Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3132382e3132362e302f32332d3234203d3e20313336373837.roa
File: 3138352e3132382e3132362e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: tMxBoTfPVRWRVdDCz9kFf/zp+F/OGL6q/Cc8St2w4pc=
Subject key identifier: 0D:57:5B:50:B1:04:CB:A3:F3:32:64:CC:6C:42:C6:AF:02:7D:AB:3E
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 7D428C3AE5DF93D1533B1253501FB1040645FFA6
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3132382e3132362e302f32332d3234203d3e20313336373837.roa
Signing time: Mon 07 Nov 2022 10:53:02 +0000
ROA not before: Mon 07 Nov 2022 10:48:02 +0000
ROA not after: Mon 06 Nov 2023 10:53:02 +0000
asID: 136787
IP address blocks: 185.128.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:42:8c:3a:e5:df:93:d1:53:3b:12:53:50:1f:b1:04:06:45:ff:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 7 10:48:02 2022 GMT
Not After : Nov 6 10:53:02 2023 GMT
Subject: CN=0D575B50B104CBA3F33264CC6C42C6AF027DAB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:1f:8b:43:18:fd:44:cf:39:60:79:b1:7d:
2d:df:a4:c6:37:1c:88:9c:56:01:db:0c:d3:4b:9e:
e9:81:76:96:69:7c:7f:13:d1:e8:84:00:b9:9b:e9:
b6:4d:17:9e:2e:d9:7d:63:cc:a0:7f:50:2f:ae:a0:
45:48:10:c1:eb:56:79:0c:c5:e3:0e:e2:f9:91:04:
5b:0c:ec:e6:18:dc:71:ce:22:8f:b7:6e:2a:06:39:
2e:1b:08:0f:6e:ba:d8:d7:98:9a:bf:25:df:60:23:
77:51:10:c4:e7:82:84:e7:ea:ab:d9:77:af:d8:ff:
ba:43:ca:cb:f2:a5:fb:dd:3f:ab:c4:f9:a6:e0:d2:
49:11:fc:cd:59:4b:40:e8:8a:c0:52:bd:01:91:29:
6b:14:80:18:1f:fc:9f:66:b1:9a:52:b9:ef:7c:2d:
76:01:b8:f2:c3:d0:0d:91:67:a1:0a:38:02:6b:85:
78:e7:9d:61:5e:09:fb:d2:5a:88:b0:88:03:54:cb:
de:20:98:ef:7c:71:78:6a:e1:44:a4:7d:57:8e:3c:
f0:20:0e:7a:2a:e1:11:95:ee:82:9e:e6:fc:ae:5c:
1a:99:80:7e:25:07:60:dd:71:9a:0a:50:19:89:ca:
96:90:39:85:64:ef:de:64:c1:6e:76:36:89:a1:b1:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:5B:50:B1:04:CB:A3:F3:32:64:CC:6C:42:C6:AF:02:7D:AB:3E
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3132382e3132362e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.126.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:17:3b:f2:8d:42:39:39:c4:6f:9b:87:c9:4d:69:3a:98:1b:
ed:34:1a:b4:8c:47:5b:9e:c9:52:20:5b:7c:05:25:5e:bf:9b:
0d:83:94:a8:4d:f9:ea:a5:d2:7c:b8:d8:fe:40:6b:c4:2b:ed:
ec:ab:7d:26:d7:0f:8f:f8:2e:f4:d2:c3:16:90:87:e1:f6:07:
82:66:e5:f4:06:d0:fd:03:e8:a6:bd:b9:43:7f:7c:3b:86:b4:
0d:59:74:8e:0e:0f:ba:e5:17:ca:a3:fd:7f:65:c8:bf:f8:26:
10:9e:9a:79:ad:8f:bb:16:66:eb:6f:ca:88:65:9a:46:69:ce:
d5:bb:dd:68:52:b9:f3:1b:9d:8a:f5:a3:01:7b:19:f5:38:16:
e5:79:f7:73:42:0d:85:e2:81:3d:b1:42:a9:93:e6:0a:4d:9c:
1f:61:19:25:44:79:2e:18:f5:64:69:24:1f:1d:cc:b7:59:05:
f4:7a:e9:45:79:3e:b3:04:42:1a:de:2c:b3:b3:ca:33:7a:c7:
db:b9:8c:a0:e3:a3:b4:41:24:d4:70:f1:f8:78:72:a8:39:83:
3f:fe:7e:f2:5d:fc:45:ab:86:e2:82:fd:cd:48:68:e1:df:3e:
b6:70:2d:da:e7:be:2e:76:bf:70:a4:9f:9b:a5:89:3a:d1:06:
c6:d1:f5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net