Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3234203d3e20313336373837.roa
File: 3139342e3139352e38382e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: oIcs5j1oLAvLRWCTyP5cihZtisz+3PXDG3CQbBG2pKU=
Subject key identifier: 2F:97:19:88:3B:F0:0C:27:64:83:02:C6:51:BA:36:00:D4:6E:FC:C2
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 195074F9444639FE3A38342A542B9A4996914C3E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3234203d3e20313336373837.roa
Signing time: Mon 07 Nov 2022 10:56:41 +0000
ROA not before: Mon 07 Nov 2022 10:51:41 +0000
ROA not after: Mon 06 Nov 2023 10:56:41 +0000
asID: 136787
IP address blocks: 194.195.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:50:74:f9:44:46:39:fe:3a:38:34:2a:54:2b:9a:49:96:91:4c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 7 10:51:41 2022 GMT
Not After : Nov 6 10:56:41 2023 GMT
Subject: CN=2F9719883BF00C27648302C651BA3600D46EFCC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:56:b7:d2:40:5b:79:0e:c0:98:80:56:1f:
88:f7:a9:62:7d:87:7b:92:65:7f:98:5f:c4:9e:42:
fd:d1:7d:82:6c:d4:2a:f5:aa:f6:89:68:41:da:57:
ed:6e:cb:0a:23:a0:f2:92:de:62:50:06:6c:dd:10:
47:44:ef:13:d2:28:a3:de:8f:0a:d6:9a:37:b2:d8:
3c:c7:a4:e7:80:80:49:bc:b3:fe:44:d7:2b:4d:0b:
05:ec:7e:cc:e0:53:e3:55:ff:95:58:13:50:f1:8e:
72:5b:d9:15:c2:3e:3a:5c:96:97:30:1d:93:ad:25:
81:74:38:23:31:67:42:c0:87:52:53:74:e6:ba:13:
32:c4:82:ea:eb:40:15:0b:0f:07:07:b1:8f:85:e5:
44:89:e1:4b:c1:72:b4:3d:f1:af:96:ec:32:95:84:
9d:9a:a0:a5:2d:93:91:b7:88:75:0c:ab:dd:83:b1:
1e:8a:c2:c2:26:53:75:2b:5c:80:93:f9:34:4f:74:
cd:ee:81:80:d3:32:31:9d:e3:ea:41:7e:a6:b4:d0:
80:d0:76:dc:82:db:67:e3:20:82:27:45:ed:c4:ae:
6b:3b:a4:70:09:50:dd:24:73:58:bc:5b:a6:52:b2:
a8:46:2f:a9:8b:53:dd:63:1c:c7:fa:7d:fb:ac:6f:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:97:19:88:3B:F0:0C:27:64:83:02:C6:51:BA:36:00:D4:6E:FC:C2
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:7f:3e:85:05:5e:23:35:0e:a0:ac:76:6b:2f:7a:4d:ce:0f:
70:f6:6f:58:59:19:3f:8e:36:6a:37:da:ec:eb:3b:25:e2:b1:
c9:8e:fb:d5:b7:08:7e:ac:77:5e:f1:0e:33:be:73:45:c8:6a:
80:99:7b:3d:8b:2a:8f:8d:2d:5c:1f:40:41:3d:98:93:f2:7c:
42:dc:fd:22:09:96:f7:9a:13:de:90:5e:92:94:1a:f7:02:4c:
e2:59:b6:37:d9:c3:0d:9b:72:61:89:88:de:18:63:e0:fd:80:
9d:fc:d5:cb:93:d1:f2:32:a6:0d:d7:a7:64:c2:71:bd:60:4f:
7d:2e:51:23:59:b0:8d:d1:b4:8d:5b:88:8f:69:76:e0:5c:1a:
e0:a2:4c:4c:c9:8a:a5:3d:99:51:0f:2a:ee:96:4d:d4:f4:e4:
42:3f:de:bb:0a:e5:c6:f4:5f:cd:e1:83:ba:d2:90:09:36:5d:
86:10:59:e7:57:40:ac:8e:88:60:03:4e:6d:08:10:90:03:11:
3f:c0:1c:3d:fc:57:f5:81:b4:40:71:86:6d:20:a0:e9:9f:09:
36:d7:08:cb:39:8d:71:94:0c:9d:d6:76:bc:56:ae:7d:fa:55:
64:16:27:9a:99:07:8c:c7:96:14:b9:f4:a3:f0:27:29:68:64:
24:b0:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net