Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3233322e302f32322d3232203d3e20323131333936.roa
File: 3139352e3137392e3233322e302f32322d3232203d3e20323131333936.roa (raw, json)
Hash identifier: 5FFArlaeQ0EEcX82wyZHFOs65rDts2FXJvreTkoOx6s=
Subject key identifier: 71:D2:FC:16:AC:AF:5F:E2:85:B3:41:A2:9C:24:1E:CB:18:99:BF:8D
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0BD6B277F8E890555D07E48F7E1138B091463F25
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3233322e302f32322d3232203d3e20323131333936.roa
Signing time: Sat 22 Oct 2022 04:34:22 +0000
ROA not before: Sat 22 Oct 2022 04:29:22 +0000
ROA not after: Sat 21 Oct 2023 04:34:22 +0000
asID: 211396
IP address blocks: 195.179.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d6:b2:77:f8:e8:90:55:5d:07:e4:8f:7e:11:38:b0:91:46:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:22 2022 GMT
Not After : Oct 21 04:34:22 2023 GMT
Subject: CN=71D2FC16ACAF5FE285B341A29C241ECB1899BF8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3f:13:b0:68:62:4d:a3:ea:5a:46:c7:16:59:
c6:c7:96:9a:53:a7:18:a6:6a:da:bc:16:00:e9:d6:
9e:67:fb:6c:5b:5a:cd:bc:c8:a3:c5:21:fa:97:05:
e4:44:04:4f:89:5d:0f:3e:d0:c9:7a:bf:87:46:60:
52:2b:0c:6c:f8:9b:c6:8f:5c:c5:83:10:ab:94:87:
7f:ab:2e:b4:60:0a:ee:39:64:6a:fb:1e:2c:a3:50:
41:73:8e:d3:db:01:10:e1:ac:f8:50:37:ce:51:e1:
89:eb:88:3d:f3:bd:ee:0c:e4:82:78:98:58:ef:60:
fe:57:02:31:1f:a0:dc:1a:ad:f3:f7:f9:12:48:d6:
14:70:7f:82:c0:b4:de:9e:12:91:05:ab:9b:c8:bc:
c9:df:a5:9c:52:b9:06:6d:ce:ae:bc:f0:29:e8:b7:
7e:b4:9e:9a:43:b0:21:de:29:ec:de:bb:c2:ce:49:
2d:cf:bf:9a:26:57:24:21:95:fa:5f:84:90:21:9d:
fd:56:17:6a:fc:b3:20:52:88:4e:b7:a9:33:31:50:
2f:0b:86:f1:a5:f2:e5:2c:6b:59:30:4e:8c:51:bf:
de:14:14:87:f1:d2:85:f0:14:8a:3a:7e:02:9c:25:
ad:d9:eb:cc:20:d8:25:ec:80:9e:c6:63:cb:f8:70:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D2:FC:16:AC:AF:5F:E2:85:B3:41:A2:9C:24:1E:CB:18:99:BF:8D
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3233322e302f32322d3232203d3e20323131333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.232.0/22
Signature Algorithm: sha256WithRSAEncryption
68:d6:3a:79:52:b3:6c:8c:00:58:bd:1d:09:1e:d3:27:7a:8a:
b1:23:1b:85:b2:b9:ba:96:7a:37:7a:79:16:35:2b:e6:12:36:
b0:12:96:05:9a:63:b9:51:b3:bc:09:07:b5:8e:ad:bd:70:21:
c6:6b:f0:5c:c7:68:f2:f7:2e:4b:51:07:bc:1b:93:3f:1e:53:
48:78:d2:37:8b:6b:cc:2f:c6:c9:dd:99:45:31:86:bd:83:01:
0c:b7:62:7a:40:d3:d4:68:33:a3:a5:91:82:32:c7:24:7d:20:
22:7f:70:a9:a0:60:84:8a:46:7a:dd:cc:d6:ff:0c:3f:68:0c:
68:26:53:90:2d:cd:2b:16:f7:49:62:9b:a4:96:99:89:e8:90:
d1:35:56:1a:20:4f:ce:45:7e:a0:f4:ac:2d:d1:01:82:03:6b:
86:55:7a:04:a7:21:e9:3b:77:d5:37:5b:d0:83:49:8c:51:52:
7d:94:c7:9c:3f:0e:b2:ac:f1:14:a6:c0:1a:a3:ad:e9:ea:ef:
e8:13:6b:25:de:69:41:02:b8:53:c5:1d:25:fb:d9:66:16:14:
1b:09:1a:aa:e8:5c:80:1d:64:34:0b:eb:8a:0f:68:41:a2:98:
97:26:17:92:c0:50:bd:2d:f0:60:26:a2:17:9d:dd:9a:00:25:
ed:4d:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net