Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa
File: 3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa (raw, json)
Hash identifier: kQbis1qUzqB3ORlIanCXNGTQPZ5pHAkoGVRV89itt2k=
Subject key identifier: 24:68:9C:84:6E:28:49:B6:14:6F:21:D4:1B:3C:3F:AE:32:C0:DB:AF
Certificate issuer: /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial: 2A300EBE5AA07963D0CDBF3564FCDBB4C8D93EF2
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa
Signing time: Tue 31 Jan 2023 16:07:00 +0000
ROA not before: Tue 31 Jan 2023 16:02:00 +0000
ROA not after: Tue 30 Jan 2024 16:07:00 +0000
asID: 207594
IP address blocks: 185.241.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:30:0e:be:5a:a0:79:63:d0:cd:bf:35:64:fc:db:b4:c8:d9:3e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
Validity
Not Before: Jan 31 16:02:00 2023 GMT
Not After : Jan 30 16:07:00 2024 GMT
Subject: CN=24689C846E2849B6146F21D41B3C3FAE32C0DBAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:ec:a5:da:6a:e8:9c:8d:fd:d5:58:cf:94:
7f:e3:86:9b:1a:c8:3c:96:c6:c3:2e:d0:9f:b1:2b:
a7:02:0b:0f:e1:b8:3b:4e:33:3c:e8:74:da:e1:bf:
20:b4:5a:1f:49:e7:9e:10:f4:9f:fa:b2:c6:65:cf:
7d:f5:ee:e2:bd:ba:86:97:b7:67:64:44:e8:64:b8:
41:24:b9:87:1a:d9:54:f1:7c:98:c3:fb:f7:7e:15:
e0:de:44:02:d6:2f:24:e2:b5:e0:ec:1a:09:06:53:
30:9a:78:41:43:b9:47:af:16:32:89:21:c5:c5:e9:
94:80:ae:dc:3b:ba:d4:4f:47:3a:f3:b6:a7:8b:fd:
35:5b:5d:93:81:40:64:fc:64:ad:99:21:37:96:d2:
b6:69:d4:e4:3e:3d:f1:8d:19:ce:64:46:b1:7b:3d:
4d:5a:d7:0a:05:4f:2c:8e:40:e8:e2:7b:06:44:4d:
89:3b:44:0a:88:94:13:81:2c:89:0d:38:69:44:c2:
01:9c:c7:4b:b9:71:51:5f:67:ee:bf:26:b7:d9:a1:
a0:78:a7:6f:c4:3d:a2:f1:5b:3e:34:2e:a6:bb:c1:
f9:6e:11:34:1a:af:6f:15:9d:60:3e:ab:95:e9:99:
7b:ce:da:6f:6d:44:85:e2:ce:5d:0b:e0:3a:3f:d6:
57:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:68:9C:84:6E:28:49:B6:14:6F:21:D4:1B:3C:3F:AE:32:C0:DB:AF
X509v3 Authority Key Identifier:
keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.238.0/23
Signature Algorithm: sha256WithRSAEncryption
af:2c:ff:62:5a:d5:68:cd:17:db:56:ac:16:28:0e:21:a6:51:
35:1b:f7:e7:e9:68:b5:47:c9:3e:f4:0c:4d:62:86:95:64:0d:
a0:52:a0:95:c1:7b:83:5c:c2:57:ac:35:6c:94:9b:27:fa:18:
60:73:fe:de:e5:ca:ed:26:5d:53:e7:c5:6c:53:98:ae:a4:ee:
24:36:4f:36:c1:a9:0a:1b:50:dd:7f:ce:83:06:3f:54:f9:32:
dc:79:8f:69:fa:eb:0d:6e:6f:7c:05:41:e0:bb:7f:0d:dc:9f:
65:2a:70:59:ad:49:6c:50:a4:a0:ea:d6:ea:0f:8a:ad:b6:45:
87:b5:b1:15:e7:9e:f7:a5:b1:c0:54:91:ae:50:29:27:da:f0:
fa:af:33:fd:77:5c:31:cd:28:86:87:99:47:e7:80:48:08:34:
54:7b:c6:d2:48:db:e6:67:ec:12:cc:6a:16:7e:7e:c2:85:e3:
b8:ca:1f:88:04:5b:7b:22:d9:f3:41:cb:39:fc:48:4c:15:91:
c5:ec:3e:f7:fa:5c:bb:26:11:5b:0b:89:42:dc:cc:b7:7d:7b:
a1:9c:ca:63:12:aa:e4:0e:f2:a9:f0:67:0c:45:ff:de:a4:6a:
fa:6f:58:f9:ae:4d:9a:b4:59:ed:5a:02:f0:b5:11:ea:4f:7c:
f7:e9:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net