Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e302e302f32342d3234203d3e203536383736.roa
File: 3135352e3133332e302e302f32342d3234203d3e203536383736.roa (raw, json)
Hash identifier: HRDVdmbz+/wnU0ebmm2EzrvxfakT3HYDpPuj+LK2fbw=
Subject key identifier: 62:34:36:9E:2F:03:72:BC:01:6F:15:14:2A:D7:E3:05:DA:A9:4C:C6
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 012F96F3DD593029A3CD59E221C4E9B4EF6B02BD
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e302e302f32342d3234203d3e203536383736.roa
Signing time: Wed 02 Nov 2022 16:27:37 +0000
ROA not before: Wed 02 Nov 2022 16:22:37 +0000
ROA not after: Wed 01 Nov 2023 16:27:37 +0000
asID: 56876
IP address blocks: 155.133.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:2f:96:f3:dd:59:30:29:a3:cd:59:e2:21:c4:e9:b4:ef:6b:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 2 16:22:37 2022 GMT
Not After : Nov 1 16:27:37 2023 GMT
Subject: CN=6234369E2F0372BC016F15142AD7E305DAA94CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:76:2e:a1:36:7e:b9:aa:de:16:70:9c:ec:
9f:27:99:02:38:82:ea:20:f9:77:52:94:88:52:f9:
a5:ae:0a:bc:fd:6f:95:fa:21:c5:36:b6:0f:30:26:
83:e2:c4:89:0a:b2:59:96:dd:83:09:6e:4e:27:92:
37:5e:c6:54:93:dd:d6:68:2a:86:c2:1f:ea:9d:16:
0d:18:e1:7c:1f:12:21:f6:17:0c:63:92:2e:81:45:
0d:5d:b4:2a:b2:0b:50:c7:66:0c:56:71:62:8a:d5:
0c:dd:ec:2e:f7:a9:fb:76:fd:cf:8e:40:8d:24:5d:
f2:4c:c3:e3:f5:33:26:80:0a:dd:72:4a:20:e5:cb:
a4:7c:b3:99:a8:83:df:56:c7:f6:98:99:2b:05:e5:
14:9a:1d:43:cc:50:00:9a:28:8a:8c:48:cf:11:3e:
b3:09:49:e5:6c:52:1d:35:18:2f:76:de:c8:d2:50:
ce:6b:01:3a:f8:72:36:55:e3:5c:2c:25:d1:96:aa:
84:a8:d9:78:26:72:d4:86:db:9c:47:26:85:c7:b9:
0c:1a:3c:25:77:50:b5:d2:4c:a6:fb:87:f8:cc:68:
82:7d:9b:1e:6c:cc:53:bb:a7:4d:28:3f:31:b0:8f:
8e:4f:88:58:48:47:7d:19:c7:ef:e7:1d:11:6b:f6:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:34:36:9E:2F:03:72:BC:01:6F:15:14:2A:D7:E3:05:DA:A9:4C:C6
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e302e302f32342d3234203d3e203536383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b2:a8:25:5c:78:35:9f:17:99:18:98:57:9e:18:1f:61:94:
5e:04:26:a3:3f:0f:5e:21:e8:92:90:7f:2a:8a:c1:a0:01:f3:
30:4b:4f:3e:e1:3e:cf:e1:c0:f8:ad:79:77:92:ee:f1:44:a8:
5d:09:06:76:a5:8c:86:41:f2:7a:ed:fb:9b:f2:bd:34:3b:b3:
dc:03:63:04:ef:f3:b4:1f:29:e5:d1:f2:4b:7d:fa:dd:b2:60:
8c:f4:4e:7e:2f:59:78:7e:4f:e2:1c:1c:04:b9:b6:e8:33:58:
36:2b:45:8f:c9:7b:1b:d5:ee:48:92:03:79:ac:8f:33:61:85:
2b:65:4f:3f:92:ba:10:46:5a:42:e4:df:9a:7a:32:5d:cc:1a:
0a:25:fc:9f:6f:44:dd:e1:ca:3b:1e:69:67:be:d3:e6:e2:3f:
9f:93:ea:de:ac:83:e8:72:3f:c0:d1:4a:b4:fe:86:e2:88:2b:
0c:ed:ef:26:41:90:e3:4e:70:27:ed:71:3e:b0:cb:8a:79:6e:
f6:41:af:b1:2f:12:83:1c:b7:3a:a5:76:c6:b5:f1:93:a5:e7:
27:cb:f9:e4:be:a6:9c:18:8b:eb:52:0e:1e:70:65:bf:06:11:
07:b0:b4:d8:5f:48:30:37:b7:1a:82:65:00:2e:8c:fe:cf:45:
13:d9:54:d5
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUAS+W891ZMCmjzVniIcTptO9rAr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjExMDIxNjIyMzdaFw0yMzExMDExNjI3MzdaMDMxMTAvBgNV
BAMTKDYyMzQzNjlFMkYwMzcyQkMwMTZGMTUxNDJBRDdFMzA1REFBOTRDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6u3YuoTZ+uareFnCc7J8nmQI4
guog+XdSlIhS+aWuCrz9b5X6IcU2tg8wJoPixIkKslmW3YMJbk4nkjdexlST3dZo
KobCH+qdFg0Y4XwfEiH2Fwxjki6BRQ1dtCqyC1DHZgxWcWKK1Qzd7C73qft2/c+O
QI0kXfJMw+P1MyaACt1ySiDly6R8s5mog99Wx/aYmSsF5RSaHUPMUACaKIqMSM8R
PrMJSeVsUh01GC923sjSUM5rATr4cjZV41wsJdGWqoSo2XgmctSG25xHJoXHuQwa
PCV3ULXSTKb7h/jMaIJ9mx5szFO7p00oPzGwj45PiFhIR30Zx+/nHRFr9pGZAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUYjQ2ni8DcrwBbxUUKtfjBdqpTMYwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM1MzUyZTMxMzMzMzJlMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM2
MzgzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAm4UAMA0GCSqGSIb3DQEBCwUAA4IBAQCKsqglXHg1
nxeZGJhXnhgfYZReBCajPw9eIeiSkH8qisGgAfMwS08+4T7P4cD4rXl3ku7xRKhd
CQZ2pYyGQfJ67fub8r00O7PcA2ME7/O0Hynl0fJLffrdsmCM9E5+L1l4fk/iHBwE
ubboM1g2K0WPyXsb1e5IkgN5rI8zYYUrZU8/kroQRlpC5N+aejJdzBoKJfyfb0Td
4co7HmlnvtPm4j+fk+rerIPocj/A0Uq0/obiiCsM7e8mQZDjTnAn7XE+sMuKeW72
Qa+xLxKDHLc6pXbGtfGTpecny/nkvqacGIvrUg4ecGW/BhEHsLTYX0gwN7cagmUA
Loz+z0UT2VTV
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net