5:61:85:8a:40:fd:db:
8b:5b:c3:33:07:30:73:f6:da:d3:5c:98:81:68:81:ad:29:15:
87:4f:5e:3b:34:10:c2:d6:27:b6:22:d0:a2:9b:1f:d5:52:56:
09:27:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net