Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa
File: 3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: of3IFMZhKPoejHUzz+rlVjY3giGbgyp5reQZMTBIWgg=
Subject key identifier: B7:7B:AE:74:CA:C5:33:68:48:AF:7C:6B:0F:C7:E7:08:07:A7:AA:97
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 15471E4DF70458D821DF61412FE18760AD64514C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa
Signing time: Sat 22 Oct 2022 04:34:31 +0000
ROA not before: Sat 22 Oct 2022 04:29:31 +0000
ROA not after: Sat 21 Oct 2023 04:34:31 +0000
asID: 204170
IP address blocks: 194.233.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:47:1e:4d:f7:04:58:d8:21:df:61:41:2f:e1:87:60:ad:64:51:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:31 2022 GMT
Not After : Oct 21 04:34:31 2023 GMT
Subject: CN=B77BAE74CAC5336848AF7C6B0FC7E70807A7AA97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:35:ec:49:50:bd:e5:b1:59:d8:87:78:e1:
e0:a7:26:6a:0b:05:9f:ed:40:1a:32:ad:21:f0:7a:
41:f0:a1:70:bd:62:0b:45:c3:69:af:89:83:8d:05:
2e:d9:02:49:be:8a:52:f9:47:1d:8e:11:6f:b1:ef:
a7:fc:2d:3b:da:c0:6c:07:32:7f:97:07:6b:93:3f:
79:f6:1f:f5:55:6c:1f:3b:b7:79:83:c1:c4:00:0c:
9d:3a:76:0d:56:32:28:d9:21:be:1d:59:4e:ad:00:
c7:d7:49:34:f2:8c:49:6e:4d:0c:77:ba:74:c3:d9:
38:0a:eb:37:69:5d:24:57:10:eb:08:52:63:16:b4:
54:9a:3e:ad:ca:ab:d1:af:dc:84:24:ee:d3:f0:ae:
46:f2:81:1e:69:ce:45:36:4f:20:11:93:c7:5a:56:
66:34:ec:62:fc:fb:3d:38:b4:d7:9f:d7:02:da:d3:
b4:fb:76:72:9b:61:c1:e3:96:d6:41:8c:33:e9:1e:
68:30:70:53:1e:5b:21:df:7c:9c:5e:25:03:d7:7d:
ac:7e:60:12:35:80:c3:cc:16:da:1c:e3:bb:cc:d3:
69:08:3d:17:3b:b4:df:48:ee:5d:ba:f6:08:9e:2d:
7c:af:cf:7f:66:f4:8c:80:bf:18:63:fe:f6:55:b0:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7B:AE:74:CA:C5:33:68:48:AF:7C:6B:0F:C7:E7:08:07:A7:AA:97
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:39:07:c6:0e:d3:2a:98:cc:c4:03:65:d3:ed:c1:19:e9:c4:
25:9a:ce:0b:35:80:d8:bf:02:7e:6f:58:a7:31:f2:77:0e:8e:
98:f7:55:43:20:f4:ae:47:93:07:0c:6b:41:a6:6e:5f:35:03:
1b:4e:c5:6b:9b:aa:9b:a8:69:59:40:3a:1b:02:6b:4a:40:6d:
33:40:ae:22:11:10:24:25:d9:4a:43:03:c5:cc:a1:2e:a1:c9:
ba:41:e2:12:33:b0:65:0f:3f:ba:ab:24:26:51:3d:33:17:d7:
25:aa:3d:56:27:c9:50:2b:7c:48:50:b4:77:72:3c:c9:94:83:
e8:04:03:64:c3:66:e5:3d:89:ea:f9:8d:af:30:ab:e9:7b:85:
df:a2:4b:7d:23:83:bc:38:8d:0c:63:9f:33:f5:b1:4e:dc:c3:
ac:3f:57:7d:4a:5b:2e:c1:e9:22:f7:9d:9c:73:32:83:83:6c:
4b:ca:54:7a:5c:d1:1b:84:48:d7:eb:e6:9e:04:58:74:0e:b7:
28:85:24:cb:c7:30:8d:29:1c:5c:a0:18:4a:ce:6a:cf:af:d2:
e5:06:ba:7f:b7:db:26:47:9d:ce:f3:92:5a:9a:eb:26:0e:8e:
44:e6:d3:6a:16:e2:82:bf:06:f9:11:11:79:64:4d:2a:91:42:
8a:c6:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net