Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa
File: 3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: Pnhau8sZNU2MEFVIbzHIJZZjCTvg6DquGzZbhAgC4tY=
Subject key identifier: B4:15:D9:B2:7B:75:69:8E:4B:2A:6D:69:5C:CA:6A:4F:89:4B:4A:02
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 54935C78BFA7CF9D00DE26539DE7569404C8E806
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa
Signing time: Thu 29 Dec 2022 10:02:39 +0000
ROA not before: Thu 29 Dec 2022 09:57:39 +0000
ROA not after: Thu 28 Dec 2023 10:02:39 +0000
asID: 137409
IP address blocks: 194.195.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:93:5c:78:bf:a7:cf:9d:00:de:26:53:9d:e7:56:94:04:c8:e8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 29 09:57:39 2022 GMT
Not After : Dec 28 10:02:39 2023 GMT
Subject: CN=B415D9B27B75698E4B2A6D695CCA6A4F894B4A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:7a:f4:d2:d0:1c:02:b5:4e:e2:73:9e:0b:
48:40:85:69:d5:7c:ae:bb:eb:50:99:3d:25:d1:07:
d1:02:41:7a:c5:d6:1a:b2:dd:04:e4:d3:ba:d1:66:
c1:d0:ab:25:56:28:e0:b8:38:f0:5b:d0:b2:f3:f8:
a2:de:89:c0:dd:f8:b7:88:17:93:bc:55:c9:33:0b:
f8:e6:e6:34:ad:b6:d0:ce:8c:2d:04:86:66:c8:75:
4c:45:d3:ae:9c:0f:7d:c9:98:37:9a:24:a7:2a:dd:
2e:03:1b:c0:2a:a2:57:bf:ae:8f:a7:03:23:a2:cd:
cb:82:e8:13:af:1a:f3:5a:5a:fb:a5:d6:5c:ca:af:
69:2b:90:d3:76:6e:0a:8e:fb:7e:12:07:f1:26:b0:
23:64:c9:aa:9b:ec:72:88:5c:cc:4b:e0:c1:c3:fc:
8f:31:e1:4b:cb:c0:05:bf:d6:80:7d:ba:53:74:08:
e6:3d:07:06:d4:a0:bc:38:b1:09:33:74:c0:65:82:
32:71:05:27:bc:0e:77:06:e2:16:60:46:d4:c6:0e:
69:11:a1:cb:7b:65:f0:88:11:84:de:49:ad:57:1c:
1e:09:a2:41:7f:91:4c:aa:91:28:16:78:dc:37:55:
d4:1f:93:bb:f5:f7:9d:06:c9:28:16:d0:52:42:58:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:15:D9:B2:7B:75:69:8E:4B:2A:6D:69:5C:CA:6A:4F:89:4B:4A:02
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.89.0/24
Signature Algorithm: sha256WithRSAEncryption
66:24:db:e8:4e:75:ea:53:4a:0d:1b:a5:cb:37:f3:83:dd:03:
a3:c1:67:ba:6c:a9:43:48:82:82:cc:99:2b:e1:ca:a5:49:bf:
d5:0d:46:3e:78:40:d5:51:72:bc:e1:84:5a:91:d0:c9:ae:d3:
13:f2:5c:82:13:b2:70:fd:10:9e:e8:ee:0f:a5:54:78:17:86:
22:ed:30:c0:1a:d6:bf:f7:a3:b6:7a:32:03:87:34:68:76:0e:
fd:96:bd:55:37:e6:fe:83:90:5a:82:bb:18:39:c9:ea:86:16:
92:e6:de:7e:44:7e:f5:3e:08:b8:04:b8:d2:d2:2c:30:f9:03:
64:03:f4:df:84:6e:15:a6:55:fd:51:e2:6d:2b:9e:e3:23:a5:
70:c8:54:2b:e9:1a:35:5d:e3:8d:9e:2b:0f:f3:39:e4:18:1d:
d0:63:01:65:aa:69:19:62:34:1a:20:12:ab:ea:07:8c:2c:b5:
9d:44:38:9d:20:2a:7d:f2:1a:44:94:cf:48:b5:47:66:ce:b0:
ba:89:bd:8e:39:b2:8a:fe:ef:44:03:ea:9c:f0:4a:7b:a6:31:
b7:25:56:59:14:0a:4f:6d:95:ec:ab:a5:ad:aa:34:2a:f8:f3:
95:02:da:c2:90:9c:c5:0f:ce:a9:7d:9d:a8:77:4d:df:3b:f7:
bb:22:b5:0a
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUVJNceL+nz50A3iZTnedWlATI6AYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEyMjkwOTU3MzlaFw0yMzEyMjgxMDAyMzlaMDMxMTAvBgNV
BAMTKEI0MTVEOUIyN0I3NTY5OEU0QjJBNkQ2OTVDQ0E2QTRGODk0QjRBMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9Xr00tAcArVO4nOeC0hAhWnV
fK6761CZPSXRB9ECQXrF1hqy3QTk07rRZsHQqyVWKOC4OPBb0LLz+KLeicDd+LeI
F5O8VckzC/jm5jStttDOjC0EhmbIdUxF066cD33JmDeaJKcq3S4DG8Aqole/ro+n
AyOizcuC6BOvGvNaWvul1lzKr2krkNN2bgqO+34SB/EmsCNkyaqb7HKIXMxL4MHD
/I8x4UvLwAW/1oB9ulN0COY9BwbUoLw4sQkzdMBlgjJxBSe8DncG4hZgRtTGDmkR
oct7ZfCIEYTeSa1XHB4JokF/kUyqkSgWeNw3VdQfk7v1950GySgW0FJCWMmPAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUtBXZsnt1aY5LKm1pXMpqT4lLSgIwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM5MzQyZTMxMzkzNTJlMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzMzNzM0MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMLDWTANBgkqhkiG9w0BAQsFAAOCAQEAZiTb
6E516lNKDRulyzfzg90Do8FnumypQ0iCgsyZK+HKpUm/1Q1GPnhA1VFyvOGEWpHQ
ya7TE/JcghOycP0QnujuD6VUeBeGIu0wwBrWv/ejtnoyA4c0aHYO/Za9VTfm/oOQ
WoK7GDnJ6oYWkubefkR+9T4IuAS40tIsMPkDZAP034RuFaZV/VHibSue4yOlcMhU
K+kaNV3jjZ4rD/M55Bgd0GMBZappGWI0GiASq+oHjCy1nUQ4nSAqffIaRJTPSLVH
Zs6wuom9jjmyiv7vRAPqnPBKe6YxtyVWWRQKT22V7Kulrao0KvjzlQLawpCcxQ/O
qX2dqHdN3zv3uyK1Cg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net