Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136382e392e302f32342d3332203d3e20313336373837.roa
File: 3138352e3136382e392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 8ubih5GXcGKuYhrz0NGHNNPsEYxb7JHGec+ipb9Q6QE=
Subject key identifier: 32:8A:54:CA:A6:BF:3B:14:69:9E:22:F4:0D:43:05:28:77:DD:9D:FA
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0684A062AC3A6EA5E86149181F3C3137A8834C43
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136382e392e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 28 Dec 2022 09:28:48 +0000
ROA not before: Wed 28 Dec 2022 09:23:48 +0000
ROA not after: Wed 27 Dec 2023 09:28:48 +0000
asID: 136787
IP address blocks: 185.168.9.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:84:a0:62:ac:3a:6e:a5:e8:61:49:18:1f:3c:31:37:a8:83:4c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 28 09:23:48 2022 GMT
Not After : Dec 27 09:28:48 2023 GMT
Subject: CN=328A54CAA6BF3B14699E22F40D43052877DD9DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:a9:0a:24:7b:dc:32:4a:22:19:c6:cd:cc:
fb:51:f8:bb:97:ad:f9:b7:71:ef:15:a0:4a:08:91:
28:c5:79:98:61:f7:14:58:13:52:d3:e4:38:6b:a0:
3f:c4:c7:a5:21:75:32:eb:19:57:ae:4d:d5:ec:3b:
93:db:39:5f:0c:01:be:ee:4e:0d:30:53:1c:22:16:
62:d9:a1:32:ea:a1:91:8c:17:05:a7:14:ac:9e:4d:
e6:0e:99:26:ea:a1:c3:dc:37:7b:f7:d3:77:3c:8b:
27:ff:ce:30:7a:b8:42:34:fe:06:09:7a:64:54:03:
23:46:ca:86:7a:bc:2d:3e:9c:6f:d0:9e:03:45:71:
01:2a:24:96:54:fd:2d:1a:13:a1:fa:fe:72:be:c2:
93:46:6e:b4:d0:83:a8:c2:e8:82:85:14:1a:d5:2a:
85:96:e4:8a:3f:d5:f1:6a:6a:1c:11:1f:00:4d:64:
f1:95:11:74:aa:37:bb:27:34:fd:01:22:a1:b5:cc:
0f:0a:8d:55:31:d2:02:8f:5e:61:78:1e:b4:59:c3:
b9:b8:ba:b6:0b:e2:4c:15:4c:42:22:e0:cb:5a:26:
99:60:ea:79:bc:b7:2f:49:b1:a8:80:4a:05:63:ab:
20:83:a2:17:2e:22:92:b1:47:9c:12:0d:8a:70:19:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8A:54:CA:A6:BF:3B:14:69:9E:22:F4:0D:43:05:28:77:DD:9D:FA
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136382e392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.9.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:9f:1b:ca:49:56:08:eb:e3:b8:27:92:fd:21:6c:de:6b:f7:
45:2a:6d:f9:ee:25:ac:fc:5f:17:40:cf:be:8a:9b:ab:5b:a8:
91:18:9c:1e:ab:9f:48:1c:77:0b:b5:d5:45:ad:4e:e5:15:00:
29:1a:b8:3b:97:81:47:f3:2b:ac:53:73:81:dd:f6:22:5f:90:
0a:a1:03:4e:88:fb:8a:71:4d:28:03:aa:49:77:6b:00:a4:6d:
7e:56:1d:98:6d:94:35:bb:73:49:b5:8c:6e:44:8b:c2:da:bc:
0a:4f:75:58:cd:17:ac:9b:77:9a:b7:17:4b:09:86:ff:a5:07:
27:15:fa:91:0a:d7:34:0d:4e:32:dc:9f:f3:9b:56:e5:e1:7f:
aa:1d:73:54:2f:9e:1c:6d:61:68:32:4a:34:51:44:f0:32:85:
3f:30:47:d7:a7:d4:37:4f:61:b3:52:8c:dd:64:71:06:c0:45:
2d:a1:d8:6d:86:11:91:23:f8:05:88:fa:96:f3:19:4e:af:e9:
04:31:d9:a2:f0:dc:a2:57:d0:1f:e9:2d:5d:ad:f8:71:cb:f5:
f4:8e:4c:61:1b:53:71:14:eb:8a:86:00:2b:26:29:cf:e9:de:
2f:0a:e8:dc:f6:61:11:bd:23:24:94:42:aa:ee:bc:1d:e9:ec:
d1:c7:ac:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net