Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323132303730.roa
File: 3138352e3233302e3133362e302f32342d3234203d3e20323132303730.roa (raw, json)
Hash identifier: IkMmlonQrSbL2r/DCWIZGiSnCnyuJmyaqZrTw1PL/D8=
Subject key identifier: CF:1C:80:4A:11:A5:80:EC:82:A7:5F:AD:E1:E7:6F:2C:C0:55:12:AC
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 562E238D9755C9B94D494187A49840F231BB411A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323132303730.roa
Signing time: Mon 04 Jan 2021 14:54:12 +0000
ROA not before: Mon 04 Jan 2021 14:49:12 +0000
ROA not after: Mon 03 Jan 2022 14:54:12 +0000
asID: 212070
IP address blocks: 185.230.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:2e:23:8d:97:55:c9:b9:4d:49:41:87:a4:98:40:f2:31:bb:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Jan 4 14:49:12 2021 GMT
Not After : Jan 3 14:54:12 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:51:5d:46:7b:ae:a3:ba:e6:58:76:13:69:
21:64:c2:7e:5a:c5:90:49:fe:12:f7:6b:06:9b:12:
9c:ff:33:3c:7f:f1:97:1c:1b:eb:30:10:63:d0:68:
c1:f3:75:ec:28:0f:c0:93:7a:09:38:3d:c1:63:36:
d5:fe:40:ea:aa:f9:cf:ad:b8:50:90:8a:c0:4f:82:
55:35:8f:c1:45:46:af:fa:7b:25:08:a9:63:30:4e:
2e:bc:d9:3d:07:77:1b:ed:a1:78:56:42:96:0f:13:
d8:d8:da:67:53:1c:0d:5c:93:70:4a:77:80:03:c1:
6d:dc:02:a8:9f:6d:c2:7c:db:42:a1:a2:93:c4:54:
05:73:08:f4:eb:9b:cc:46:63:46:f5:e8:46:e0:01:
d7:ab:31:c1:77:c5:77:30:73:a9:ed:e8:1f:8b:36:
ce:82:94:53:3a:18:bf:14:62:93:ce:2e:fa:6e:70:
c6:a6:57:3b:2b:1e:ee:a1:a1:ce:36:3e:19:47:2b:
53:76:fd:ad:ed:56:53:b0:86:20:b7:7b:d2:65:6d:
31:e2:ac:4b:52:b2:6b:ec:41:82:03:60:08:3d:63:
1d:f6:e8:33:32:42:da:34:c6:fd:6d:0d:35:6c:12:
43:95:8c:3a:27:67:13:6e:b6:53:87:d2:e3:82:c7:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1C:80:4A:11:A5:80:EC:82:A7:5F:AD:E1:E7:6F:2C:C0:55:12:AC
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323132303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.136.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:c6:41:d1:ce:6a:28:32:c1:32:0b:5a:be:8e:e2:82:24:6d:
4d:15:7e:3d:74:1d:ee:c9:bd:87:af:80:38:e1:85:0d:c5:f1:
6e:4d:7d:da:19:93:11:dd:65:8b:ae:52:61:5d:fc:e1:e3:f9:
24:4a:00:96:7e:fb:25:a5:08:02:f6:af:bd:fb:7c:c3:60:e2:
4d:86:1b:d4:84:de:0e:04:e9:64:1e:c2:bb:a2:66:d9:23:46:
98:4b:22:c6:81:9f:61:41:16:9a:f6:a1:2e:cf:bc:b3:f1:a7:
98:24:9f:68:78:9b:32:79:5b:42:1f:52:af:89:2c:88:3b:92:
75:52:87:f3:3c:90:b2:49:5f:fc:cf:3a:83:cd:25:c7:84:b5:
