Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139362e302f32322d3234203d3e20323034313730.roa
File: 3139352e3137392e3139362e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: cZRUa4LDIjTXVODGkDbu1U8laYf+yKjTLlFE66tnpyA=
Subject key identifier: 69:FF:B2:D5:50:D7:06:31:5D:0B:4A:3C:68:D0:CC:38:E2:1F:A5:7B
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 2095E636D23B6E1C99FF8547532E74EBAD932737
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139362e302f32322d3234203d3e20323034313730.roa
Signing time: Sat 22 Oct 2022 04:34:33 +0000
ROA not before: Sat 22 Oct 2022 04:29:33 +0000
ROA not after: Sat 21 Oct 2023 04:34:33 +0000
asID: 204170
IP address blocks: 195.179.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:95:e6:36:d2:3b:6e:1c:99:ff:85:47:53:2e:74:eb:ad:93:27:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:33 2022 GMT
Not After : Oct 21 04:34:33 2023 GMT
Subject: CN=69FFB2D550D706315D0B4A3C68D0CC38E21FA57B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:0a:04:05:22:57:9d:28:ed:f3:ee:e7:58:
ba:3e:6f:72:fc:7b:7f:43:72:0a:64:94:08:cd:fd:
b4:3a:a7:46:de:fd:9a:61:8a:af:c2:6b:ca:1d:8a:
ca:2b:c0:a6:22:9b:8e:59:4b:a5:12:f7:d1:c7:f4:
92:09:d7:3b:d7:02:22:f1:bb:76:fb:75:24:36:ee:
3f:9d:ab:23:2d:6e:2e:57:82:18:0c:67:15:46:50:
c1:f7:89:90:55:87:4f:ec:17:b4:23:54:07:b3:6d:
5c:7b:f9:0d:8c:42:08:3e:ee:d9:51:6d:93:59:43:
4c:5b:95:7c:03:af:1b:eb:9d:33:e4:0a:e9:e6:fa:
a7:08:5d:dc:c4:78:52:92:06:9d:5c:9a:74:3b:26:
7e:74:98:39:f9:f5:c2:38:b4:44:20:77:e0:73:6d:
e7:c4:eb:0f:29:fb:42:6d:38:e5:44:ab:61:c2:08:
ae:4b:f4:d7:30:72:3e:52:1e:f1:3d:00:ff:cc:04:
49:c5:40:10:7f:ad:46:74:70:b4:65:4c:d0:85:e0:
5e:f7:75:d7:a9:39:40:0a:63:b0:14:15:89:90:05:
f7:37:9b:f7:98:0e:cc:03:91:88:63:7c:01:93:83:
31:34:29:73:db:cf:35:af:56:ff:ff:d7:b1:0c:de:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FF:B2:D5:50:D7:06:31:5D:0B:4A:3C:68:D0:CC:38:E2:1F:A5:7B
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3139362e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:81:da:cf:e2:4a:ac:dd:68:7c:d3:05:f4:fa:c4:3e:8e:93:
d6:06:04:d8:8c:48:a9:ca:c5:2c:71:d5:c2:b1:08:04:b8:a9:
ee:f9:f8:b4:f3:90:50:e8:1c:57:6d:52:09:16:33:31:9e:37:
30:a8:24:05:36:e4:09:ab:99:06:d0:07:24:56:77:c0:49:64:
c0:a0:d4:5c:1a:e9:fb:e2:17:25:0b:3a:67:87:64:bd:e9:d4:
64:34:d0:23:b5:e1:99:5d:de:26:47:78:73:2f:87:35:fe:e0:
47:a0:4b:c9:ab:fd:bd:de:28:bb:47:a2:c4:80:2f:4f:2b:ba:
1e:07:03:60:bf:75:d9:35:ae:9b:c7:3e:3f:de:c9:c5:3a:52:
7e:74:21:93:fd:6d:73:a0:9b:a8:34:ce:8f:44:52:50:f0:11:
40:74:c2:68:50:07:d1:7f:82:b9:be:05:10:46:f0:18:c9:23:
ae:8b:17:35:d5:2d:a8:63:c8:76:50:18:ac:69:53:fb:1a:0f:
2a:be:bf:7d:28:f2:67:3e:64:03:ae:98:d2:30:43:85:b4:08:
bb:cf:a3:2f:b7:50:7c:46:e4:4b:d7:a4:8f:4b:22:17:1e:b5:
2c:d8:f1:4b:bb:e4:f2:78:60:7a:fe:0e:4e:0c:35:c3:76:c5:
1e:ef:92:d4
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUIJXmNtI7bhyZ/4VHUy50662TJzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzNaFw0yMzEwMjEwNDM0MzNaMDMxMTAvBgNV
BAMTKDY5RkZCMkQ1NTBENzA2MzE1RDBCNEEzQzY4RDBDQzM4RTIxRkE1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6AoEBSJXnSjt8+7nWLo+b3L8
e39DcgpklAjN/bQ6p0be/Zphiq/Ca8odisorwKYim45ZS6US99HH9JIJ1zvXAiLx
u3b7dSQ27j+dqyMtbi5XghgMZxVGUMH3iZBVh0/sF7QjVAezbVx7+Q2MQgg+7tlR
bZNZQ0xblXwDrxvrnTPkCunm+qcIXdzEeFKSBp1cmnQ7Jn50mDn59cI4tEQgd+Bz
befE6w8p+0JtOOVEq2HCCK5L9Ncwcj5SHvE9AP/MBEnFQBB/rUZ0cLRlTNCF4F73
ddepOUAKY7AUFYmQBfc3m/eYDswDkYhjfAGTgzE0KXPbzzWvVv//17EM3nDLAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUaf+y1VDXBjFdC0o8aNDMOOIfpXswHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzQvMzEzOTM1MmUzMTM3MzkyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2Uy
MDMyMzAzNDMxMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsOzxDANBgkqhkiG9w0BAQsFAAOCAQEA
eoHaz+JKrN1ofNMF9PrEPo6T1gYE2IxIqcrFLHHVwrEIBLip7vn4tPOQUOgcV21S
CRYzMZ43MKgkBTbkCauZBtAHJFZ3wElkwKDUXBrp++IXJQs6Z4dkvenUZDTQI7Xh
mV3eJkd4cy+HNf7gR6BLyav9vd4ou0eixIAvTyu6HgcDYL912TWum8c+P97JxTpS
fnQhk/1tc6CbqDTOj0RSUPARQHTCaFAH0X+Cub4FEEbwGMkjrosXNdUtqGPIdlAY
rGlT+xoPKr6/fSjyZz5kA66Y0jBDhbQIu8+jL7dQfEbkS9ekj0siFx61LNjxS7vk
8nhgev4OTgw1w3bFHu+S1A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net