Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e3233382e3234342e302f32322d3234203d3e20323034313730.roa
File: 3139332e3233382e3234342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: IZkD4lOs5iNgMr9T3F2Xs3d9sc34T8tF+aXZFn0OLAs=
Subject key identifier: 62:7D:04:BE:39:86:28:17:F7:FB:68:6B:7A:B2:D6:F2:46:8D:45:25
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 2C29760FEFB9DC2CA83C7FE734DE7AA177CB3694
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e3233382e3234342e302f32322d3234203d3e20323034313730.roa
Signing time: Thu 10 Nov 2022 16:26:47 +0000
ROA not before: Thu 10 Nov 2022 16:21:47 +0000
ROA not after: Thu 09 Nov 2023 16:26:47 +0000
asID: 204170
IP address blocks: 193.238.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:29:76:0f:ef:b9:dc:2c:a8:3c:7f:e7:34:de:7a:a1:77:cb:36:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 10 16:21:47 2022 GMT
Not After : Nov 9 16:26:47 2023 GMT
Subject: CN=627D04BE39862817F7FB686B7AB2D6F2468D4525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:28:1e:cf:4c:3c:2c:34:6b:c0:10:9a:41:
c0:14:e8:30:7e:c7:3f:b7:ab:32:a7:95:52:c5:c0:
58:c4:62:7d:54:fc:4e:9c:7f:62:50:eb:11:3d:69:
87:40:f6:c4:cc:a1:be:e4:be:7a:55:b5:08:74:33:
6d:02:e7:b3:c4:42:99:17:80:4e:84:b1:59:cf:03:
b3:83:08:c3:22:e5:f8:96:c9:71:31:cb:8b:b1:34:
d0:e0:56:d9:f6:a6:b4:2f:0f:63:45:d1:ac:97:f6:
96:47:18:d0:b2:c7:5d:99:f3:a4:f0:5c:fb:b1:7e:
31:db:3a:4f:0c:df:b0:a1:4d:4e:54:39:7e:be:a0:
b0:0a:df:a4:c5:bd:1e:4f:51:ed:c2:98:b1:d0:1e:
84:8f:04:5d:10:5a:16:c8:c5:08:72:00:c3:2b:aa:
cc:f2:b8:fe:33:0d:32:41:2b:10:09:1e:16:58:9d:
bc:d2:4e:05:84:20:04:89:ea:5d:8e:5a:44:66:f9:
44:b6:03:da:f8:0d:a2:29:09:bb:8a:3b:d5:bc:47:
a5:6f:bc:ec:cf:ff:f6:4d:9f:a0:89:06:8f:60:91:
9d:8e:aa:f9:e6:c2:cb:ec:e6:3e:d2:bd:dd:dc:b7:
36:7d:be:6b:00:b4:5f:9f:4c:24:61:9d:64:94:38:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7D:04:BE:39:86:28:17:F7:FB:68:6B:7A:B2:D6:F2:46:8D:45:25
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e3233382e3234342e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:e9:5a:15:1f:80:04:af:1e:b7:e2:52:83:13:87:19:44:a5:
e2:c8:1f:93:ad:0f:0d:7e:85:9c:76:41:0b:af:10:e8:fa:2d:
de:03:23:ee:43:b9:f4:2e:0e:ca:06:b6:57:e4:45:a4:fb:0e:
c8:0c:86:13:62:e3:57:36:c5:c3:89:30:56:76:b4:27:ac:36:
6e:94:f1:c3:ce:91:f6:ae:d9:4e:e4:4c:31:44:ee:07:89:97:
23:9e:d6:35:04:10:15:5f:b2:d8:23:f5:1f:77:fa:94:03:b7:
eb:2a:40:b9:b7:f1:01:f6:7c:7b:9b:69:3d:4b:8f:21:08:cc:
6f:d5:6a:0d:27:c9:a8:94:6f:27:a3:1f:1f:b5:ca:7d:42:56:
50:08:93:73:ec:de:b1:00:00:c3:e9:3e:55:22:e2:ce:e8:05:
90:12:76:0d:8d:79:0f:8b:fa:d3:87:32:01:d6:0b:b8:c0:84:
25:fe:a0:ae:c5:f5:59:1e:3f:d8:58:9d:7e:fe:67:13:1b:2e:
dc:47:2b:26:a7:05:c5:9f:e3:d6:c7:2f:eb:90:cb:df:25:dd:
88:b7:74:62:84:d4:96:55:b9:6a:b6:cd:f4:35:b1:8d:34:79:
19:c9:52:7f:44:d6:3c:98:77:fc:66:7d:86:c2:c2:5a:9a:f5:
41:38:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net