Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138382e3235312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138382e3235312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 0GXg1MY+PiGYbWAY9mmiucPyjM6lgjrYZeqffkGFENk=
Subject key identifier: 55:37:7C:83:2D:12:7F:0F:78:04:8F:42:61:A1:73:54:EC:5E:E2:C6
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 16F4DC8E96DE26DAB5BB66719FA87BBB1E0C114D
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138382e3235312e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 22 Oct 2022 04:34:11 +0000
ROA not before: Sat 22 Oct 2022 04:29:11 +0000
ROA not after: Sat 21 Oct 2023 04:34:11 +0000
asID: 136787
IP address blocks: 185.188.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f4:dc:8e:96:de:26:da:b5:bb:66:71:9f:a8:7b:bb:1e:0c:11:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:11 2022 GMT
Not After : Oct 21 04:34:11 2023 GMT
Subject: CN=55377C832D127F0F78048F4261A17354EC5EE2C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:af:6d:94:69:92:eb:ee:f4:d1:a0:31:76:
56:32:47:82:20:69:0e:1d:66:2c:2b:21:8f:c7:29:
bc:b8:2a:de:cc:cd:e8:01:74:48:d4:34:05:a2:7c:
85:dc:c5:13:bb:25:26:68:e8:09:f6:5f:9d:97:be:
b3:2a:c0:6f:30:fe:70:f9:0c:0e:e6:4d:c7:ad:b8:
63:91:54:c7:83:99:f5:37:d0:43:ae:25:63:e2:d9:
1a:03:6a:b2:ef:26:58:b2:c2:2b:b4:dd:36:74:ae:
5e:91:f9:b4:8f:d3:81:2c:fc:b9:3c:01:1a:48:c3:
f7:6b:60:c8:18:ed:38:6b:7b:3f:92:7c:40:ad:4f:
6b:38:2f:4e:db:d6:37:a3:3b:e5:36:a7:a4:83:b9:
75:a9:d9:9c:80:53:98:ad:b8:fb:dd:06:17:f3:82:
ca:77:e1:15:eb:8f:a2:c3:9d:cd:2d:10:70:57:70:
81:27:c1:05:96:c0:d8:41:12:77:54:0d:e0:43:b3:
1d:a6:bb:53:68:85:6b:9f:ed:9c:c8:29:f0:d5:21:
d8:68:c2:88:92:8b:b3:53:c7:ab:4f:a4:e6:2c:0e:
da:6b:14:d2:f5:af:66:0b:d2:b0:92:0d:37:1a:01:
9e:74:17:77:d0:78:84:16:5e:91:98:45:9e:f7:0b:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:37:7C:83:2D:12:7F:0F:78:04:8F:42:61:A1:73:54:EC:5E:E2:C6
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138382e3235312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b7:f9:7f:ff:6a:d5:ab:73:0c:cb:ad:2d:cc:1b:02:74:36:
79:29:11:00:0c:2c:b2:3f:dd:2f:9e:dd:4f:22:d3:ed:83:6d:
5b:ff:60:0b:16:ea:5c:d4:2e:99:e1:44:f3:5a:73:98:e5:81:
e4:b6:35:31:0e:87:89:64:11:1a:28:3e:39:e9:32:f4:fe:35:
e5:a4:4b:89:65:65:8c:30:bb:1a:75:d9:58:cf:44:57:d6:a8:
e2:d2:13:00:27:61:ca:4b:88:f3:e1:54:fe:18:d9:a0:92:fc:
d5:3a:f1:ee:0b:29:17:72:79:32:62:4d:ce:75:e9:cb:3e:fa:
5d:5d:88:58:84:31:44:6d:eb:ad:ca:5b:8e:39:c0:63:f3:e5:
54:78:67:75:4c:66:f8:63:08:31:44:cf:71:ce:c9:71:15:73:
7a:8a:05:bc:b8:bc:79:fd:2a:c0:bc:9e:73:08:af:f7:12:58:
be:56:ea:01:02:53:c4:d5:d3:08:86:d4:a2:95:24:da:32:74:
de:f0:40:8f:3b:f3:72:73:58:17:95:7d:f8:50:8c:fc:21:63:
4a:6f:49:26:f5:9b:89:fe:45:ad:3c:f4:6b:60:5e:26:99:37:
04:91:cb:0e:82:91:3b:ef:3d:69:98:a7:03:3b:14:57:3a:69:
1c:ad:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net