Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139342e302f32332d3233203d3e20323031333431.roa
File: 3139352e3137392e3139342e302f32332d3233203d3e20323031333431.roa (raw, json)
Hash identifier: YVlMRdV0gqPALo9HgFwvQMJsooXap04NFu/3M1POOk4=
Subject key identifier: 3D:1A:40:E3:42:4D:38:54:9E:47:03:29:06:35:67:F7:19:37:47:A5
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 7AFD0146A59BA85B74ABA321D528B36B73DD9E2B
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139342e302f32332d3233203d3e20323031333431.roa
Signing time: Sat 22 Oct 2022 04:34:19 +0000
ROA not before: Sat 22 Oct 2022 04:29:19 +0000
ROA not after: Sat 21 Oct 2023 04:34:19 +0000
asID: 201341
IP address blocks: 195.179.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fd:01:46:a5:9b:a8:5b:74:ab:a3:21:d5:28:b3:6b:73:dd:9e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:19 2022 GMT
Not After : Oct 21 04:34:19 2023 GMT
Subject: CN=3D1A40E3424D38549E470329063567F7193747A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:a6:db:77:e3:25:8a:8a:f4:5a:a9:2b:ba:
da:61:32:38:92:cf:43:5d:32:6f:0f:ac:80:4c:c7:
f4:fd:3b:25:55:29:cb:6f:7d:fb:5c:05:d1:9b:17:
b6:da:d3:ca:23:1c:2a:21:26:7d:12:de:e5:ae:d1:
22:a5:c8:0c:08:3f:f3:6d:a5:8f:2a:f2:de:04:09:
04:6e:11:ba:19:15:a3:bd:4f:1e:3e:69:b6:42:df:
45:c6:ed:30:4e:e8:c6:e0:fa:33:06:80:45:d6:6f:
f1:fc:54:cf:f5:b8:91:e0:b3:90:45:8a:60:ca:98:
5b:72:47:75:e1:14:38:0b:e2:0b:9a:21:12:c7:f7:
05:b1:30:59:64:44:bd:d2:cb:87:c4:08:79:d4:41:
1a:3a:ea:44:6f:de:17:63:e6:7b:05:67:1c:12:48:
32:33:49:b0:e3:99:1c:86:93:55:7f:5d:6f:75:45:
03:85:5e:74:86:19:55:5f:5e:4b:7e:73:0f:e2:8a:
d4:68:65:07:5b:fe:5e:09:46:31:28:c5:c9:e4:88:
da:24:4e:86:0e:21:9e:c8:fc:86:87:6a:75:4c:7f:
24:c3:93:d9:13:98:d2:93:d1:07:cf:21:78:be:1d:
a2:60:27:8f:e3:fd:38:cf:9a:1b:c2:7a:84:b8:e6:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1A:40:E3:42:4D:38:54:9E:47:03:29:06:35:67:F7:19:37:47:A5
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139342e302f32332d3233203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.194.0/23
Signature Algorithm: sha256WithRSAEncryption
15:13:9d:0c:be:70:a9:5f:cf:24:b7:4f:17:1f:b4:5d:bf:fd:
b9:71:06:f4:67:f1:d3:18:6f:96:37:bb:2a:fc:5e:01:d4:19:
07:bc:7e:f7:76:a4:bc:57:e7:e9:27:39:10:bc:c3:0b:59:e0:
6a:95:43:13:98:76:4e:65:90:ae:eb:74:f6:03:74:ad:34:50:
05:c4:33:61:23:41:a6:4e:5e:b6:10:16:15:ee:bc:d4:f8:b3:
89:58:d6:fc:22:c7:ea:ba:18:43:92:ba:6c:f0:c5:38:5f:f9:
5c:b2:49:2a:ae:f3:6f:a2:b0:8e:2e:32:ef:d9:56:23:a4:bc:
53:a5:91:71:8a:3a:ed:3c:77:72:cb:ee:29:7f:43:b7:5f:b4:
74:cf:4c:64:ec:1d:a1:fa:95:2e:cb:22:8f:99:1f:74:fa:72:
05:9d:98:3d:65:45:9f:fb:09:ed:d5:be:13:d8:c0:59:63:c5:
c5:4d:57:e8:f8:03:49:2f:9a:29:97:17:d0:7b:99:2a:61:1b:
bd:e3:f7:b8:81:5e:a8:b4:7f:d9:1b:44:bb:00:44:54:f9:ef:
1d:32:42:0a:b5:67:d5:36:d7:0c:5a:b9:0c:ce:68:55:6b:96:
4a:82:15:ae:09:ac:29:b8:7b:b9:83:15:9a:9d:38:c2:07:2f:
bf:12:12:3d
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUev0BRqWbqFt0q6Mh1Siza3PdniswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MTlaFw0yMzEwMjEwNDM0MTlaMDMxMTAvBgNV
BAMTKDNEMUE0MEUzNDI0RDM4NTQ5RTQ3MDMyOTA2MzU2N0Y3MTkzNzQ3QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizqbbd+Mlior0WqkrutphMjiS
z0NdMm8PrIBMx/T9OyVVKctvfftcBdGbF7ba08ojHCohJn0S3uWu0SKlyAwIP/Nt
pY8q8t4ECQRuEboZFaO9Tx4+abZC30XG7TBO6Mbg+jMGgEXWb/H8VM/1uJHgs5BF
imDKmFtyR3XhFDgL4guaIRLH9wWxMFlkRL3Sy4fECHnUQRo66kRv3hdj5nsFZxwS
SDIzSbDjmRyGk1V/XW91RQOFXnSGGVVfXkt+cw/iitRoZQdb/l4JRjEoxcnkiNok
ToYOIZ7I/IaHanVMfyTDk9kTmNKT0QfPIXi+HaJgJ4/j/TjPmhvCeoS45v5vAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUPRpA40JNOFSeRwMpBjVn9xk3R6UwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzQvMzEzOTM1MmUzMTM3MzkyZTMxMzkzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2Uy
MDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcOzwjANBgkqhkiG9w0BAQsFAAOCAQEA
FROdDL5wqV/PJLdPFx+0Xb/9uXEG9Gfx0xhvlje7KvxeAdQZB7x+93akvFfn6Sc5
ELzDC1ngapVDE5h2TmWQrut09gN0rTRQBcQzYSNBpk5ethAWFe681PiziVjW/CLH
6roYQ5K6bPDFOF/5XLJJKq7zb6Kwji4y79lWI6S8U6WRcYo67Tx3csvuKX9Dt1+0
dM9MZOwdofqVLssij5kfdPpyBZ2YPWVFn/sJ7dW+E9jAWWPFxU1X6PgDSS+aKZcX
0HuZKmEbveP3uIFeqLR/2RtEuwBEVPnvHTJCCrVn1TbXDFq5DM5oVWuWSoIVrgms
Kbh7uYMVmp04wgcvvxISPQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net