Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e312e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: /15FXf9rL8lVW4X0rC2qI3V68NH0+AyKksWbSmAIeVk=
Subject key identifier: D5:DE:02:C1:6E:37:28:61:CA:3B:C1:D9:DC:60:EF:8C:FA:34:65:08
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0F562C8892256702317AEA7EBC3C5C0D19FFBB
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 17 Mar 2023 09:22:26 +0000
ROA not before: Fri 17 Mar 2023 09:17:26 +0000
ROA not after: Fri 15 Mar 2024 09:22:26 +0000
asID: 136787
IP address blocks: 155.133.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:56:2c:88:92:25:67:02:31:7a:ea:7e:bc:3c:5c:0d:19:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 17 09:17:26 2023 GMT
Not After : Mar 15 09:22:26 2024 GMT
Subject: CN=D5DE02C16E372861CA3BC1D9DC60EF8CFA346508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:cf:80:2f:4c:7a:4e:79:da:c3:38:7a:72:
e1:c6:bc:f0:af:e9:fd:35:28:33:9b:39:00:15:3b:
21:07:dc:fe:7c:e5:44:8e:e0:57:aa:8b:a8:ea:34:
71:22:83:94:04:7d:9a:56:d6:18:c6:a0:83:ed:cb:
86:e7:17:e6:10:a9:8a:2c:34:a3:41:e8:f8:28:3d:
a7:eb:5f:fc:60:47:82:7c:d3:82:8b:a5:fa:7f:ca:
dc:67:b7:38:ac:99:f9:ef:28:b3:5b:3f:2d:5c:0b:
c6:6f:21:77:8e:d7:e2:47:5d:0a:8c:5e:37:1c:59:
b4:98:cf:16:65:0f:36:47:21:ee:c4:2c:7c:4c:cf:
89:5b:0b:9b:da:37:11:a0:56:3b:7c:00:6d:b2:13:
a8:80:ba:66:d5:c1:0b:0e:61:1e:44:2c:90:21:d7:
33:c4:ce:2d:f7:72:0b:5e:c1:88:63:8f:e8:96:98:
e6:28:6b:98:c2:8a:d4:39:fa:fb:2c:ed:5a:bb:36:
11:5a:f9:c3:6e:54:6c:3c:1b:2e:e0:e5:91:5b:6f:
f2:a7:b0:c8:58:4a:67:40:14:07:85:d3:ee:9a:4d:
01:93:69:79:27:4e:67:e4:38:b9:dc:1c:25:eb:a5:
ee:6e:db:a0:f3:33:43:c1:13:ab:18:38:d9:4d:42:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:02:C1:6E:37:28:61:CA:3B:C1:D9:DC:60:EF:8C:FA:34:65:08
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:76:32:da:e9:3a:7a:8a:ee:ed:47:3c:6c:04:95:b8:19:98:
8c:f1:71:a7:e1:6b:97:f9:34:94:66:35:c7:17:9d:d1:7e:14:
b5:6c:43:50:b0:fe:af:b4:b1:d3:ba:a0:20:14:f7:a5:15:c8:
e0:80:3c:f9:56:c1:a5:a3:c0:75:78:28:b2:2e:74:47:47:a4:
08:1c:f3:26:8c:2a:c6:53:1b:d7:13:27:9e:a8:12:e7:60:f8:
e1:c5:54:6b:fa:7b:7a:fb:4a:9a:b3:a5:96:64:72:a9:5c:e8:
9a:f8:6f:ba:23:8a:29:dd:6f:03:1b:17:a0:dd:d9:52:06:ef:
30:12:60:d7:ba:af:f9:38:39:f3:10:52:e0:f1:66:4c:37:67:
f0:42:9e:85:b7:c1:28:0d:b9:ea:d0:c9:cb:bf:b3:8b:d1:80:
e6:3b:a6:25:ec:d0:aa:e8:0d:82:c7:79:e4:2b:6a:55:10:57:
03:64:f3:b7:c3:61:9b:29:b0:8a:24:e2:02:09:fa:54:e3:a6:
87:66:1a:46:a5:23:c0:0a:fd:eb:5a:84:d5:7d:2c:60:21:96:
1f:3c:3f:a4:e0:c6:81:e4:e1:e0:ed:94:8f:a8:a5:7e:c7:52:
f8:42:de:57:d9:e0:ed:1b:53:6f:92:2f:f4:d2:e0:97:c6:5d:
2d:af:d7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net