Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38362e302f32342d3234203d3e203631333137.roa
File: 3139352e38382e38362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 6fX0Q5/GXbILk0SeyolAHZoDxHBOdcIZuPJgtXqtwMk=
Subject key identifier: 76:21:17:CE:A0:79:4E:3F:7E:33:1A:3A:CD:0B:C1:E1:94:63:8C:4B
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 1592CE63085B79EDFFE1D4A64BE9E3019E98C9E1
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38362e302f32342d3234203d3e203631333137.roa
Signing time: Sat 22 Oct 2022 04:34:09 +0000
ROA not before: Sat 22 Oct 2022 04:29:09 +0000
ROA not after: Sat 21 Oct 2023 04:34:09 +0000
asID: 61317
IP address blocks: 195.88.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:92:ce:63:08:5b:79:ed:ff:e1:d4:a6:4b:e9:e3:01:9e:98:c9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:09 2022 GMT
Not After : Oct 21 04:34:09 2023 GMT
Subject: CN=762117CEA0794E3F7E331A3ACD0BC1E194638C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:74:8d:83:f0:69:4e:a7:ed:98:61:33:53:
5c:62:aa:17:4a:45:3d:28:03:f6:4e:51:b5:21:ec:
e6:48:e9:7d:52:bb:5d:70:70:15:4b:8d:23:70:b3:
6d:69:ef:ce:86:34:2e:a1:7b:d0:57:ee:32:f5:62:
84:18:6d:d0:46:fa:9f:4d:b1:b1:b5:45:9c:74:c4:
3f:77:81:24:a3:6a:3a:0f:08:9f:74:c9:01:74:50:
82:39:d1:f1:c5:f9:9a:fa:bb:50:a7:e9:46:8d:34:
91:03:52:15:91:c4:7b:31:5f:44:ee:4a:f9:95:5f:
a2:2c:8d:ca:b1:c5:7e:0f:d4:d7:df:73:a7:9f:b2:
16:73:85:57:65:2d:91:0a:75:50:34:5e:6d:32:66:
ae:a7:88:c2:60:32:e0:c2:b6:a6:f6:55:a3:1d:59:
e3:34:38:c6:55:09:6a:36:81:9e:13:8b:95:93:fc:
6f:2e:14:3a:49:36:8e:08:ed:d1:a5:1f:2c:55:f2:
40:00:cc:00:40:c2:e7:8e:f2:e0:4a:2c:23:2c:be:
bc:03:99:3f:5c:95:61:69:d1:82:da:dd:14:5b:55:
c1:ff:d0:78:56:91:a0:a1:09:c4:74:75:38:4a:dc:
ee:13:1d:01:f3:30:38:f7:52:7c:28:9e:a6:9d:9f:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:21:17:CE:A0:79:4E:3F:7E:33:1A:3A:CD:0B:C1:E1:94:63:8C:4B
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.86.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:bc:a5:e4:e4:18:79:70:8c:2a:da:9f:95:30:35:19:c4:f8:
3d:d7:79:3e:0f:f0:6e:e0:0a:53:15:e6:b4:94:fc:38:ff:46:
d9:f9:75:71:4f:f6:80:cb:ba:fd:50:4d:82:8d:37:cc:14:68:
e3:6b:f2:48:85:ee:17:61:50:68:88:e3:5d:7c:c5:c3:26:e4:
d4:1f:cc:84:05:13:60:eb:c9:e9:cf:59:c4:db:37:f5:64:8a:
7f:9c:6f:c2:18:e5:fd:8e:ea:f4:dd:b5:58:43:a4:29:39:10:
e1:5d:9b:e5:73:46:27:85:07:d1:3f:86:a7:93:97:7e:01:7f:
df:a4:a4:5d:0d:8b:f8:89:58:dd:a6:5d:7d:60:c0:e4:19:d3:
84:37:09:30:c1:a1:73:73:3a:a4:51:17:86:b4:a1:84:17:22:
d8:2d:6b:ec:6c:e8:da:d0:44:a3:29:a4:f7:c0:1f:82:d6:96:
a2:27:3f:41:9d:4c:f0:47:36:99:8a:a3:42:f7:86:7f:ef:7d:
66:42:24:38:63:73:c5:f4:35:88:46:8f:fa:df:0c:fd:cd:08:
43:b5:b5:fc:d2:54:b5:df:3f:46:99:8d:cf:b4:19:10:d2:e5:
54:ba:f4:ba:2c:21:b8:0d:e4:5e:18:80:41:3d:1a:b1:52:d3:
2d:86:90:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net