Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232322e3133362e302f32332d3234203d3e2030.roa
File: 3138352e3232322e3133362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: +OSD74peWqVi4ocSlZMuPgMd5QbTq2uonmBvef4cObE=
Subject key identifier: 72:31:14:22:53:8A:A6:44:A6:92:CD:11:C2:2F:46:19:30:0F:C9:B0
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 02C4AEC61F92DA408B8FA2F576F1568FCAFC6CE9
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232322e3133362e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:37:06 +0000
ROA not before: Fri 03 Mar 2023 15:32:06 +0000
ROA not after: Fri 01 Mar 2024 15:37:06 +0000
asID: 0
IP address blocks: 185.222.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c4:ae:c6:1f:92:da:40:8b:8f:a2:f5:76:f1:56:8f:ca:fc:6c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 15:32:06 2023 GMT
Not After : Mar 1 15:37:06 2024 GMT
Subject: CN=72311422538AA644A692CD11C22F4619300FC9B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:e6:35:73:02:b0:e5:8e:1c:de:a0:e6:f0:
42:10:c4:45:c6:78:ea:9d:66:64:5c:60:00:93:c9:
14:5c:79:e2:6a:60:c4:4d:43:b5:73:a2:cf:84:74:
a9:f0:46:13:28:80:90:ef:c7:e0:80:c8:30:1c:24:
f7:87:7d:2c:a6:b8:1d:7d:56:cf:cf:ae:df:0a:67:
5d:d1:29:20:10:c3:84:32:0e:5e:78:25:3c:30:97:
50:d9:26:a6:01:59:83:6f:de:65:dd:30:86:8a:76:
e9:2f:48:ee:dc:f5:6e:01:a9:1d:ba:b6:0b:01:c2:
2d:f2:73:78:d1:19:0b:e6:33:63:d8:d3:47:71:7a:
ec:6c:cb:5a:70:64:98:15:dc:6b:05:db:c2:cf:18:
93:92:56:5f:7b:a6:b3:7d:01:63:65:96:ad:0e:6c:
4f:b1:db:56:41:0f:24:35:24:56:fc:67:66:7d:84:
48:18:d6:bd:87:17:71:ad:0a:99:27:f0:8a:f2:45:
8a:60:31:8f:19:7d:6f:ce:ab:8f:45:3b:97:ba:f4:
5e:9b:39:e7:4b:ed:80:54:cb:d2:e1:16:92:ce:ae:
32:f6:27:36:8f:4e:d5:04:6c:f6:09:b1:26:2f:fd:
6a:30:7f:8b:1a:da:13:6c:b1:53:bc:fe:b0:8d:2f:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:31:14:22:53:8A:A6:44:A6:92:CD:11:C2:2F:46:19:30:0F:C9:B0
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232322e3133362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:1d:9c:cb:61:fb:44:0e:02:0c:b4:a3:7e:88:73:a9:7c:04:
e4:ed:cb:10:2b:39:fd:c5:ce:37:70:4c:6d:4d:ae:3c:38:f0:
59:0e:bc:19:6c:c4:de:a3:db:a0:b8:20:88:f0:a8:eb:84:5a:
04:6c:63:a6:e8:a0:0f:d8:5c:f4:d4:0e:9b:25:0d:6c:a7:3e:
13:36:70:69:be:f1:09:df:d2:55:ea:12:ea:99:6e:77:5b:b4:
a5:d7:20:e1:35:0d:c9:0e:ab:36:83:ee:e7:99:9a:44:ff:38:
a9:9e:f2:d3:3d:7f:f6:a4:1d:d9:60:5e:7e:90:7d:4e:bd:46:
95:3e:9e:ca:0a:15:a0:04:7e:d5:d7:0d:6c:de:23:bd:55:e1:
10:71:08:7e:28:46:ba:f9:30:9c:db:da:50:6e:62:22:31:01:
37:ee:87:17:d4:d3:59:1c:4e:99:05:ee:b2:fc:74:3e:46:02:
de:04:9a:44:a1:f8:01:67:01:10:d2:bf:6d:6d:56:93:4c:de:
6f:9c:c2:a4:e5:dc:e4:54:2f:64:de:d3:1f:b0:f8:5d:5d:c2:
f5:00:d5:ed:d5:74:c9:b7:7f:45:b1:9f:49:c0:0d:09:2f:6d:
fd:cb:03:77:f0:93:71:ea:a8:99:22:28:49:8b:1f:5e:65:fa:
ab:02:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net