Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa
File: 3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: trpxrgwUOCw/rUdcmmvJScWVfyTZutc2LyT2Iwr00aE=
Subject key identifier: 34:44:BE:0D:62:83:42:F7:B7:EF:DA:FE:03:6C:FF:55:36:C8:7D:E0
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 2DB3D3CB9EB9C43EB1395AB489E949F34088D00D
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa
Signing time: Sat 22 Oct 2022 04:34:18 +0000
ROA not before: Sat 22 Oct 2022 04:29:18 +0000
ROA not after: Sat 21 Oct 2023 04:34:18 +0000
asID: 51167
IP address blocks: 185.135.137.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b3:d3:cb:9e:b9:c4:3e:b1:39:5a:b4:89:e9:49:f3:40:88:d0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:18 2022 GMT
Not After : Oct 21 04:34:18 2023 GMT
Subject: CN=3444BE0D628342F7B7EFDAFE036CFF5536C87DE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:0e:76:1b:92:10:44:dd:e6:e5:13:c4:4f:
89:ce:0f:96:6a:10:19:2d:2b:89:10:88:12:ff:69:
86:04:74:1f:ef:0a:fa:19:ac:ae:1d:54:30:c5:95:
f7:37:8b:7f:83:9e:e6:fc:2a:8b:48:7d:b9:78:f0:
fe:05:df:89:0d:c2:f7:2c:13:5e:85:6d:60:ca:9f:
4d:1b:13:0e:3b:d0:e9:27:78:e8:ed:5e:a8:d5:5e:
68:5b:27:ae:8f:68:90:af:d6:e7:3e:e5:a5:aa:30:
a4:5f:57:31:08:0c:71:97:35:6e:1e:73:64:e7:8d:
fe:bd:10:8c:1c:45:9a:e4:c0:c5:83:57:44:e4:bd:
67:a8:10:07:44:29:7e:81:f1:20:8b:16:da:9c:66:
59:b0:3d:ae:7c:ec:78:a6:be:0a:ca:19:70:4a:8a:
3d:7d:e8:66:eb:cc:91:ee:d9:02:18:31:18:88:5f:
bb:02:73:73:80:82:56:46:a9:4c:4d:7a:b0:08:df:
01:08:e6:bf:00:99:db:dc:c3:96:5e:da:f6:1b:33:
6d:40:2c:14:78:33:0f:77:6e:9a:04:6d:6c:94:18:
9e:97:2f:3e:19:0e:28:d3:ec:3d:8d:7a:04:4a:54:
28:62:0e:5e:6d:d1:71:8c:cc:17:a4:79:34:65:ef:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:44:BE:0D:62:83:42:F7:B7:EF:DA:FE:03:6C:FF:55:36:C8:7D:E0
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.137.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f9:ec:2c:7b:fe:e6:c3:92:d5:2d:7c:2a:27:9f:41:e9:84:
b8:53:1d:84:2e:7e:80:1b:99:35:86:42:18:05:65:fe:19:53:
f6:c9:7b:00:2b:01:2f:aa:54:6f:2a:84:4a:6f:f2:c4:a3:ee:
3a:fc:96:aa:d4:50:e2:15:55:67:59:96:ab:3e:2c:fd:91:70:
46:3e:da:51:9d:82:04:dc:c4:e6:7e:9e:5b:c0:81:54:e5:fc:
f5:62:9b:58:e4:19:69:69:50:a0:83:0b:18:b7:ec:cc:76:35:
74:3d:d0:de:ed:b4:5e:33:53:0d:d3:48:13:13:aa:24:27:e7:
b8:2e:e2:4f:18:4a:36:05:0f:8b:a2:28:a4:68:b7:3d:c5:be:
6d:f9:6d:8b:77:1d:d5:67:ab:40:70:af:c2:58:f5:14:71:d3:
3b:4b:dd:7f:3b:fe:1d:bc:b6:03:e7:f2:51:74:aa:a3:6f:af:
60:00:aa:cd:73:63:43:7a:a0:8b:e0:0c:87:f1:74:a0:f9:65:
28:f9:99:b8:8f:01:e1:33:72:b5:41:c1:37:63:a5:98:9c:3f:
a3:ae:55:18:96:bb:a2:35:2d:fc:af:6b:70:47:22:30:39:7f:
8d:a1:d8:b6:93:3c:b5:82:d9:ab:ca:d9:dc:5e:fb:6a:3b:3b:
95:72:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net