Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232352e3133382e302f32332d3234203d3e2030.roa
File: 3138352e3232352e3133382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: 84WFQM7z4+XngeOpqYqdS69JKQyvFK0TTCW4Z16qyzY=
Subject key identifier: 3E:2D:B3:28:4C:CD:A7:32:91:46:78:C0:28:DC:29:AE:40:E4:FA:93
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: F5BDC8B7A04DB10E0E0A24B0DEA693E52B89E4
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232352e3133382e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:38:08 +0000
ROA not before: Fri 03 Mar 2023 15:33:08 +0000
ROA not after: Fri 01 Mar 2024 15:38:08 +0000
asID: 0
IP address blocks: 185.225.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f5:bd:c8:b7:a0:4d:b1:0e:0e:0a:24:b0:de:a6:93:e5:2b:89:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 15:33:08 2023 GMT
Not After : Mar 1 15:38:08 2024 GMT
Subject: CN=3E2DB3284CCDA732914678C028DC29AE40E4FA93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:80:63:28:39:6e:52:15:1a:0f:55:97:c9:
94:a6:4f:c6:d0:f8:24:85:04:02:e0:49:3c:13:37:
9d:71:c5:39:78:d6:27:2d:24:68:6a:1d:89:09:87:
45:14:b0:2c:f4:b7:cf:47:97:1b:b7:a3:f7:95:dd:
82:b7:e8:b7:c1:ef:cf:7e:48:99:5c:33:23:54:f6:
20:aa:38:6d:52:a7:98:d2:10:0c:fe:6a:44:8b:de:
d3:05:6f:47:ff:e2:53:25:66:35:53:6e:0f:07:5f:
a0:32:2e:42:2a:5a:46:0d:fc:47:ba:34:b3:b9:20:
69:7d:fe:17:da:13:e6:04:0d:c9:f6:a5:89:b2:29:
ad:88:57:c1:9d:cd:a8:8b:00:03:9a:0f:50:ca:07:
c8:fe:1d:e2:05:8f:c8:8c:7e:28:70:aa:73:e8:8b:
fa:37:52:d9:68:5b:89:1c:86:50:4d:f1:d2:ad:90:
d7:43:97:22:40:e4:a3:08:38:e0:e0:da:ed:ef:5d:
a6:91:3c:1e:d2:63:2a:41:9f:3f:fe:49:30:62:5c:
4a:1e:61:9f:9c:e0:3a:18:a8:f4:91:3e:22:94:11:
f7:3b:3b:9f:51:ce:d1:89:08:8a:79:44:d4:90:69:
fb:c5:f3:65:76:a0:04:54:24:5e:a3:63:b1:5e:31:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2D:B3:28:4C:CD:A7:32:91:46:78:C0:28:DC:29:AE:40:E4:FA:93
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232352e3133382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.138.0/23
Signature Algorithm: sha256WithRSAEncryption
70:e3:65:af:91:32:df:b6:13:f2:38:b0:14:ee:ba:2d:81:8f:
69:12:db:15:30:72:48:17:8d:4b:e0:a8:b0:eb:dd:95:9c:e0:
ed:f5:31:7a:21:da:b8:cb:a5:14:2c:74:d7:7e:2f:5e:57:0b:
e7:3a:04:0a:fe:b9:09:10:36:f3:47:a1:5b:47:62:77:30:0a:
dd:f1:b0:77:3f:ed:18:41:4d:27:6a:97:e5:d6:fd:42:5e:75:
ba:d7:21:4b:8a:f9:7e:00:53:be:10:52:93:6b:bf:ab:4d:c9:
c3:ac:9f:b1:b6:a5:59:39:18:75:70:e7:15:42:41:49:30:2d:
9c:db:0e:bd:17:37:04:a6:51:21:28:88:4c:14:e0:b9:11:aa:
fc:ba:e1:e4:a5:02:fd:38:72:ee:03:29:3d:50:b7:4c:04:50:
18:f4:70:88:2c:0d:ad:96:4d:50:fe:d6:31:76:47:68:68:ae:
66:0e:46:ff:1a:b6:b3:e6:1c:0e:b7:ce:5d:12:fc:70:80:88:
a7:52:76:bf:ba:ae:27:5e:11:08:58:1e:f4:1e:99:32:a7:49:
98:b2:d5:c8:59:ef:a8:c1:9d:ff:84:8f:b9:22:c3:e6:73:a4:
e6:1e:41:82:7e:25:24:39:40:d6:6b:21:87:78:da:69:37:b6:
96:60:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net