Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3136332e33322e302f32312d3234203d3e203437353833.roa
File: 3139342e3136332e33322e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 1d6Z9l44cTfJ/wpGtl7sCpGcdM6Wi5sjPHKdJ8Qa7lg=
Subject key identifier: EE:6D:2A:AB:A4:D0:E0:A9:88:FC:4A:31:B1:7A:23:45:49:E6:5C:E6
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 73551C98E10A3A333E677992E3896D95327386F1
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3136332e33322e302f32312d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:34:36 +0000
ROA not before: Sat 22 Oct 2022 04:29:36 +0000
ROA not after: Sat 21 Oct 2023 04:34:36 +0000
asID: 47583
IP address blocks: 194.163.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:55:1c:98:e1:0a:3a:33:3e:67:79:92:e3:89:6d:95:32:73:86:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:36 2022 GMT
Not After : Oct 21 04:34:36 2023 GMT
Subject: CN=EE6D2AABA4D0E0A988FC4A31B17A234549E65CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:55:26:6d:77:1f:0e:64:e6:38:f5:b7:e5:
59:59:de:3e:60:d9:1d:70:35:70:e7:e0:30:45:21:
ab:05:fd:98:0d:64:b5:f8:96:49:20:69:99:c3:14:
33:f2:49:69:68:a6:1e:05:7d:b1:c6:8f:5b:16:e3:
37:d3:4c:c0:57:72:4d:eb:53:18:c7:67:15:a8:ca:
cf:eb:9e:2b:67:d5:2e:9d:7d:78:5f:82:4e:85:87:
15:21:92:64:4c:a1:81:13:d7:d9:19:a1:e8:23:31:
c3:95:ef:cc:bc:3d:7d:e3:22:ca:12:0d:10:f4:fc:
c5:f9:7e:6d:a2:b7:2c:a2:47:9e:aa:83:e5:94:8a:
f4:23:df:6a:3f:a6:79:9f:04:90:42:81:9a:1b:98:
6c:3d:d6:48:54:cb:ab:48:92:93:25:2e:33:29:38:
b5:b5:fb:55:c2:0f:1a:26:74:cd:58:9a:0a:b7:ab:
3c:74:3e:a0:fc:50:cd:2c:45:0b:7e:b8:c7:01:d4:
66:92:1a:61:a4:26:e2:88:9c:c8:2f:3b:56:71:30:
e8:2d:f8:cc:6c:a6:22:71:24:86:88:87:f0:7c:5b:
53:42:e3:19:1f:23:77:c5:71:50:9d:fd:ef:fe:b2:
68:9a:01:6b:c5:25:e8:d5:62:08:dc:4b:ef:cc:bc:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6D:2A:AB:A4:D0:E0:A9:88:FC:4A:31:B1:7A:23:45:49:E6:5C:E6
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3136332e33322e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.32.0/21
Signature Algorithm: sha256WithRSAEncryption
21:bb:b5:ed:fa:78:25:bc:b9:35:4d:90:3b:b7:77:30:4e:db:
91:89:d7:90:d8:01:38:25:0a:85:19:4f:80:9c:df:54:be:ff:
8c:09:f2:99:e4:0c:12:db:7b:57:35:24:5a:c9:69:6a:7b:8f:
b6:ed:38:4e:19:b9:f9:40:2e:a2:9d:8d:56:11:2e:74:23:22:
71:50:e0:18:25:a2:20:ac:a2:4e:e0:dd:93:de:f0:d4:7f:99:
7d:2d:5a:64:ea:f6:31:57:25:88:78:04:fd:3e:35:94:41:22:
cd:27:c5:c8:42:08:60:bd:e8:d4:e0:28:73:84:45:1a:f6:e1:
71:eb:9a:aa:cf:31:03:68:82:af:d7:33:ef:9e:c0:49:9b:58:
8a:33:0f:b0:2b:0b:c6:b7:a4:c6:c7:b1:83:8b:0a:04:73:df:
7a:68:aa:24:0e:33:53:aa:32:ae:ff:0c:c5:4d:bd:5d:18:d2:
6b:10:ce:2f:5e:d0:f2:05:d5:d5:86:6c:74:bb:b4:a5:20:56:
27:0f:5a:b8:9d:ea:f4:a4:8e:e5:d4:d7:2c:48:d5:ea:36:b6:
bc:81:1e:44:70:31:48:7d:1f:39:fa:dd:67:e2:35:d9:fb:53:
e2:6e:bb:ad:dc:17:fb:96:05:e3:b2:84:6f:b7:18:6d:d2:18:
7d:44:75:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net