Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134362e302f32342d3332203d3e20313336373837.roa
File: 3138352e3232362e3134362e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 1th4Cp6Jckw7bPxdoP0Po2oaFvd2iurHMuI0+DrYI6Y=
Subject key identifier: 65:09:B8:14:EE:5C:FC:D6:AD:DC:80:A5:3A:5B:45:33:C1:0D:B5:11
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 19CFA32A3CC5A593E02DF91535797ECBAD9F5FCD
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134362e302f32342d3332203d3e20313336373837.roa
Signing time: Thu 29 Dec 2022 11:25:46 +0000
ROA not before: Thu 29 Dec 2022 11:20:46 +0000
ROA not after: Thu 28 Dec 2023 11:25:46 +0000
asID: 136787
IP address blocks: 185.226.146.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:cf:a3:2a:3c:c5:a5:93:e0:2d:f9:15:35:79:7e:cb:ad:9f:5f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 29 11:20:46 2022 GMT
Not After : Dec 28 11:25:46 2023 GMT
Subject: CN=6509B814EE5CFCD6ADDC80A53A5B4533C10DB511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:56:6d:b0:f2:74:d7:6b:1e:ec:5c:00:10:
51:7d:a7:7c:0f:31:3c:3a:39:b0:1b:3a:8c:04:b2:
16:98:d7:80:07:cb:42:3e:4c:ad:d9:60:67:2e:00:
f4:82:7d:12:cd:8c:bb:81:e6:ae:9d:dd:dc:e8:dd:
3b:a8:58:eb:b6:a0:b8:ca:3e:e1:c1:09:b5:79:4c:
ff:b3:fc:75:d6:df:78:a4:02:cf:10:ee:e3:33:a0:
97:ee:c4:11:e2:47:5e:76:b3:e0:3d:df:5f:8a:d4:
74:b5:ef:4a:d6:48:77:a7:70:6c:2a:ed:2c:10:c7:
39:13:e6:48:fb:e8:32:8e:b3:d0:d8:e6:e7:25:b6:
df:46:89:c1:9c:03:af:85:49:f5:e2:41:1f:2d:95:
bf:17:04:17:70:26:70:33:ec:2a:be:64:76:f9:48:
7a:41:35:3f:7d:4f:6a:c7:f9:10:82:20:98:0e:03:
f8:cd:a9:b8:0a:be:e2:f3:08:64:de:e7:0d:5a:01:
56:45:bc:9b:08:ab:4c:00:1a:4f:b5:5a:e4:55:92:
31:f7:c6:83:99:c5:f7:21:0b:97:93:0d:cd:0f:16:
a1:6f:c6:83:be:7f:d2:69:97:af:84:9b:0c:3a:56:
4f:31:3d:e8:17:12:ed:58:2d:4b:0d:11:0f:b2:2e:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:B8:14:EE:5C:FC:D6:AD:DC:80:A5:3A:5B:45:33:C1:0D:B5:11
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232362e3134362e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.146.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ee:06:f9:a1:34:3c:47:cb:73:a6:1e:e7:d7:42:1d:5e:12:
ad:25:02:61:86:0f:a9:5a:4a:9f:c0:92:a3:39:15:9d:87:cf:
17:cf:08:09:38:83:1f:ed:89:47:83:b6:a3:9e:49:01:76:37:
27:47:69:dc:f1:2f:af:1b:f0:27:73:21:a7:8e:c5:41:bf:17:
e2:12:c4:90:36:5c:7e:7a:08:9f:43:37:1f:4e:ad:fe:5c:69:
fd:f1:7c:e6:b3:18:1d:ef:a2:d1:55:a7:2c:41:28:76:53:bf:
2e:28:c9:17:59:48:4f:e2:22:e5:d2:14:26:44:11:fb:d7:e7:
eb:e0:7a:14:b9:54:56:bf:3f:ea:ea:53:06:c9:cd:34:f7:6b:
b1:d8:7e:e9:53:4e:fc:47:65:44:81:15:59:9d:5d:c3:10:18:
a9:d1:a3:b5:9c:38:7e:1e:ce:6c:52:c3:a0:14:d5:87:9e:16:
e6:55:c4:cc:79:c9:41:33:e5:47:62:1c:3f:72:f5:7a:7c:c6:
1c:a9:b5:2c:f9:6e:e6:40:37:fd:fa:3c:2f:fd:65:c1:fc:fe:
5c:9c:67:6d:49:2e:60:07:26:aa:c1:6c:cd:ea:96:88:16:1f:
46:86:b5:f7:4d:33:16:cb:71:93:45:26:72:89:8c:bb:bd:50:
66:9a:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net