Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/322e35392e3134382e302f32332d3234203d3e2030.roa
File: 322e35392e3134382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: dxMo7UG4+VgENHUPFTYsBhQ/iWxHZwGir2ZseIiIA6g=
Subject key identifier: 0C:3A:FF:EA:C6:77:48:08:02:B7:99:FD:12:54:E3:5D:83:23:E3:A2
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 722B465B03C44CFEF2685D36D6839C3D8893E8F5
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/322e35392e3134382e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:24:31 +0000
ROA not before: Fri 03 Mar 2023 16:19:31 +0000
ROA not after: Fri 01 Mar 2024 16:24:31 +0000
asID: 0
IP address blocks: 2.59.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2b:46:5b:03:c4:4c:fe:f2:68:5d:36:d6:83:9c:3d:88:93:e8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 16:19:31 2023 GMT
Not After : Mar 1 16:24:31 2024 GMT
Subject: CN=0C3AFFEAC677480802B799FD1254E35D8323E3A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:69:a1:25:83:6b:77:9a:e8:f4:09:f6:64:
e8:b0:55:8e:b2:70:bb:b5:b1:5d:a0:5d:48:f5:b8:
8c:dd:2a:49:49:22:29:f4:5b:5c:79:25:8f:59:6d:
18:ce:91:55:0a:d3:69:84:ed:d0:65:41:7b:02:37:
e9:17:a8:7a:33:e1:60:e3:16:7f:0d:e3:37:9d:fc:
de:31:42:d4:b1:5b:7f:86:32:a1:d3:68:9d:ef:27:
c5:66:0b:3b:ed:a6:81:3c:3d:b3:10:49:3c:28:23:
61:df:e7:35:2a:88:98:9f:33:9f:f4:52:be:c9:b1:
c4:fd:90:73:65:b0:2b:15:25:d7:c3:ec:b9:6b:c5:
4f:8f:69:a0:35:e5:50:3c:c1:7e:45:f3:ca:6e:e7:
b3:da:f3:f2:90:9a:41:16:f2:8d:7e:41:51:54:b8:
6c:55:4d:16:82:ef:8e:a5:1a:6a:0d:f3:92:3e:13:
d3:13:01:4a:53:d8:40:27:fb:23:26:de:74:f4:0a:
13:bb:8b:d6:a7:f4:c6:96:1a:3a:c7:fe:3b:d4:3a:
33:0d:97:fb:6c:37:08:f2:82:af:e1:d7:73:94:91:
14:08:23:c0:fe:18:dc:af:6d:c7:ca:ac:1c:f9:27:
22:bd:db:50:d9:f0:8f:06:b0:e6:ca:ea:03:1c:27:
1a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3A:FF:EA:C6:77:48:08:02:B7:99:FD:12:54:E3:5D:83:23:E3:A2
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/322e35392e3134382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.148.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:b6:cc:b4:50:20:7b:6d:e6:7c:74:44:c0:ff:83:95:90:a1:
74:6c:71:68:43:21:99:63:a7:71:05:f7:43:c6:f3:f9:75:55:
4f:1c:98:c5:35:fe:2e:0e:73:f4:5f:a9:ce:bf:ac:31:1a:da:
37:06:a5:55:1b:d0:10:60:9c:e1:40:71:63:f9:cb:39:25:4f:
e9:b4:97:d8:55:6d:2f:31:8d:95:ea:c6:c3:e9:27:0b:5e:55:
95:2d:72:b7:b1:69:4e:f1:db:b4:7b:1d:60:44:80:76:a0:22:
e0:ce:93:f1:69:f4:7e:63:de:e7:04:66:09:da:f4:d3:99:bd:
69:a0:b8:8b:10:4b:c0:68:9d:f6:cd:43:10:50:a1:e3:c2:e9:
dd:48:32:de:e0:2a:37:51:cf:f7:41:c3:c5:5b:b4:32:79:78:
b8:29:35:0c:d4:42:66:e1:c8:58:3c:1a:57:37:59:b1:cc:a5:
29:98:eb:e3:a9:c1:ac:20:5e:de:e6:f7:17:05:fc:5a:45:af:
cf:6d:56:3d:20:2c:f5:43:fd:92:f2:31:ea:20:b1:64:b3:5b:
5d:2e:b7:0c:37:f9:49:68:97:5e:b0:07:b0:e0:79:64:45:fc:
1e:f3:73:23:ff:8e:db:99:e8:d8:5a:b0:fe:6c:11:44:a1:64:
af:1a:06:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net