Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135392e302f32342d3332203d3e20313431393935.roa
File: 3138352e3131312e3135392e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: Q2+0+LvW+jNZHKW0bemSsfCbOmQh06pAL01uvqVshig=
Subject key identifier: C2:77:AA:BF:4B:65:D6:9E:35:A5:0B:28:D5:5B:00:B1:BE:29:81:11
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 63140F459141CF0C91F200747FA8B2E12D08AE74
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135392e302f32342d3332203d3e20313431393935.roa
Signing time: Sat 22 Oct 2022 04:34:31 +0000
ROA not before: Sat 22 Oct 2022 04:29:31 +0000
ROA not after: Sat 21 Oct 2023 04:34:31 +0000
asID: 141995
IP address blocks: 185.111.159.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:14:0f:45:91:41:cf:0c:91:f2:00:74:7f:a8:b2:e1:2d:08:ae:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:31 2022 GMT
Not After : Oct 21 04:34:31 2023 GMT
Subject: CN=C277AABF4B65D69E35A50B28D55B00B1BE298111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:50:70:d1:81:54:db:23:94:6e:1b:ea:8b:
b2:e6:86:25:ff:9b:1b:3e:7e:95:8a:5b:16:e6:21:
94:71:a3:2e:88:fc:23:8e:e9:c4:85:eb:2e:b9:4c:
62:62:aa:62:2e:fb:9b:27:32:46:92:1d:d4:91:6b:
36:09:04:33:2f:5d:0f:9f:aa:c8:b2:11:db:f8:f0:
75:31:19:41:a4:d4:c3:33:0c:4b:25:a8:01:f4:13:
04:62:9b:a9:20:af:a6:82:25:fa:51:2a:a4:d5:69:
d7:c8:94:a0:90:c4:89:b2:79:30:d7:8c:00:3f:77:
4d:aa:8e:f5:0b:8b:5c:d0:4e:a9:3a:01:3f:82:79:
b4:a9:9a:e2:15:e2:f1:c1:18:0f:c9:37:64:75:4a:
ae:4a:34:44:32:d4:7c:a6:8b:95:8f:35:00:6f:84:
39:1a:7f:f3:df:88:87:6e:94:a9:e1:1e:99:dd:56:
7a:c7:0b:1c:99:17:ff:99:85:94:f4:e6:2f:1c:58:
6c:5a:40:8d:ea:06:60:31:72:2c:3c:df:f1:64:51:
0a:ea:7f:12:73:bf:d0:03:16:44:72:0b:2b:cb:5b:
3f:e7:79:13:04:9b:35:dc:66:39:09:76:ff:b7:a9:
df:e0:62:dd:eb:31:ee:d2:f5:6e:75:0f:64:5a:b3:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:AA:BF:4B:65:D6:9E:35:A5:0B:28:D5:5B:00:B1:BE:29:81:11
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135392e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.159.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ba:fc:bd:bc:5f:12:a9:8c:79:82:63:50:01:f9:9e:00:11:
66:93:37:b0:9c:88:25:51:72:48:38:1b:c6:70:2f:51:03:31:
09:39:49:b4:2e:0a:ca:2a:b9:b3:ef:8e:87:ec:0c:97:c5:00:
c6:d6:81:df:7e:00:62:d4:ee:82:e2:03:e6:b6:c7:5c:10:2a:
41:68:4c:95:53:0c:fc:6d:03:a4:bb:6f:5f:0a:30:40:f6:58:
de:b3:05:76:8c:f0:53:7f:9b:95:c1:2f:67:06:36:e7:28:d3:
d2:b4:59:64:07:a7:00:af:dd:ce:14:79:cb:4d:3e:1d:8e:21:
73:7d:bf:10:e9:76:e7:64:d4:e2:c2:ed:3d:a6:44:a0:f9:3b:
d3:93:a9:7a:0a:bb:dc:b7:2e:ba:30:e6:81:54:e9:9f:40:43:
50:5e:76:0d:63:a6:c3:37:d6:09:30:c3:ee:f2:aa:31:85:cb:
90:2f:f3:b4:7c:c5:87:60:0d:1b:b7:65:b8:1e:d9:f3:89:1a:
26:63:d8:9b:ce:b3:51:65:3d:f9:cd:a8:b2:cb:ee:31:da:20:
cf:ee:5d:6a:d7:62:3f:cc:b1:0b:43:03:01:f8:cb:4f:d3:18:
a0:aa:d5:83:12:ee:ea:ec:4d:01:22:eb:b0:2a:3c:55:3a:b2:
5b:3d:ed:1f
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUYxQPRZFBzwyR8gB0f6iy4S0IrnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzFaFw0yMzEwMjEwNDM0MzFaMDMxMTAvBgNV
BAMTKEMyNzdBQUJGNEI2NUQ2OUUzNUE1MEIyOEQ1NUIwMEIxQkUyOTgxMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqd1Bw0YFU2yOUbhvqi7LmhiX/
mxs+fpWKWxbmIZRxoy6I/COO6cSF6y65TGJiqmIu+5snMkaSHdSRazYJBDMvXQ+f
qsiyEdv48HUxGUGk1MMzDEslqAH0EwRim6kgr6aCJfpRKqTVadfIlKCQxImyeTDX
jAA/d02qjvULi1zQTqk6AT+CebSpmuIV4vHBGA/JN2R1Sq5KNEQy1Hymi5WPNQBv
hDkaf/PfiIdulKnhHpndVnrHCxyZF/+ZhZT05i8cWGxaQI3qBmAxciw83/FkUQrq
fxJzv9ADFkRyCyvLWz/neRMEmzXcZjkJdv+3qd/gYt3rMe7S9W51D2RaszPXAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUwneqv0tl1p41pQso1VsAsb4pgREwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzQvMzEzODM1MmUzMTMxMzEyZTMxMzUzOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2Uy
MDMxMzQzMTM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlvnzANBgkqhkiG9w0BAQsFAAOCAQEA
QLr8vbxfEqmMeYJjUAH5ngARZpM3sJyIJVFySDgbxnAvUQMxCTlJtC4Kyiq5s++O
h+wMl8UAxtaB334AYtTuguID5rbHXBAqQWhMlVMM/G0DpLtvXwowQPZY3rMFdozw
U3+blcEvZwY25yjT0rRZZAenAK/dzhR5y00+HY4hc32/EOl252TU4sLtPaZEoPk7
05Opegq73LcuujDmgVTpn0BDUF52DWOmwzfWCTDD7vKqMYXLkC/ztHzFh2ANG7dl
uB7Z84kaJmPYm86zUWU9+c2ossvuMdogz+5datdiP8yxC0MDAfjLT9MYoKrVgxLu
6uxNASLrsCo8VTqyWz3tHw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net