1e:81:ab:fb:0d:2f:1a:d1:5c:2d:ac:50:9c:94:b2:aa:05:ce:
a8:3a:6c:7a:3d:fa:47:85:f3:9f:43:70:4a:6c:d1:b8:72:b0:
80:4e:89:7b:41:50:91:ed:dd:c7:e4:03:8e:58:df:22:b0:a5:
c7:ba:81:6c:7b:dd:53:10:5f:bd:89:47:de:95:b8:48:29:8c:
5f:74:a0:6d:d7:cd:4e:6c:ca:0a:05:04:c4:86:41:b3:39:cf:
46:0e:78:46:12:04:dc:9c:4e:f2:17:02:2a:b8:22:c2:43:97:
3d:19:3a:ae
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUVi4jjZdVyblNSUGHpJhA8jG7QRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMTAxMDQxNDQ5MTJaFw0yMjAxMDMxNDU0MTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg5ODUxNUQ0NjdCQUVBM0JB
RTY1ODc2MTM2OTIxNjRDMjdFNUFDNTkwNDlGRTEyRjc2QjA2OUIxMjlDRkYzMzND
N0ZGMTk3MUMxQkVCMzAxMDYzRDA2OEMxRjM3NUVDMjgwRkMwOTM3QTA5MzgzREMx
NjMzNkQ1RkU0MEVBQUFGOUNGQURCODUwOTA4QUMwNEY4MjU1MzU4RkMxNDU0NkFG
RkE3QjI1MDhBOTYzMzA0RTJFQkNEOTNEMDc3NzFCRURBMTc4NTY0Mjk2MEYxM0Q4
RDhEQTY3NTMxQzBENUM5MzcwNEE3NzgwMDNDMTZEREMwMkE4OUY2REMyN0NEQjQy
QTFBMjkzQzQ1NDA1NzMwOEY0RUI5QkNDNDY2MzQ2RjVFODQ2RTAwMUQ3QUIzMUMx
NzdDNTc3MzA3M0E5RURFODFGOEIzNkNFODI5NDUzM0ExOEJGMTQ2MjkzQ0UyRUZB
NkU3MEM2QTY1NzNCMkIxRUVFQTFBMUNFMzYzRTE5NDcyQjUzNzZGREFERUQ1NjUz
QjA4NjIwQjc3QkQyNjU2RDMxRTJBQzRCNTJCMjZCRUM0MTgyMDM2MDA4M0Q2MzFE
RjZFODMzMzI0MkRBMzRDNkZENkQwRDM1NkMxMjQzOTU4QzNBMjc2NzEzNkVCNjUz
ODdEMkUzODJDN0UzQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyJhRXUZ7rqO65lh2E2khZMJ+WsWQSf4S92sGmxKc/zM8f/GXHBvr
MBBj0GjB83XsKA/Ak3oJOD3BYzbV/kDqqvnPrbhQkIrAT4JVNY/BRUav+nslCKlj
ME4uvNk9B3cb7aF4VkKWDxPY2NpnUxwNXJNwSneAA8Ft3AKon23CfNtCoaKTxFQF
cwj065vMRmNG9ehG4AHXqzHBd8V3MHOp7egfizbOgpRTOhi/FGKTzi76bnDGplc7
Kx7uoaHONj4ZRytTdv2t7VZTsIYgt3vSZW0x4qxLUrJr7EGCA2AIPWMd9ugzMkLa
NMb9bQ01bBJDlYw6J2cTbrZTh9LjgsfjtQIDAQABo4IB9jCCAfIwHQYDVR0OBBYE
FM8cgEoRpYDsgqdfreHnbyzAVRKsMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGN
BggrBgEFBQcBCwSBgDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80LzMxMzgzNTJlMzIzMzMwMmUz
MTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMDM3MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC55ogwDQYJKoZIhvcNAQELBQADggEBAM7GQdHOaigywTILWr6O4oIkbU0V
fj10He7JvYevgDjhhQ3F8W5NfdoZkxHdZYuuUmFd/OHj+SRKAJZ++yWlCAL2r737
fMNg4k2GG9SE3g4E6WQewruiZtkjRphLIsaBn2FBFpr2oS7PvLPxp5gkn2h4mzJ5
W0IfUq+JLIg7knVSh/M8kLJJX/zPOoPNJceEtR6Bq/sNLxrRXC2sUJyUsqoFzqg6
bHo9+keF859DcEps0bhysIBOiXtBUJHt3cfkA45Y3yKwpce6gWx73VMQX72JR96V
uEgpjF90oG3XzU5sygoFBMSGQbM5z0YOeEYSBNycTvIXAiq4IsJDlz0ZOq4=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net