Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa
File: 3138352e3231322e37302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: QPrYe19bS4WrNQDRfzhFqod/3+cFBHAPDhWiwvfcKcc=
Subject key identifier: EA:48:7D:10:02:19:9E:EB:10:A3:2B:FC:7A:D6:53:84:4B:ED:D9:57
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 33139E1C7F6C672136B0DC8B171A89C2E12519FA
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:34:37 +0000
ROA not before: Sat 22 Oct 2022 04:29:37 +0000
ROA not after: Sat 21 Oct 2023 04:34:37 +0000
asID: 47583
IP address blocks: 185.212.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:13:9e:1c:7f:6c:67:21:36:b0:dc:8b:17:1a:89:c2:e1:25:19:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:37 2022 GMT
Not After : Oct 21 04:34:37 2023 GMT
Subject: CN=EA487D1002199EEB10A32BFC7AD653844BEDD957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:78:f1:8d:ff:9d:93:20:c4:07:34:f6:b7:
a9:01:d8:2a:a1:47:2f:55:46:4d:51:b3:fd:ba:c7:
aa:fa:87:fa:3c:b8:d0:54:2c:91:eb:1c:ee:54:a4:
8b:21:eb:a7:54:2f:4a:da:8f:3c:9e:8b:57:b9:2c:
74:b9:b4:f6:d9:a1:56:ab:02:98:03:f4:45:b4:67:
3a:ee:72:d6:f6:d9:3e:39:ee:be:2a:6b:fc:a9:1e:
0b:25:a7:76:2d:53:d3:31:77:04:6e:76:ad:62:23:
df:6e:41:d1:35:1b:37:62:13:dc:ea:3a:5b:28:1b:
b2:14:af:60:6d:ee:63:d0:84:b2:eb:b7:17:af:31:
33:d9:b2:81:0c:57:4c:c1:f0:4a:90:ab:9e:aa:3d:
d2:37:cd:5a:85:fc:0d:21:f3:03:0a:10:c1:d7:bd:
f0:36:fb:88:33:c3:eb:a5:3b:25:3a:7e:9b:4e:b1:
e5:c1:b2:28:00:82:5b:26:74:38:92:87:90:61:bd:
50:9a:0a:4c:6c:b9:4f:bb:34:00:23:4b:e8:a3:f6:
2e:a4:60:d0:bc:11:91:58:39:93:09:4e:d5:16:6c:
fc:43:82:10:e1:89:c6:e4:7d:42:4e:35:64:db:4a:
a8:b1:7b:8b:8b:79:28:55:1c:c9:0a:51:f2:a7:17:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:48:7D:10:02:19:9E:EB:10:A3:2B:FC:7A:D6:53:84:4B:ED:D9:57
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.70.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:ea:09:e0:af:c8:34:6f:c4:d7:13:79:2c:3f:45:28:23:27:
51:c2:c4:84:46:50:94:56:4e:1c:f9:80:93:28:f0:40:c7:e4:
84:bb:87:bd:60:e5:c0:80:79:04:75:75:4e:f0:5e:54:27:b9:
45:b8:65:ea:87:c5:c0:92:a1:1c:15:46:4e:38:33:da:68:ad:
66:b5:c8:9e:52:1c:82:9f:9a:bd:00:7b:e5:02:56:50:a3:db:
0b:15:b3:10:7d:3c:2d:f1:c0:0c:4a:d7:53:11:8b:a3:f7:01:
0f:fb:d0:82:de:d1:3e:ab:db:68:6b:b0:1f:b5:58:df:4e:77:
2b:fa:c0:79:d4:50:5b:18:1a:34:01:70:67:02:d0:1f:5e:65:
d4:24:95:3c:1f:e6:3a:cd:3c:c6:f1:a8:29:17:18:d7:b5:1f:
ad:2c:eb:6c:ba:17:2d:02:4b:c4:25:29:d0:b3:14:5c:45:82:
a2:29:83:a4:a0:14:88:cc:4f:ba:1b:08:f1:b7:c9:9a:10:33:
62:e7:de:10:9e:65:47:99:e9:92:a3:fd:79:7a:7d:45:ed:a5:
c3:69:da:9e:22:2f:49:49:7e:0c:a0:25:bd:d8:46:69:63:34:
0f:ea:71:58:a0:43:5b:2c:10:5e:cf:58:7c:20:a8:2a:9a:dc:
ed:ec:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net