Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3233203d3e2030.roa
File: 3139342e3139352e38382e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: l2fIGrESSc982dhnUdrakzB7n0EKhaa36tzvcfM3dhk=
Subject key identifier: BB:13:67:06:98:2C:25:16:15:6F:AB:14:27:77:25:E7:62:AB:E0:D5
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 52B11F17B5CA4DBD700C19483F2754C37FEB5C09
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3233203d3e2030.roa
Signing time: Sat 22 Oct 2022 12:44:26 +0000
ROA not before: Sat 22 Oct 2022 12:39:26 +0000
ROA not after: Sat 21 Oct 2023 12:44:26 +0000
asID: 0
IP address blocks: 194.195.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b1:1f:17:b5:ca:4d:bd:70:0c:19:48:3f:27:54:c3:7f:eb:5c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 12:39:26 2022 GMT
Not After : Oct 21 12:44:26 2023 GMT
Subject: CN=BB136706982C2516156FAB14277725E762ABE0D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:a8:86:f8:dd:4e:8b:79:bd:9e:eb:b3:0e:
0c:05:b7:31:96:8f:60:17:c1:78:b4:37:55:1e:63:
bf:1f:df:a4:d5:13:fa:69:4b:da:4f:4e:6d:ef:25:
86:f9:bf:b9:ac:94:8d:1c:3a:d2:dd:48:3f:e4:83:
ea:3c:a4:b8:52:d0:85:8e:97:ab:89:17:5c:33:f7:
94:1a:cc:b0:72:8c:3e:fb:63:ad:b6:83:c6:fc:19:
f2:fe:77:cf:44:05:c3:03:0d:a8:ca:d9:4b:e4:f6:
94:65:fe:6f:5c:e2:d3:67:f2:7e:29:d8:d7:d8:4d:
bf:ad:9f:0c:07:53:8c:80:49:4d:11:3d:33:19:fd:
4d:27:d6:dc:36:7a:01:32:88:92:30:ae:4c:a7:0c:
0b:dc:e2:53:9a:4a:cf:db:ec:87:4b:92:4c:cc:67:
51:8c:f4:69:84:d4:3a:96:62:d4:b9:3f:2d:a7:13:
95:e8:31:53:3b:42:98:79:be:d3:1f:df:d2:3f:41:
3f:78:8b:dc:77:1d:f5:a4:d5:73:07:db:fd:64:98:
34:a6:ef:e7:54:84:d7:d1:7b:e6:04:2a:d4:dc:2e:
88:62:83:08:0f:78:d9:ee:77:1c:53:fe:9b:1d:22:
cf:9c:8b:f3:da:d9:0b:22:c0:5e:26:9e:a7:aa:54:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:13:67:06:98:2C:25:16:15:6F:AB:14:27:77:25:E7:62:AB:E0:D5
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.88.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:7e:70:af:ff:c9:72:0f:22:14:01:f7:5c:70:86:85:cb:21:
65:be:f7:27:2f:c5:ff:c6:f4:f8:9d:6d:9c:a9:4b:8a:5a:99:
59:a2:9f:d6:f3:da:fd:b4:b2:b0:ac:5b:da:ab:dd:a7:e6:83:
f9:d7:39:13:46:b1:bc:d0:b4:88:2f:9e:b3:7f:85:b2:94:52:
11:e8:27:00:a9:18:e4:2c:fd:0b:f9:ca:97:92:89:49:bf:a4:
3d:9c:1f:b5:e4:d1:c7:7e:e9:a4:96:d2:cf:6f:48:87:c9:eb:
de:5f:1d:1b:80:04:01:ca:bb:bf:53:f7:28:91:c6:c1:a2:61:
8c:8a:6f:e6:2b:10:cd:e1:57:9b:34:96:8e:e3:b9:6c:29:21:
54:f4:75:f5:da:0d:a3:14:5c:bc:04:d0:b2:09:9b:27:77:72:
0a:3b:6d:60:ed:e5:79:41:a8:db:a5:13:ae:97:e2:71:5f:2c:
c9:b8:d4:fe:2b:43:21:b5:b7:9b:4d:aa:11:99:ee:80:70:55:
c7:69:5f:11:be:f1:10:a5:1c:1b:6f:6d:ef:19:c2:86:fe:c9:
97:33:48:3b:3f:85:46:9d:e6:73:13:4e:8e:e3:c4:08:62:f9:
01:f1:26:ad:f7:3c:73:24:5d:f8:c3:5b:59:14:f7:15:bd:79:
29:fd:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net