Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/322e35362e3235322e302f32332d3234203d3e20313336373837.roa
File: 322e35362e3235322e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: PCDhz3LOnTDf69dbZnVnNW3yFRfoLZRMOhBdONi/gTE=
Subject key identifier: 46:1F:BB:99:2D:B7:3F:52:CB:7C:AF:E9:5C:23:F8:BC:C7:8E:9F:0D
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 5EE34C5FAF65C7B7367A76A6FF07AB7FE3DFAB33
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/322e35362e3235322e302f32332d3234203d3e20313336373837.roa
Signing time: Thu 26 Jan 2023 11:48:42 +0000
ROA not before: Thu 26 Jan 2023 11:43:42 +0000
ROA not after: Thu 25 Jan 2024 11:48:42 +0000
asID: 136787
IP address blocks: 2.56.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e3:4c:5f:af:65:c7:b7:36:7a:76:a6:ff:07:ab:7f:e3:df:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Jan 26 11:43:42 2023 GMT
Not After : Jan 25 11:48:42 2024 GMT
Subject: CN=461FBB992DB73F52CB7CAFE95C23F8BCC78E9F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:57:f1:33:92:9d:f0:aa:64:d3:78:36:f3:
18:4e:88:fb:1f:5a:80:e9:c1:0e:6d:28:88:ee:77:
f2:54:c5:4f:05:46:44:60:d7:c9:f9:23:64:c1:2e:
32:c8:58:66:ff:4c:14:2a:5f:f7:cc:59:d5:0b:a5:
b6:26:80:63:cf:d2:47:32:39:da:71:cb:49:27:e8:
c7:b0:8c:e5:e9:d8:89:21:22:6e:d4:44:4d:67:80:
ce:72:53:de:f2:f9:fc:01:b2:b4:38:25:8a:8d:fd:
18:f6:af:31:4c:30:cb:50:16:81:46:cd:10:d8:64:
e1:7d:f9:b4:dc:38:57:23:09:b7:d8:33:c7:37:33:
cc:a4:e3:77:b2:a5:e9:81:04:f3:84:f1:70:6f:86:
6a:a9:89:59:12:29:2f:c1:44:cc:04:4e:ce:8f:b2:
20:7f:43:fe:b6:e2:67:fb:b1:03:a0:78:1f:26:65:
f4:41:3d:83:c4:11:63:bf:d7:0b:ca:df:b0:b2:9b:
d6:92:e5:27:e9:a0:5d:d7:83:14:b1:82:dd:62:0a:
83:65:b2:80:cd:52:6c:30:92:5b:5c:ac:1c:d2:69:
0c:06:a9:09:5f:b2:cf:60:12:4d:95:be:db:c8:cc:
92:d2:71:a4:1d:78:48:25:d5:cf:d9:53:d5:9a:b0:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:BB:99:2D:B7:3F:52:CB:7C:AF:E9:5C:23:F8:BC:C7:8E:9F:0D
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/322e35362e3235322e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.252.0/23
Signature Algorithm: sha256WithRSAEncryption
36:4b:94:44:34:35:54:c6:82:87:75:a1:42:68:81:1c:ce:1a:
2d:41:e1:1a:72:e6:61:5a:d9:04:5e:7d:63:ca:43:26:0d:ce:
03:9e:d6:dd:a9:4d:11:43:11:b6:96:80:9a:c1:b0:42:78:41:
29:8b:39:42:b7:2b:12:c9:47:90:1b:0b:f4:ea:26:e8:4c:ed:
e8:f3:36:c9:92:1e:bc:74:a1:e2:97:9c:55:04:a2:18:ca:ef:
cb:75:43:e3:2d:eb:92:e5:d3:e9:f6:d5:7b:24:47:c1:47:50:
eb:89:ec:d4:94:87:18:02:84:7b:78:49:af:d3:90:20:af:f7:
bb:83:8e:63:7f:ab:5b:cb:33:88:15:a6:5a:f6:cf:35:ab:50:
19:0e:af:73:ad:b9:ba:49:44:f6:4a:9c:53:bf:b6:0e:1b:3f:
03:f4:93:02:3b:ee:b7:0b:53:22:9e:01:a5:25:e1:ce:89:b7:
1a:c4:11:3a:03:c9:45:0d:57:b5:80:fd:dc:6c:7a:c0:9e:e0:
66:60:04:d0:b2:62:de:ca:48:63:67:07:3d:fc:c6:09:13:19:
db:39:9d:1d:02:55:c3:ec:41:0d:4f:67:27:99:09:65:12:c8:
17:36:5b:ff:30:9f:83:dc:23:55:5c:8c:78:69:61:6c:17:76:
b5:1c:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net