Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa
File: 3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: Kr9UiFzwG0Uhsk8eDQmKTrLyqsfZRNxSbHq84lfXHCE=
Subject key identifier: 16:D6:C2:64:08:63:A1:88:1B:CA:4C:D3:5F:19:1D:0F:5B:F2:49:98
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 027801C708EF28963884844D34C0F89B3DFE58DE
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 28 Dec 2022 09:22:41 +0000
ROA not before: Wed 28 Dec 2022 09:17:41 +0000
ROA not after: Wed 27 Dec 2023 09:22:41 +0000
asID: 136787
IP address blocks: 194.233.98.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:78:01:c7:08:ef:28:96:38:84:84:4d:34:c0:f8:9b:3d:fe:58:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 28 09:17:41 2022 GMT
Not After : Dec 27 09:22:41 2023 GMT
Subject: CN=16D6C2640863A1881BCA4CD35F191D0F5BF24998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:86:4c:9a:9d:ef:51:33:8d:a3:4b:80:ce:
6b:38:43:c9:d7:5f:41:2a:08:57:25:58:b5:89:a1:
46:82:00:49:fb:83:f1:7f:7c:f1:35:ee:0d:ae:c8:
ed:4f:ff:5e:4f:af:78:0d:9f:45:82:96:60:9b:a4:
df:03:d8:a6:b3:26:11:91:71:b4:4d:45:77:ad:fe:
de:a3:4b:bf:8e:4d:35:63:95:d1:ea:76:e7:8b:1a:
ed:03:27:2a:94:82:b8:66:03:cc:2a:51:41:0f:e7:
40:e3:83:2e:c1:01:ca:bd:6b:62:6f:54:42:34:f2:
0a:14:63:b1:6a:e9:12:58:be:04:4e:a4:34:c9:7f:
f6:c6:92:f6:db:df:90:fe:ce:42:64:c5:54:0c:3b:
2c:9f:e2:d0:ec:14:6b:9b:17:7a:b5:2c:a3:32:ba:
47:35:e1:af:f3:b3:de:f0:ae:57:f7:6d:8a:af:e7:
f3:0c:a0:69:63:4e:b2:c3:73:fe:d1:cd:0d:01:5c:
f1:3e:31:bb:28:8e:67:25:e7:60:22:d2:07:0a:11:
f2:fe:08:cc:a4:da:ea:1e:42:8c:48:71:07:c3:20:
17:db:18:bd:35:e6:de:e8:e0:0d:3e:35:2d:6c:38:
c3:fb:e1:67:2f:93:7b:ab:41:e4:7a:0f:8c:d9:5e:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D6:C2:64:08:63:A1:88:1B:CA:4C:D3:5F:19:1D:0F:5B:F2:49:98
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:cc:e2:a3:d4:92:59:0e:70:4b:58:a1:65:9e:b9:b1:8b:84:
30:c8:f7:3e:59:05:7e:00:1e:ae:1f:39:d7:55:83:ca:10:53:
a1:57:4a:02:dc:9e:16:0a:bb:19:c4:b3:bd:08:7b:6b:1f:b0:
ea:c3:c2:28:7f:a8:82:b9:51:4f:c9:8b:e4:e2:c9:e8:22:f0:
53:18:3f:4a:79:46:39:e7:a5:48:42:d6:f1:12:b9:7d:2c:8d:
cd:78:25:cb:b5:15:f9:11:27:fd:db:11:39:a2:cc:a8:c2:fa:
05:e9:ec:e0:ff:ca:45:cc:3c:4f:9b:02:1c:96:c6:d4:cb:ca:
ab:ef:32:6e:7a:9f:d6:6c:54:99:9f:82:c5:c8:cf:e2:2a:6a:
2f:60:72:98:c5:27:ba:11:01:5b:65:29:70:78:60:4a:63:b4:
0e:b3:c2:29:78:6f:d8:40:94:3f:01:8c:e1:f5:a8:4c:1c:98:
d9:fd:46:b5:e5:b5:14:9e:18:ca:41:aa:45:c6:b9:5e:0a:e9:
f8:f5:d4:c1:a1:dc:ae:9f:a0:87:73:d2:80:37:d3:f8:cf:77:
04:60:79:49:32:b5:c7:3c:8d:63:6f:b7:90:72:f5:63:19:1a:
c7:70:ca:2c:59:1b:1f:16:bd:1b:45:8a:63:6e:f0:73:b1:4a:
f2:f3:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net