Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232382e31392e302f32342d3234203d3e2030.roa
File: 3138352e3232382e31392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: YliGaq8RlTn2H0eaZwhfab/ITmeJyfEQFPPIM1vi59E=
Subject key identifier: 39:29:7C:7F:21:A4:29:09:0D:5A:32:06:70:E9:0B:AC:CA:21:DE:44
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 5FC949DACD9851843CFF1C73D708BB16D4D5D9C7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232382e31392e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:39:41 +0000
ROA not before: Fri 03 Mar 2023 15:34:41 +0000
ROA not after: Fri 01 Mar 2024 15:39:41 +0000
asID: 0
IP address blocks: 185.228.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c9:49:da:cd:98:51:84:3c:ff:1c:73:d7:08:bb:16:d4:d5:d9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 15:34:41 2023 GMT
Not After : Mar 1 15:39:41 2024 GMT
Subject: CN=39297C7F21A429090D5A320670E90BACCA21DE44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:60:0a:8c:07:39:40:0c:3c:b6:97:b1:5a:
3d:a9:99:b1:7c:9e:35:cb:09:a0:9d:6f:de:7e:9b:
ee:7b:4b:2b:40:a5:4a:90:0e:4a:e4:47:c9:ef:a4:
5e:10:c2:40:9b:07:f3:5e:28:13:98:23:97:6a:04:
69:de:16:2b:c5:ca:48:8d:dd:8a:b0:07:8e:61:7e:
87:b6:a6:28:1b:cd:05:67:b5:5a:46:bf:4d:ae:13:
60:b6:a2:c5:7c:fe:25:17:8b:1b:77:ef:bc:92:3f:
bd:18:c0:5d:49:aa:83:71:a8:d5:64:cb:88:83:d5:
22:90:c3:05:2b:59:50:96:80:d5:c4:a9:95:b3:66:
63:af:75:9e:35:c1:02:33:3b:df:6b:9a:b9:bc:71:
d9:e7:c4:83:f7:10:a2:7d:19:b8:cd:5b:dc:71:c3:
fb:ea:92:08:e2:24:cb:2b:f9:cf:ec:92:5a:fe:ec:
03:3e:cc:f3:e5:37:77:fb:82:60:2b:f1:7a:d4:66:
65:ad:70:18:6a:2e:d0:2a:6d:b5:66:a4:33:3f:46:
7a:09:a4:ba:e3:a4:88:28:30:69:38:98:cf:b2:5a:
4b:7b:33:57:e9:35:79:35:5e:7a:cc:fc:76:8d:f3:
f9:cc:6e:17:84:9c:19:e5:5b:9c:2d:2a:26:6e:64:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:29:7C:7F:21:A4:29:09:0D:5A:32:06:70:E9:0B:AC:CA:21:DE:44
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232382e31392e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.19.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e1:2d:d9:28:cd:3f:1f:18:45:a7:57:b0:c4:af:d8:ec:3b:
4e:3b:cb:34:a3:35:07:8f:e0:cd:d9:c1:87:46:58:b0:cb:dd:
6f:a9:3a:30:6b:f8:88:4f:32:c3:27:5a:60:2f:7e:fa:a9:47:
9a:96:f2:d7:b7:b6:a5:c9:16:b9:c8:de:38:80:4a:ae:b7:b3:
4e:30:ab:b8:1f:c6:40:ad:d8:5d:bc:dc:84:79:ab:ac:e0:93:
e6:dd:31:21:d6:ef:d9:fd:eb:5f:a2:7c:16:a7:25:cc:da:e9:
41:c8:8f:b7:ef:ce:a3:30:71:41:4a:f2:9b:ac:a1:af:cc:b4:
de:78:76:57:79:80:62:56:68:95:be:cb:42:cd:be:0b:2d:ff:
1c:4c:af:8a:bb:ef:77:9f:26:ce:62:75:2d:57:f7:70:c0:93:
11:9c:6d:7c:63:1f:9f:79:f9:74:f3:8e:6f:cd:35:cf:28:ea:
67:75:a0:10:89:05:cc:98:25:2d:4a:f2:93:e4:ac:22:69:91:
5f:0d:fa:43:84:8d:65:8d:b6:c1:8b:d3:66:75:62:1c:ae:59:
90:74:e4:d4:07:53:28:10:ba:90:f2:66:98:80:75:82:43:c5:
0e:bb:98:58:12:92:39:47:29:a4:5f:8a:3e:c3:46:ac:3f:eb:
53:69:8a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net