Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3232342e302f32322d3232203d3e20313938303930.roa
File: 3139352e3137392e3232342e302f32322d3232203d3e20313938303930.roa (raw, json)
Hash identifier: Yc+S8VB++H1tcPZGCLvdqcvf0T8JNn/Y9LeN5qwpK24=
Subject key identifier: 84:8B:3A:41:D5:7E:0B:AB:1A:F5:66:DA:FB:6D:BE:86:3F:23:15:0A
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 592A9BC0FECC4F0BE7F0D53F6841BD14CF583070
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3232342e302f32322d3232203d3e20313938303930.roa
Signing time: Sat 22 Oct 2022 04:34:23 +0000
ROA not before: Sat 22 Oct 2022 04:29:23 +0000
ROA not after: Sat 21 Oct 2023 04:34:23 +0000
asID: 198090
IP address blocks: 195.179.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2a:9b:c0:fe:cc:4f:0b:e7:f0:d5:3f:68:41:bd:14:cf:58:30:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:23 2022 GMT
Not After : Oct 21 04:34:23 2023 GMT
Subject: CN=848B3A41D57E0BAB1AF566DAFB6DBE863F23150A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:66:e1:19:46:84:b9:ce:2c:bf:6f:07:f9:2b:
df:6c:4a:43:f2:a2:b6:92:78:07:41:83:4f:94:61:
de:9a:9c:76:09:e4:35:98:1b:c6:89:3e:54:b8:08:
1e:17:e2:09:e7:88:1a:df:de:b2:70:50:f3:ed:14:
b5:4a:a7:28:16:79:28:6f:0f:78:5e:f0:d4:00:4a:
d4:2f:de:db:a5:70:c5:cf:a4:7c:f0:39:ff:85:6a:
74:10:2e:9e:2b:d9:1d:c2:34:48:8c:61:9b:29:39:
e3:ea:2a:15:a7:d9:9b:63:e2:b3:e9:c7:15:76:f5:
d3:91:cc:01:7a:66:df:34:ad:59:02:b8:5a:39:04:
12:98:91:5c:6a:64:1b:f9:a9:af:86:95:d2:fd:77:
8e:8d:9d:8c:bf:e4:9b:bc:79:15:6a:c4:f7:df:8f:
1d:5c:3e:5c:27:27:b9:eb:4a:5c:66:70:51:0f:ba:
28:81:e2:23:13:a0:46:4c:23:89:08:8d:96:99:f8:
e8:7c:68:8e:69:72:28:57:7b:16:26:79:b0:e8:64:
01:63:64:24:d6:82:e4:7a:ce:b7:38:f2:d8:00:37:
0f:30:12:74:b2:5e:70:df:27:92:1a:4a:b0:f7:ad:
bb:19:73:00:a4:74:2e:ba:e7:68:c3:ea:01:72:5c:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8B:3A:41:D5:7E:0B:AB:1A:F5:66:DA:FB:6D:BE:86:3F:23:15:0A
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3232342e302f32322d3232203d3e20313938303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.224.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:46:89:f0:b7:07:a6:7f:73:e6:6d:5b:9b:d6:10:6d:a1:5f:
69:84:fd:2c:b5:f8:1d:b8:29:55:90:14:76:25:63:e1:46:a3:
84:70:f6:04:9c:c5:18:ee:21:31:d5:7f:10:7f:ac:21:9f:ca:
34:62:d7:57:38:b2:6e:6d:d2:b3:2c:1f:a4:b7:4c:3c:bc:8c:
ea:3f:c0:33:5e:b1:08:50:0c:2a:eb:51:d7:23:33:23:fa:c6:
59:14:cf:fa:24:f3:75:0b:47:37:9c:3c:d6:cc:88:0b:e4:a8:
49:40:06:22:0f:8f:5e:6c:40:e7:b7:a9:11:33:50:da:d7:5a:
3a:17:cb:c7:19:38:9b:8f:01:c6:43:f8:6e:ca:82:ca:a5:59:
94:65:54:da:68:1c:df:a9:d0:e8:3d:15:45:00:23:11:bb:11:
41:51:77:e6:61:c8:b0:5a:79:85:28:db:a8:ad:fd:b2:05:c4:
3f:93:87:0f:a3:f3:36:1a:3d:c2:91:8b:0f:31:cd:35:66:77:
5a:fb:9a:9a:59:2d:13:62:44:76:b1:23:80:62:4a:1c:8a:0c:
7c:fd:d6:93:df:5d:51:1c:dc:8b:21:f2:3c:6e:0c:7f:01:4a:
81:3a:60:86:8b:29:92:f4:a2:ef:60:76:a8:d7:27:a7:78:bc:
b0:2c:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net