Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa
File: 3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa (raw, json)
Hash identifier: 8r4RhzATnhFkqmy9fkO070r/YcKfLY5Fdg17saOQWFI=
Subject key identifier: 62:9D:CD:11:21:03:B8:4B:7A:71:60:F0:69:BA:8C:7C:E5:03:BA:15
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 2327A27807612BE414FEA2878C5A224BD11DA34E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa
Signing time: Tue 22 Nov 2022 11:28:14 +0000
ROA not before: Tue 22 Nov 2022 11:23:14 +0000
ROA not after: Tue 21 Nov 2023 11:28:14 +0000
asID: 141995
IP address blocks: 109.123.232.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:27:a2:78:07:61:2b:e4:14:fe:a2:87:8c:5a:22:4b:d1:1d:a3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 22 11:23:14 2022 GMT
Not After : Nov 21 11:28:14 2023 GMT
Subject: CN=629DCD112103B84B7A7160F069BA8C7CE503BA15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:e8:b4:56:7d:a0:e0:bd:08:e3:70:a0:1e:
30:74:fd:7b:81:58:f9:b6:ef:9b:b2:df:6f:ec:67:
d7:e4:06:05:23:e2:4b:41:c9:9e:a8:a0:5e:14:30:
78:21:31:fd:b8:de:e2:90:44:ed:b7:57:c7:ed:2b:
9a:dd:3e:7f:a0:eb:b7:76:96:00:38:ce:8d:e6:66:
6c:2a:cb:2a:f3:87:63:9c:fa:aa:be:d1:42:c0:21:
73:47:80:af:dd:60:06:bd:d8:1c:0f:4e:64:84:57:
10:15:3d:7b:85:5e:d4:8c:03:42:90:8c:c2:d5:33:
c5:9e:f0:68:f8:32:91:34:e7:6f:b6:2e:47:09:8b:
ab:92:23:d9:93:ea:e5:fd:6f:91:d0:1f:74:52:b6:
8a:13:f5:4d:fe:46:6b:66:bd:a2:d9:7f:63:31:04:
10:85:6a:0f:a3:44:fc:94:dc:3a:26:6d:bd:fb:2f:
b7:51:d6:f1:2e:20:b4:cf:8a:10:69:21:f6:5c:60:
98:83:b9:0a:a6:93:6d:f8:48:3e:ff:18:57:8a:2b:
9d:ed:28:40:61:f6:75:24:99:ce:60:5f:f4:fd:3b:
f9:b0:21:c8:4d:19:af:99:f5:00:58:d4:69:9c:2f:
2f:05:52:18:56:eb:06:58:b9:ac:f4:08:ce:5e:ab:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9D:CD:11:21:03:B8:4B:7A:71:60:F0:69:BA:8C:7C:E5:03:BA:15
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.123.232.0/21
Signature Algorithm: sha256WithRSAEncryption
05:31:30:27:71:ca:be:bf:7f:5f:ca:bc:8c:29:a6:48:ee:af:
60:0a:ab:86:8e:81:83:8a:17:b6:ef:df:b3:41:c2:76:22:28:
0b:64:48:d9:7a:2c:30:ee:a6:df:41:84:45:d6:2e:f3:92:27:
60:c8:3a:62:75:20:2a:c8:56:80:7e:06:20:b7:50:76:78:ce:
69:77:fc:22:a9:fa:03:6f:1d:44:e4:c2:f2:e6:11:01:28:e2:
bc:b6:21:7f:cc:12:d6:8f:a7:96:77:ee:15:60:ac:eb:1f:2c:
71:88:ac:30:a5:4e:f7:ba:f6:43:ac:ce:9a:c4:69:55:89:50:
bb:98:a9:53:df:7b:26:06:6b:b1:f1:5a:40:55:03:d5:83:03:
5e:5a:57:ad:78:2b:eb:17:84:8a:d7:0c:90:da:12:8a:20:35:
0c:bc:b1:fc:60:6f:ab:41:89:b4:b3:b9:9e:ad:50:b7:e0:da:
76:42:7e:f9:aa:66:b4:c5:7f:1f:48:10:0d:a4:63:00:26:dc:
68:88:c9:a7:02:0f:50:9c:86:a8:cc:65:9e:d7:48:8d:47:cb:
96:91:47:94:85:3d:7e:d4:cf:70:34:bb:11:1e:44:cf:94:de:
ca:2e:00:ef:2d:14:21:79:c7:45:c2:4b:2b:84:a0:8c:87:1b:
48:af:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net