Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230302e33342e302f32342d3234203d3e2030.roa
File: 3138352e3230302e33342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 09Hef/lD1ZTLy3llaYP7DXuGOAsR7CDaB5TYS2jPAb8=
Subject key identifier: 02:B7:C8:18:66:03:C8:0C:6C:B2:24:E9:0F:56:02:0D:E8:B1:A0:DE
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 61B4F533ADE8B0E34A0CC437CE8731AF6C8C141F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230302e33342e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:34:53 +0000
ROA not before: Fri 03 Mar 2023 15:29:53 +0000
ROA not after: Fri 01 Mar 2024 15:34:53 +0000
asID: 0
IP address blocks: 185.200.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b4:f5:33:ad:e8:b0:e3:4a:0c:c4:37:ce:87:31:af:6c:8c:14:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 15:29:53 2023 GMT
Not After : Mar 1 15:34:53 2024 GMT
Subject: CN=02B7C8186603C80C6CB224E90F56020DE8B1A0DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:f2:72:49:37:c5:2d:6b:38:a3:b0:a5:65:
97:dd:0a:0d:b3:5a:b6:e5:a5:69:36:7d:7a:64:e5:
dd:e4:b1:62:8c:55:80:76:13:fb:6b:dc:81:9f:73:
60:fa:a7:cc:d2:f7:63:b6:7d:10:dd:17:69:c6:a0:
6d:d5:ea:c0:7a:d0:bb:40:1b:f7:90:a8:98:14:2e:
3b:a7:da:5c:0a:75:66:0d:56:87:1d:e8:a8:c3:6d:
5f:69:53:10:71:55:fb:92:cc:a0:0e:2a:73:79:6e:
85:46:d1:bb:2f:dd:c3:88:4b:03:17:0c:a5:2e:9e:
1c:60:95:7f:90:bd:12:c8:fe:44:5e:63:67:2a:47:
3c:46:af:86:0b:1f:08:da:ad:1b:34:d5:27:31:da:
19:48:3f:f2:7e:28:97:20:41:77:c9:ab:a7:6b:39:
7f:3c:12:a2:f9:2c:45:2a:8b:38:31:e0:fe:d3:36:
60:bd:e5:4b:c8:0a:6e:94:70:6f:13:fc:9c:52:54:
ee:d5:02:fc:47:8b:1f:1f:39:f8:52:cc:c4:47:53:
1f:1d:d7:00:50:a3:6f:83:d8:8b:4d:95:b5:23:d9:
d6:f3:82:63:4b:5d:7f:55:de:c8:89:59:10:70:17:
62:47:50:4f:8b:72:14:62:6c:6e:ef:ff:63:18:f7:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:C8:18:66:03:C8:0C:6C:B2:24:E9:0F:56:02:0D:E8:B1:A0:DE
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230302e33342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f0:19:bd:68:85:8b:f5:9c:9e:fe:d8:d5:dd:f2:3e:96:e7:
61:5f:e4:a6:e1:e5:3a:da:de:e1:9b:29:fc:c2:71:39:9b:7d:
f0:7c:90:75:d2:e6:56:e5:73:5a:66:35:e5:b8:f0:d7:25:ba:
b1:ef:fa:43:c5:e7:f7:fa:4c:a2:8c:45:10:63:92:4e:49:e2:
78:71:a7:96:c3:4f:12:dc:1f:f4:2d:cc:a3:2b:1d:f9:79:bc:
3e:6b:1d:c4:57:11:30:77:fc:9a:37:1c:37:a8:01:53:10:ba:
5a:97:7e:ee:31:5d:f3:77:21:25:0a:7a:8e:a8:f8:4b:02:ae:
e5:7e:17:aa:4b:e9:33:b3:ea:d4:c8:65:6f:72:6e:64:68:5e:
dd:91:27:1d:37:36:8a:74:1a:6f:83:70:5d:7b:a0:c7:9a:e3:
c4:4f:1c:a5:a0:1f:d8:6b:15:d0:d2:79:a1:f7:af:ec:7e:9e:
2f:4f:76:24:33:24:f0:f1:c9:80:e5:03:c5:86:ea:3b:7d:7d:
d2:5a:af:e7:66:7c:15:26:c7:2f:28:0e:2c:7a:fd:50:44:71:
15:fe:9b:a9:4b:93:ca:bb:02:c7:92:d7:0e:67:f7:86:76:8b:
08:b2:25:f3:b0:16:7e:ab:ef:c2:3f:0e:af:a8:f5:74:6a:16:
b6:59:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net