Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3133352e3133362e302f32342d3234203d3e2030.roa
File: 3138352e3133352e3133362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: jwWdtZJteDoF7bQWDywpBhtavx6D2IZdR0fBT+MtQ/E=
Subject key identifier: B7:8E:FD:F1:0B:BC:73:9E:C2:F2:D3:84:02:A4:3E:8A:A7:68:6E:1A
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0E2D05A0E6EA58DC7C4D5DD4D2872B5D9B5D48BA
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3133352e3133362e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:41:11 +0000
ROA not before: Fri 03 Mar 2023 15:36:11 +0000
ROA not after: Fri 01 Mar 2024 15:41:11 +0000
asID: 0
IP address blocks: 185.135.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2d:05:a0:e6:ea:58:dc:7c:4d:5d:d4:d2:87:2b:5d:9b:5d:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 15:36:11 2023 GMT
Not After : Mar 1 15:41:11 2024 GMT
Subject: CN=B78EFDF10BBC739EC2F2D38402A43E8AA7686E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:03:73:7f:d0:58:cf:55:00:0e:b4:30:e1:
87:c6:b4:2b:2b:e9:1a:7e:59:4a:da:71:8d:6a:7a:
13:18:5e:d7:cf:45:ab:26:16:9c:03:ea:06:d8:2e:
0b:e6:20:59:e5:a5:d5:fc:b3:7c:ee:fb:55:69:dc:
dc:82:61:8d:a9:ff:75:d8:e8:ad:30:0d:f6:53:09:
e3:ca:f9:63:88:2c:a6:3a:45:82:18:9f:39:16:79:
3c:a4:3b:cd:68:4c:d8:95:5c:3a:50:52:e1:02:a5:
4a:4d:56:06:40:e7:85:7d:f9:6d:ed:79:12:c1:f2:
cc:9d:ae:85:ec:db:80:77:e7:4e:e9:6c:86:92:68:
32:bc:4e:65:92:0c:61:e5:c7:ea:84:74:a9:b3:1e:
bd:ad:b1:f5:5e:02:19:c7:f5:60:bd:bb:fd:7d:b6:
60:83:98:99:70:63:39:d8:a2:62:e2:db:de:26:60:
85:be:15:ea:5c:09:dc:57:83:db:e5:a2:ad:44:2a:
de:6d:91:af:fd:5b:5b:3d:13:0c:95:91:73:74:4b:
10:94:78:b7:01:fd:46:92:c2:94:e2:30:86:fa:02:
a7:5b:8b:d9:dc:36:d0:24:af:06:6e:87:84:4b:81:
98:95:6b:a1:f2:4e:56:a8:6e:ba:5e:04:a6:94:d8:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8E:FD:F1:0B:BC:73:9E:C2:F2:D3:84:02:A4:3E:8A:A7:68:6E:1A
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3133352e3133362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:31:74:87:fd:af:69:1c:e9:ea:85:1a:d3:72:af:a8:87:25:
81:49:03:b6:7f:5d:35:65:17:7c:e4:a1:52:2b:83:ec:47:ef:
67:98:bb:08:d9:8f:6a:01:ba:c4:cd:6b:ac:e1:e4:78:5c:99:
45:3c:62:e5:b3:be:ed:1f:f7:79:d2:3b:a6:b6:42:2f:84:ef:
ad:c4:f6:76:cc:88:f4:16:a6:b5:bd:8b:cc:3c:69:37:8a:6b:
b8:36:e1:3a:f1:07:16:7e:e7:9b:03:4a:1b:cf:8d:e2:be:9c:
10:c5:3b:1f:ea:25:f7:16:0a:d0:0b:26:7c:f3:03:0d:c4:b2:
62:0b:55:cf:36:29:13:21:ca:80:9a:81:9d:8f:30:0e:cd:bc:
eb:58:b4:b8:b9:16:05:bd:ea:6a:72:f5:98:62:39:c9:15:72:
cf:7b:51:0e:c7:32:0b:5c:35:76:b5:ba:4f:9d:b5:8c:1f:94:
0c:21:fa:18:fe:af:09:9f:b0:32:a6:26:0f:96:91:05:e1:0b:
47:b5:83:ec:f3:5a:81:4f:d8:ed:fd:e9:83:8d:5f:80:2d:91:
4f:d4:21:7b:ff:44:74:41:4f:07:c4:ca:fd:c4:a9:ce:14:cc:
b0:0a:5a:9b:8c:59:ce:04:59:ad:5f:64:ea:d5:39:c5:47:cf:
a3:b0:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net