Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/322e35362e3235342e302f32342d3234203d3e2030.roa
File: 322e35362e3235342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 5XWmxm1LUxa5DNhuUYCXtKtaaQu1PGnGxRgHkxkoaB4=
Subject key identifier: 1C:BE:4E:EC:78:42:3E:71:4D:60:B1:BA:09:F2:A0:8F:2C:8F:52:D4
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 26DD948497AD8A4BB7192390063E2D18B15D9E1B
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/322e35362e3235342e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:24:12 +0000
ROA not before: Fri 03 Mar 2023 16:19:12 +0000
ROA not after: Fri 01 Mar 2024 16:24:12 +0000
asID: 0
IP address blocks: 2.56.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:dd:94:84:97:ad:8a:4b:b7:19:23:90:06:3e:2d:18:b1:5d:9e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 16:19:12 2023 GMT
Not After : Mar 1 16:24:12 2024 GMT
Subject: CN=1CBE4EEC78423E714D60B1BA09F2A08F2C8F52D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:dc:b0:dc:14:d1:02:af:06:83:fe:8e:e2:
8d:5f:b1:e5:41:2a:b0:dc:fa:59:e0:4c:6a:ad:3e:
0b:30:ef:0c:b7:ab:20:0b:d5:20:a7:94:02:e1:03:
79:23:81:e7:1d:86:56:65:7a:ac:3a:0c:05:47:7f:
b4:4f:91:75:e2:bc:70:45:b6:f3:68:54:4e:22:18:
03:28:23:f6:60:62:01:6f:88:e2:1a:72:2b:60:7d:
0c:fb:c0:c4:a6:d4:33:90:15:65:34:ba:c7:3e:17:
a3:3e:c8:17:03:67:8d:12:27:e6:97:87:de:78:d1:
99:17:40:64:a2:48:b5:8f:ea:ba:72:99:24:44:d2:
f9:2c:33:29:de:90:cc:cf:2d:60:fd:29:d7:41:95:
55:82:6e:c2:0f:60:d6:0b:cb:21:6b:a6:12:94:eb:
9b:83:6a:c0:96:dd:55:c7:5a:8a:63:30:63:4a:93:
90:a6:b2:19:09:71:4b:17:f7:a3:ec:28:e5:1e:49:
65:dd:4a:cc:30:85:fa:ba:a7:1f:01:26:d2:03:9b:
54:1d:26:37:2d:78:f6:51:4a:69:79:6b:bf:d8:53:
fa:e6:72:25:b7:af:c6:c8:73:a0:cc:ef:1f:59:da:
e8:d6:cf:64:ea:96:b3:a3:67:50:fc:4d:a4:5d:c2:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BE:4E:EC:78:42:3E:71:4D:60:B1:BA:09:F2:A0:8F:2C:8F:52:D4
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/322e35362e3235342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0d:fe:35:3a:64:0f:9f:93:3c:31:57:cd:07:44:01:e5:d7:
5c:ed:4d:be:6a:6a:c1:3b:45:db:c2:71:c6:65:aa:c8:e8:51:
8e:21:eb:08:b7:0c:f6:6f:fd:72:a2:94:74:46:76:76:7a:8d:
27:58:d6:45:aa:c4:b2:0d:4e:03:0a:3c:c4:46:cc:12:b2:e9:
80:6f:10:a3:e2:d4:84:cc:01:37:85:4d:22:9f:97:bf:00:7d:
d5:fc:c9:79:13:81:42:76:82:d1:0f:11:3a:46:bc:6e:c7:b7:
d1:69:f2:76:7c:89:6e:6f:e3:7a:d7:de:55:75:ae:e0:97:59:
df:9c:bb:5d:89:b0:52:59:35:bc:b3:56:f7:62:0e:87:b8:d3:
ed:ef:fb:78:82:f0:bc:7f:77:57:6c:8d:65:e3:11:f0:db:6c:
51:41:26:04:2a:a0:d6:10:ab:71:ce:23:a3:84:9a:44:fe:c3:
dd:ad:36:bb:f4:40:83:ce:9e:27:54:3c:89:a9:99:7f:eb:ff:
f9:85:a9:92:ee:95:a2:d3:a9:aa:c4:c1:b6:5b:fe:a1:ec:33:
4f:d8:e1:37:a4:f3:f9:ba:dd:bf:f6:76:32:c5:ae:71:d1:37:
52:0e:3c:db:78:77:b7:03:4b:9b:55:53:96:ef:21:4c:42:5b:
fd:3c:6e:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net