Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3232352e302f32342d3234203d3e20313336373837.roa
File: 3130392e3132332e3232352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: PDi+s/AfQOc+sj+dsEXanpX1MkSm0wUiVlruRq+bCe0=
Subject key identifier: 1B:B8:30:98:47:60:13:01:12:B5:89:98:A0:E3:72:42:96:18:42:34
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0BDB4F45C14E772A93CEB5301E73FF133CCD9497
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3232352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Jan 2023 12:33:53 +0000
ROA not before: Fri 20 Jan 2023 12:28:53 +0000
ROA not after: Fri 19 Jan 2024 12:33:53 +0000
asID: 136787
IP address blocks: 109.123.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:db:4f:45:c1:4e:77:2a:93:ce:b5:30:1e:73:ff:13:3c:cd:94:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Jan 20 12:28:53 2023 GMT
Not After : Jan 19 12:33:53 2024 GMT
Subject: CN=1BB830984760130112B58998A0E3724296184234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:3e:1e:08:34:a8:5b:33:43:e0:8e:a6:fc:
ce:15:af:ac:b4:84:9a:1e:51:72:4c:9e:72:9a:96:
6c:3a:b5:00:7e:47:34:cf:4a:a8:3d:30:7a:87:b6:
d6:94:50:d4:c1:42:1f:d1:41:7e:46:f9:72:19:a4:
89:2a:e6:15:5e:c3:ca:3f:5b:4d:7b:e1:f1:8f:ff:
73:ac:9d:e3:76:3c:e3:cb:70:dc:bd:eb:e7:7c:07:
4a:8c:ef:a5:e7:d1:48:21:72:1b:ca:2d:0d:1c:7d:
9f:aa:d9:3f:ee:fe:98:8d:9b:b0:b6:b5:14:a2:c9:
09:e3:85:4c:b8:88:66:19:38:f4:f5:81:85:d5:a6:
a3:d9:66:d4:fe:7e:27:ed:15:c4:ee:a1:8f:77:54:
f4:8a:0e:05:18:de:08:91:c8:36:90:1c:b3:a3:ab:
72:9f:fd:b6:47:5d:fe:39:85:2d:14:40:01:e8:f4:
9f:2b:66:80:e1:a9:4d:62:30:9c:f3:04:d9:76:7f:
91:a5:11:9f:d2:c2:17:5c:ee:59:2a:8c:93:58:0b:
f9:89:40:cd:17:97:2d:4e:61:53:94:f4:6c:e8:f9:
00:d9:46:d8:72:f2:a1:f3:6c:64:3b:6f:6b:fc:9f:
38:b5:a6:53:2c:73:80:68:a7:5f:15:83:41:5c:fe:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:30:98:47:60:13:01:12:B5:89:98:A0:E3:72:42:96:18:42:34
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3232352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.123.225.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:c4:16:e3:5f:ea:eb:e8:30:ad:47:46:bf:2e:27:67:c4:4f:
ac:ae:b6:fa:2a:e6:47:31:99:58:82:86:02:22:4e:51:32:97:
4a:a3:14:cd:2c:c7:95:4d:aa:dd:b0:b6:d2:31:d2:fb:8c:ab:
34:26:d7:3b:31:3d:85:99:17:99:10:6e:84:c3:13:80:e5:53:
b3:2b:f6:b7:83:71:1f:d0:37:67:24:f8:0c:0e:85:8f:a2:1a:
4d:d1:b7:aa:37:1e:9d:67:2d:7b:03:51:35:a4:57:11:61:30:
8b:8d:10:e7:b4:16:57:44:2d:c2:26:73:32:3c:e6:dd:9f:d1:
23:04:b0:4a:eb:bf:99:cc:ad:e0:9f:fd:24:58:19:18:81:45:
8f:00:7d:d4:7e:cf:d0:e8:0d:27:ee:cf:89:73:50:57:48:b6:
ca:05:7c:13:47:eb:ba:52:bd:bb:77:37:59:73:6d:65:63:a0:
85:63:1e:4c:2c:9f:ef:e6:35:fd:b0:f4:24:53:9b:5e:5b:c3:
22:99:be:87:7d:c5:02:f9:d3:7f:55:40:73:02:8a:84:63:de:
ae:4c:ef:de:41:87:05:7c:5b:cc:17:fc:dc:99:3d:1e:a6:33:
8f:82:42:63:4f:c4:89:cf:25:b3:ff:e1:54:3c:ef:37:97:51:
b1:2d:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net