Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138332e38352e302f32342d3332203d3e2039303039.roa
File: 3138352e3138332e38352e302f32342d3332203d3e2039303039.roa (raw, json)
Hash identifier: JxzvsbTamqdZyxibplCsw0NFszZvFwVrQiK9CZW4aEc=
Subject key identifier: BA:4F:75:46:46:FC:3B:1A:AA:7E:F1:86:0D:65:0F:34:12:D6:E8:CD
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 4085FA2A6E8D3B131B8DBD7FCAE5BB40303EE4B9
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138332e38352e302f32342d3332203d3e2039303039.roa
Signing time: Wed 28 Dec 2022 09:26:33 +0000
ROA not before: Wed 28 Dec 2022 09:21:33 +0000
ROA not after: Wed 27 Dec 2023 09:26:33 +0000
asID: 9009
IP address blocks: 185.183.85.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:85:fa:2a:6e:8d:3b:13:1b:8d:bd:7f:ca:e5:bb:40:30:3e:e4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 28 09:21:33 2022 GMT
Not After : Dec 27 09:26:33 2023 GMT
Subject: CN=BA4F754646FC3B1AAA7EF1860D650F3412D6E8CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:d5:d0:e9:e5:31:85:1d:09:64:84:d0:d0:
79:62:6e:1d:69:7d:5d:25:a0:3f:fa:bf:9f:7c:2d:
90:0f:3a:2e:6e:b3:09:7b:cb:de:0b:1e:08:58:a3:
85:14:61:2b:b5:65:ed:44:ed:71:9f:e5:7d:9f:81:
74:5d:c8:4a:3a:15:9e:ce:26:3c:ea:ca:5f:a2:0a:
28:a8:13:92:a7:9b:25:57:59:85:ec:25:56:8e:53:
78:bf:26:92:64:49:4e:57:b2:f9:c7:77:80:53:a5:
37:79:ba:3e:dc:1d:00:73:08:87:6b:bf:34:f9:16:
a9:64:a7:eb:6c:d9:6c:70:3a:99:da:07:de:47:23:
05:2e:a6:11:57:56:86:7c:47:a4:11:59:f4:72:0e:
07:31:f4:cd:f0:a3:a3:f9:55:01:fd:f8:e7:de:30:
1b:ea:25:8a:82:93:39:8e:28:ab:0c:bf:71:be:a2:
99:38:df:de:24:2e:42:13:44:94:de:d1:f1:fd:9e:
a2:b0:bf:c0:17:db:a1:9a:0a:cb:10:a2:7a:e3:06:
c3:17:35:1e:a1:54:05:ca:be:dd:9d:82:73:a2:c5:
49:e8:a6:81:64:18:a6:96:d0:a9:52:db:f5:c3:66:
22:0a:40:b7:c6:9f:0d:61:17:8d:0c:60:0f:29:bf:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:75:46:46:FC:3B:1A:AA:7E:F1:86:0D:65:0F:34:12:D6:E8:CD
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138332e38352e302f32342d3332203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a8:2a:85:93:1c:6e:18:bc:b7:f1:3a:df:50:4d:cc:d5:18:
38:77:b5:4b:dc:2c:42:c7:b9:8f:d9:c3:16:5b:37:20:9b:8f:
ae:9e:c1:96:d2:a0:5d:cd:31:c0:4e:e5:bc:a2:88:fa:63:7d:
1a:de:0a:70:8e:1b:47:2c:39:5d:60:69:08:c2:fc:70:6d:3c:
1a:e0:6e:8e:9d:cf:48:5b:0d:8f:f3:1d:67:05:70:5c:a9:f9:
69:64:21:2e:c6:0c:d1:6f:7f:a0:88:97:c4:55:5f:ba:ba:d1:
d8:c3:b7:21:73:7b:72:ad:4c:b8:c7:e5:1f:31:55:dc:38:96:
54:7e:29:7d:96:8c:c8:b6:7a:bf:95:da:46:93:63:d1:c1:f3:
e7:63:ea:5b:9f:45:64:49:9e:fd:9a:3b:da:39:fe:89:f6:93:
24:b3:19:ce:f2:3a:9f:59:88:02:6c:6c:4d:2d:91:df:db:6e:
73:ed:b9:e2:fd:30:95:34:34:b6:cc:96:a8:8d:de:eb:9e:5c:
d1:8c:17:14:df:38:c9:06:4a:ce:57:77:58:92:2b:61:ab:de:
a6:74:75:6f:09:c5:d2:58:8c:e6:9c:71:35:0f:e7:f5:6a:c3:
24:f1:48:30:e5:d3:b9:71:03:c8:ed:17:cc:97:8e:d1:7c:c9:
2e:8a:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net