Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134342e302f32342d3234203d3e2030.roa
File: 3138352e3232362e3134342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 1XnNWrvSxWMVpruLxbynhZVDZ3sY98eRnWL+fSp7Pjk=
Subject key identifier: 39:8E:81:B8:36:21:F1:AF:3F:12:D5:94:A6:97:6E:DF:CF:E8:C5:BE
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 5E07309DD63A4A68C37F4C5310EBAA721A8992C1
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134342e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:38:35 +0000
ROA not before: Fri 03 Mar 2023 15:33:35 +0000
ROA not after: Fri 01 Mar 2024 15:38:35 +0000
asID: 0
IP address blocks: 185.226.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:07:30:9d:d6:3a:4a:68:c3:7f:4c:53:10:eb:aa:72:1a:89:92:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 15:33:35 2023 GMT
Not After : Mar 1 15:38:35 2024 GMT
Subject: CN=398E81B83621F1AF3F12D594A6976EDFCFE8C5BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:c4:6f:84:48:26:b5:5e:c0:81:59:84:3a:
df:ab:5f:8b:9d:f1:ac:a7:2d:d5:c0:0c:2d:62:45:
0a:32:0e:df:df:29:4c:5c:d6:34:e2:54:34:f7:b3:
3d:fa:9c:5c:06:91:42:23:b7:bd:01:ab:c4:3e:0d:
bb:ca:d0:59:92:43:20:06:9d:f6:c1:58:b9:da:66:
71:78:d4:90:94:ca:2a:a9:46:ff:9c:04:5e:13:da:
ad:03:38:bb:4a:29:96:6b:4f:9f:27:40:39:52:0e:
95:89:7d:84:9a:4d:02:b3:f8:4c:40:53:f8:6b:4c:
ac:26:da:0e:8b:1c:e4:15:79:a0:12:0f:31:6a:12:
68:e7:13:38:87:7b:77:72:8b:1b:44:c6:bd:c3:51:
06:f3:a4:ac:9f:40:77:07:d3:38:85:e0:91:43:c5:
39:13:90:7c:49:9c:4f:7a:28:59:53:de:c7:f8:12:
a3:40:ce:20:87:c9:97:b8:8b:9f:b8:4e:b2:0d:ea:
7c:ff:cc:50:bc:87:c5:b5:f8:8a:6c:51:d0:65:35:
24:96:63:2f:0b:f8:45:b4:86:70:f8:0d:d7:af:a1:
5a:97:53:ef:ee:07:67:8f:70:4b:c6:9e:86:2e:18:
f0:7c:fa:ef:a5:cb:bd:80:2e:49:ce:8b:92:18:08:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:81:B8:36:21:F1:AF:3F:12:D5:94:A6:97:6E:DF:CF:E8:C5:BE
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.144.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ee:33:6d:19:5a:16:ed:1a:2b:4f:e4:57:22:eb:a1:d5:b4:
7e:e9:d6:7f:d6:a9:73:8e:82:a5:2c:44:04:26:ba:3e:99:23:
7e:35:1b:0c:05:82:88:1e:53:ef:57:d6:11:a2:ae:eb:1e:63:
0c:1a:be:36:77:ce:83:66:b8:19:84:e2:e5:3e:b1:71:ff:b7:
9b:54:d0:87:18:61:38:4d:ec:6c:b7:ea:8c:af:18:b7:d3:e5:
4e:20:ac:33:68:6f:2e:82:87:b7:e7:1b:53:63:07:9e:0b:11:
bc:b7:60:89:a0:1b:01:6e:14:3b:d8:0b:f0:35:63:66:e2:4e:
e2:1c:3e:3e:1d:2f:a3:1d:ac:93:2d:6f:ba:1a:1b:bf:76:a3:
fe:54:0f:34:bf:4f:db:f5:36:4e:27:07:bc:91:bb:eb:c3:db:
de:7d:75:e6:b9:ea:91:aa:fa:0b:a5:f3:5c:17:39:8a:19:c0:
a2:66:a6:58:5f:1e:93:0a:e8:df:61:e9:ff:5d:06:9c:6b:31:
c7:77:75:17:e6:69:74:81:08:b5:aa:8a:5d:b1:ee:8d:3b:e4:
23:eb:4e:b1:4c:49:f3:a9:83:b0:b0:78:58:c2:13:53:b7:17:
f7:e8:e1:f4:b5:ba:c2:eb:21:93:e2:2b:55:86:5c:f8:88:65:
ef:d1:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net