Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3233203d3e2031323339.roa
File: 3139342e3139352e38382e302f32332d3233203d3e2031323339.roa (raw, json)
Hash identifier: orOBUCubNDBqiDOhVAQ49x5sESsM+BIHuop4Ggu0G6k=
Subject key identifier: 5B:47:4D:A4:C0:9D:32:58:F4:69:6E:67:5C:2E:AD:75:2F:46:53:CF
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 4D4DBE9C654FA522B5468E6AA190A937E5B1B941
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3233203d3e2031323339.roa
Signing time: Sat 22 Oct 2022 04:34:12 +0000
ROA not before: Sat 22 Oct 2022 04:29:12 +0000
ROA not after: Sat 21 Oct 2023 04:34:12 +0000
asID: 1239
IP address blocks: 194.195.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:4d:be:9c:65:4f:a5:22:b5:46:8e:6a:a1:90:a9:37:e5:b1:b9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:12 2022 GMT
Not After : Oct 21 04:34:12 2023 GMT
Subject: CN=5B474DA4C09D3258F4696E675C2EAD752F4653CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:d4:f0:b6:3d:cf:e1:23:0a:d3:d2:43:1b:
6a:a7:01:e3:65:12:a8:a7:53:6b:60:c0:d8:f1:72:
48:b3:a5:6d:dc:29:d8:7c:09:99:6b:4f:2c:cd:07:
d5:40:e5:5c:8f:a5:68:83:89:94:3c:c3:4a:9c:51:
80:1c:5f:94:c5:dd:ca:d2:90:cf:6f:9f:d5:1f:5c:
a0:11:42:67:9e:e9:84:92:f7:10:d8:79:a3:a3:ea:
be:b6:73:18:89:02:8d:39:36:ff:52:0c:40:4c:33:
b9:b5:ac:2f:df:54:d4:6f:b6:5c:4a:56:63:2d:81:
48:36:06:8a:3a:51:22:87:32:1d:d4:fd:b5:58:da:
08:e2:e3:d0:39:2d:ab:5f:d7:ab:b8:ea:cc:b6:d6:
15:d5:f6:6b:ba:e5:7e:b0:7b:2b:14:75:1a:72:fc:
12:23:2e:36:c8:d1:11:ae:a3:dd:6b:6c:34:78:56:
c3:28:7d:b7:bb:7e:d0:57:78:37:9e:34:2d:6a:88:
31:83:17:35:42:f4:f3:c7:00:18:8a:91:11:70:9e:
f2:22:08:78:39:49:fd:71:7b:71:1d:29:c8:4a:ce:
fd:a7:37:28:da:3b:d6:47:2e:52:5d:d1:3e:05:08:
e5:0b:27:ba:65:1d:10:2e:40:a0:96:36:e2:17:ec:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:47:4D:A4:C0:9D:32:58:F4:69:6E:67:5C:2E:AD:75:2F:46:53:CF
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3233203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.88.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:60:c2:9b:d7:3d:18:7e:ec:67:76:09:0e:5e:b8:9c:9d:18:
97:dc:27:ae:4e:55:a6:f0:b4:70:d2:fe:af:3e:a9:e7:53:05:
a4:7c:30:b6:a0:d5:0b:04:68:34:17:39:fc:fd:ff:49:f9:01:
cc:ca:89:79:d4:b1:48:d7:a3:b5:ea:e9:da:17:10:21:05:45:
03:37:6a:48:ef:86:98:ef:7b:42:16:92:37:ad:31:c7:36:33:
74:0f:60:94:b7:fc:92:94:30:d6:1a:39:4c:a2:58:50:b7:57:
67:b8:d9:41:9d:9c:36:55:97:41:58:ef:15:30:32:e1:c5:d2:
b9:c6:eb:9f:39:25:0a:75:29:fe:d8:c4:ec:a3:04:4d:fb:f1:
da:81:8f:fe:7c:a4:86:69:d6:61:c4:38:2c:e5:5a:2b:f9:7f:
db:b4:35:fb:19:d5:1f:2c:56:26:c3:6d:b8:e4:dd:9c:b8:7a:
d0:f1:69:ad:bc:e2:7e:20:c0:65:56:52:40:f0:95:62:c5:b1:
c4:19:bd:68:65:89:aa:d5:68:1e:bc:17:04:e9:b6:a1:13:2e:
76:c9:e5:ac:a0:83:9e:fa:4d:a2:ac:10:8b:c4:74:fe:cb:47:
50:9a:2c:7d:c3:81:6f:20:c1:55:77:93:35:12:fa:8f:fc:0d:
61:2b:dd:f6
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUTU2+nGVPpSK1Ro5qoZCpN+WxuUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MTJaFw0yMzEwMjEwNDM0MTJaMDMxMTAvBgNV
BAMTKDVCNDc0REE0QzA5RDMyNThGNDY5NkU2NzVDMkVBRDc1MkY0NjUzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9tTwtj3P4SMK09JDG2qnAeNl
EqinU2tgwNjxckizpW3cKdh8CZlrTyzNB9VA5VyPpWiDiZQ8w0qcUYAcX5TF3crS
kM9vn9UfXKARQmee6YSS9xDYeaOj6r62cxiJAo05Nv9SDEBMM7m1rC/fVNRvtlxK
VmMtgUg2Boo6USKHMh3U/bVY2gji49A5Latf16u46sy21hXV9mu65X6weysUdRpy
/BIjLjbI0RGuo91rbDR4VsMofbe7ftBXeDeeNC1qiDGDFzVC9PPHABiKkRFwnvIi
CHg5Sf1xe3EdKchKzv2nNyjaO9ZHLlJd0T4FCOULJ7plHRAuQKCWNuIX7BwDAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUW0dNpMCdMlj0aW5nXC6tdS9GU88wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM5MzQyZTMxMzkzNTJlMzgzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMx
MzIzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBwsNYMA0GCSqGSIb3DQEBCwUAA4IBAQB7YMKb1z0Y
fuxndgkOXricnRiX3CeuTlWm8LRw0v6vPqnnUwWkfDC2oNULBGg0Fzn8/f9J+QHM
yol51LFI16O16unaFxAhBUUDN2pI74aY73tCFpI3rTHHNjN0D2CUt/ySlDDWGjlM
olhQt1dnuNlBnZw2VZdBWO8VMDLhxdK5xuufOSUKdSn+2MTsowRN+/HagY/+fKSG
adZhxDgs5Vor+X/btDX7GdUfLFYmw2245N2cuHrQ8WmtvOJ+IMBlVlJA8JVixbHE
Gb1oZYmq1WgevBcE6bahEy52yeWsoIOe+k2irBCLxHT+y0dQmix9w4FvIMFVd5M1
EvqP/A1hK932
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net