Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323132323938.roa
File: 3138352e3233302e3133362e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier: svlbZ9pFRSr7I67JVOHp+jsyzowDPDdXaLOUgZs3vHI=
Subject key identifier: 8D:0D:CB:30:8F:7E:2F:78:A6:8F:E2:80:58:0C:CB:41:7E:7D:5F:2F
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 1C70694525EBC02E115C6D9DCD2760E481013578
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323132323938.roa
Signing time: Sat 22 Oct 2022 04:34:21 +0000
ROA not before: Sat 22 Oct 2022 04:29:21 +0000
ROA not after: Sat 21 Oct 2023 04:34:21 +0000
asID: 212298
IP address blocks: 185.230.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:70:69:45:25:eb:c0:2e:11:5c:6d:9d:cd:27:60:e4:81:01:35:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:21 2022 GMT
Not After : Oct 21 04:34:21 2023 GMT
Subject: CN=8D0DCB308F7E2F78A68FE280580CCB417E7D5F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:ba:d6:45:71:64:81:e9:68:0e:27:da:de:
54:a9:f9:7e:63:fd:1f:86:b2:e6:4f:e7:0a:6b:50:
d1:da:a0:8f:80:ff:ce:4f:19:59:6e:c1:e7:97:6a:
d9:99:37:0d:0e:2b:46:96:58:13:32:68:45:e2:10:
77:68:e0:fe:de:c8:f0:6a:eb:09:c5:ec:55:65:83:
b4:67:83:e8:8a:7e:6e:f8:19:55:94:1c:f7:d0:bc:
05:65:e4:ae:fb:17:e7:83:3c:04:03:9f:a7:fe:56:
8c:de:b7:cc:2a:5b:4c:9c:b0:82:a2:28:e0:c4:0b:
77:bd:b8:e3:de:2c:c7:6a:79:55:2e:5a:b2:a1:3d:
3c:ea:d4:cf:59:7a:2b:7b:b7:4f:cc:84:7c:00:8b:
02:a3:7a:01:8d:7a:9f:14:75:b6:a1:c4:46:bb:75:
f5:8c:be:0f:a8:68:d2:a6:b6:e9:17:47:7b:78:04:
2e:5a:b1:67:6d:5b:e4:78:93:d9:59:c4:5b:bc:68:
4f:69:9c:7d:70:1f:7c:46:b5:52:d8:0f:05:bf:bf:
54:9c:bb:16:83:5c:2a:1b:7a:c2:6e:09:ad:4e:90:
4a:ad:c6:1c:1b:dc:92:a3:53:5e:bd:9c:9f:f2:f3:
f4:47:4b:99:63:58:0f:cd:e0:d3:39:40:a4:de:1b:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:CB:30:8F:7E:2F:78:A6:8F:E2:80:58:0C:CB:41:7E:7D:5F:2F
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323132323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.136.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:85:ca:e3:c4:74:1e:33:6a:a0:54:97:73:85:60:e6:9d:bc:
57:81:98:21:7b:6a:29:f9:6a:c2:f6:6b:a0:60:a7:b7:7f:0d:
15:18:29:3b:01:8f:df:97:32:26:6b:54:6f:8a:11:70:73:cc:
6c:dd:a8:02:4b:d9:e4:24:45:e2:8e:34:ce:30:8a:c0:ce:24:
20:82:40:61:80:4e:30:65:56:59:73:47:f7:53:2f:75:b8:ac:
ac:55:34:a8:1c:2e:da:3a:2e:63:db:b1:3e:7c:6e:b0:a3:39:
de:64:ce:1f:45:e0:0a:d9:67:59:7d:1f:fe:14:09:c2:7a:18:
e0:4d:a2:f0:7d:c9:34:71:b7:1d:ca:4c:1d:19:13:eb:ab:f6:
7f:78:a1:2f:5f:93:c5:59:d0:c2:be:4b:82:25:7a:0a:4b:91:
9b:7f:36:e4:39:b6:7e:a5:07:0c:17:7c:36:a0:6b:67:08:78:
3b:6d:2e:aa:3e:22:c1:a2:f0:7a:df:4c:7f:cb:1c:d5:36:e5:
3f:18:61:fb:44:ab:b0:54:ec:c1:a4:10:3e:08:0c:56:02:a7:
01:0c:26:94:c0:95:8e:d9:18:f0:46:16:69:d2:0b:ad:13:9a:
fa:45:87:87:ba:8d:80:fe:85:b9:85:48:7e:e5:06:13:dd:29:
c1:dc:3e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net