Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3133352e3133382e302f32332d3234203d3e2030.roa
File: 3138352e3133352e3133382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: EnlGj0Bbuof0BJ51ZAprC6G7xiaopBUtnB7yv6EmAms=
Subject key identifier: 58:DC:84:01:42:75:6B:50:77:66:B3:85:4A:F7:84:00:70:C4:EA:C6
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 1C5A0125415C798772E17DAE2A0272A46E8AA20A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3133352e3133382e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:41:50 +0000
ROA not before: Fri 03 Mar 2023 15:36:50 +0000
ROA not after: Fri 01 Mar 2024 15:41:50 +0000
asID: 0
IP address blocks: 185.135.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5a:01:25:41:5c:79:87:72:e1:7d:ae:2a:02:72:a4:6e:8a:a2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 15:36:50 2023 GMT
Not After : Mar 1 15:41:50 2024 GMT
Subject: CN=58DC840142756B507766B3854AF7840070C4EAC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d5:4f:82:e3:43:94:27:fd:97:1b:25:32:bd:
76:18:24:6d:2b:0d:ab:9d:07:2c:b7:57:3a:52:d3:
26:67:79:46:e3:f3:98:da:e7:99:44:07:02:36:1b:
01:51:78:c4:c1:18:1d:39:19:6d:cd:51:02:67:25:
75:60:c6:48:20:a8:ab:76:b1:3f:5f:67:65:98:e7:
92:b7:64:23:9b:c5:68:96:df:ac:e7:0b:71:36:62:
3f:68:8a:95:e1:f5:fc:71:68:a7:1b:12:df:be:a5:
0a:f7:fd:53:be:20:d6:8f:d8:b2:e7:a0:26:05:a6:
ee:58:d5:2b:1f:ca:35:9a:ea:aa:f7:46:4f:0f:b5:
d5:01:39:3f:6b:d9:af:b8:4a:0e:a0:cf:ea:6c:62:
72:33:c4:f9:40:9e:fe:31:b1:e9:fd:5b:78:d3:19:
8e:ea:2e:81:fa:81:21:3c:6b:9a:37:1e:79:66:d4:
2e:c6:29:66:1c:59:5c:7d:a1:d8:24:ba:cc:e0:d9:
a0:69:3d:b6:df:a0:60:bc:d5:8b:3c:15:c4:61:0f:
5b:f5:17:c3:98:ed:2d:a3:80:38:68:b2:5a:08:95:
61:f3:b8:80:d5:be:fc:8f:fb:b8:36:4e:b6:37:95:
16:a4:22:cf:d0:42:6b:e7:ea:30:0a:0b:5d:03:99:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:84:01:42:75:6B:50:77:66:B3:85:4A:F7:84:00:70:C4:EA:C6
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3133352e3133382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.138.0/23
Signature Algorithm: sha256WithRSAEncryption
52:e9:fe:4f:5e:60:3c:82:39:3c:82:e3:56:5b:cc:28:b9:c4:
ac:91:b5:f2:6f:b4:d1:3a:b6:6c:fa:1d:2c:4f:ad:9b:15:43:
cf:98:d1:3a:12:6b:c8:b5:3a:74:bd:60:3e:2e:1c:fb:9e:24:
fa:cf:b1:d0:9d:bf:54:ec:15:e2:68:81:d3:20:2e:e3:7a:5a:
33:fd:bd:e8:b3:d1:05:96:d1:ba:5c:f1:19:88:12:4b:31:19:
66:02:22:10:98:52:d9:fc:12:78:c7:92:ee:eb:79:c9:8c:82:
ca:dd:6a:31:13:fd:f7:3c:61:45:78:53:5f:7e:73:d3:68:32:
31:1e:e0:4f:d7:af:f3:17:20:dd:98:55:66:3a:70:ea:d0:ba:
68:34:7c:dd:ee:12:f3:4a:69:03:06:ad:ac:2d:65:bf:bd:13:
a9:46:0b:87:91:94:b2:bb:2e:9b:b8:fd:06:3f:53:f4:9f:2e:
cf:88:aa:fe:3d:15:fd:83:6a:7c:55:a3:ea:6a:ad:e6:33:1e:
f0:50:4e:1e:76:82:96:65:f0:2f:dd:76:a7:72:4b:ff:77:db:
8f:da:dc:db:a0:9c:da:ed:fa:d3:44:d3:a3:28:1e:d1:7e:26:
f2:63:70:27:1c:27:09:97:82:41:e1:ca:2b:59:d0:99:2d:62:
64:f5:d0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net