Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137342e3230372e302f32342d3234203d3e20323132323932.roa
File: 3138352e3137342e3230372e302f32342d3234203d3e20323132323932.roa (raw, json)
Hash identifier: ALSoZX68y1xEsqmZPihwE+/EteaJ8LLZekD22N5dIwo=
Subject key identifier: 96:9A:3B:B5:57:29:4F:70:4A:13:72:40:A1:93:75:62:A4:C1:97:A2
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 587F4C3A804BA3B510F9B5F4A4202CD82653CC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137342e3230372e302f32342d3234203d3e20323132323932.roa
Signing time: Thu 10 Dec 2020 16:13:31 +0000
ROA not before: Thu 10 Dec 2020 16:08:31 +0000
ROA not after: Thu 09 Dec 2021 16:13:31 +0000
asID: 212292
IP address blocks: 185.174.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7f:4c:3a:80:4b:a3:b5:10:f9:b5:f4:a4:20:2c:d8:26:53:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 10 16:08:31 2020 GMT
Not After : Dec 9 16:13:31 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:9d:14:bb:0a:ca:ff:44:5b:bd:47:73:68:
f5:f5:bc:82:45:60:d2:67:a2:a9:f7:b9:b0:ef:11:
dd:2a:72:2e:c4:57:3c:1d:3c:ca:eb:ea:af:a0:43:
4a:a3:3c:4d:86:c2:52:b4:bd:5f:fc:60:b4:c0:c6:
40:70:e8:70:de:32:56:73:a3:32:cd:9e:61:2d:45:
db:ac:56:ea:d0:48:6e:89:f5:4c:55:c3:81:dd:c4:
b9:db:b0:ce:6e:7f:87:13:c1:5f:46:eb:7d:35:c3:
a8:4b:4c:50:b8:af:29:7e:3a:62:1c:ba:9e:e0:0f:
40:3b:ac:de:35:95:99:b3:6e:d2:b0:d7:98:b4:4e:
6d:8f:c1:4b:e2:06:87:8e:02:ab:11:e8:22:24:78:
a2:59:67:83:b4:56:22:23:ab:7b:33:ce:b0:d8:20:
55:7a:ab:0f:04:40:c5:36:10:b0:fc:f6:a2:86:b5:
38:f1:50:10:c0:97:0f:73:bd:77:b7:e5:ec:09:b3:
28:c6:d2:fe:ac:85:02:8c:0f:5b:38:d9:c4:15:2f:
9e:eb:7f:49:05:7e:6c:34:57:3f:d2:75:86:33:12:
1e:45:14:60:93:f9:31:73:60:6a:99:36:58:8b:1b:
50:6e:b4:df:30:2e:bd:7b:cd:32:3b:71:0d:08:29:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9A:3B:B5:57:29:4F:70:4A:13:72:40:A1:93:75:62:A4:C1:97:A2
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137342e3230372e302f32342d3234203d3e20323132323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b8:5b:17:36:ee:d0:93:8a:1a:d8:b9:9e:c5:a7:70:66:0f:
71:d3:65:8a:73:db:cd:62:a5:fc:1f:e9:f0:18:34:c3:4b:17:
2b:b9:44:2f:06:27:59:79:ef:4b:1a:f0:e7:76:5e:d9:f2:f5:
c0:25:19:5f:03:80:30:4e:15:89:1f:cb:50:44:ee:a2:e5:30:
13:10:0d:ba:69:c2:f9:ab:1f:2f:86:dc:0a:2f:f6:13:57:a3:
09:fe:6a:81:f8:b2:cc:b6:84:17:b9:71:47:fe:ac:ce:b4:ae:
c3:31:f2:ae:96:a5:6b:f0:06:b2:08:a3:e6:c7:65:69:09:ce:
da:d5:ff:41:c2:1e:d7:26:51:91:d2:27:36:5f:b5:5f:e2:c6:
f0:0c:47:74:a9:41:96:ce:bf:47:53:26:d0:e3:8a:24:a3:9f:
cb:37:2b:b0:79:c5:d2:a3:f6:98:09:3f:55:72:67:54:90:00:
28:3f:10:e1:b2:32:26:ad:58:0e:ee:1c:23:7f:03:55:ec:9a:
48:00:33:1b:de:f4:07:9e:a7:b7:ee:eb:21:61:c1:c7:a2:79:
5f:f2:60:7f:14:03:d5:5f:a7:41:f7:13:a6:af:11:47:6b:e6:
7b:45:2c:a2:15:fc:34:02:04:bc:48:47:c4:0e:f7:58:5d:7c:
0d:9c:d7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net