Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3231372e32312e36342e302f32322d3234203d3e203437353833.roa
File: 3231372e32312e36342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: f8CSMTVHQOXq06LE1Gs/BX/DH9SgXm0NkjP9/hFkdbI=
Subject key identifier: CC:D6:3D:67:5A:C2:5E:D1:0E:E8:70:D6:13:86:70:0F:B9:C3:44:39
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 1CF02B3AEEFCEC77043579EECABB15CF2635B5BD
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3231372e32312e36342e302f32322d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:34:37 +0000
ROA not before: Sat 22 Oct 2022 04:29:37 +0000
ROA not after: Sat 21 Oct 2023 04:34:37 +0000
asID: 47583
IP address blocks: 217.21.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f0:2b:3a:ee:fc:ec:77:04:35:79:ee:ca:bb:15:cf:26:35:b5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:37 2022 GMT
Not After : Oct 21 04:34:37 2023 GMT
Subject: CN=CCD63D675AC25ED10EE870D61386700FB9C34439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:a6:0d:b7:33:43:35:d3:db:2f:00:0e:81:
cb:a6:3e:27:99:4e:37:57:49:28:16:6a:ed:e5:c6:
62:e9:7a:5b:e2:66:c6:bc:dc:84:c5:8d:28:d6:4f:
63:42:c1:6e:4f:31:5e:ae:36:57:a3:c7:c0:35:af:
24:e0:7e:d3:90:c0:b2:a3:ef:64:84:3c:78:31:a5:
fd:16:85:fa:3e:6c:88:77:43:a5:25:9b:39:e7:c7:
f1:f6:c7:0f:67:22:5c:36:62:e5:fd:a7:f4:ae:8b:
5b:71:47:06:d1:da:c1:ff:94:31:6f:1b:24:00:83:
7d:db:54:55:02:af:99:1f:56:f7:94:2c:c6:d2:ff:
35:b7:d9:67:5c:54:7c:43:b5:64:67:70:3c:13:8f:
6b:64:01:8d:c0:82:7f:d8:e7:ce:4a:02:db:4d:6c:
b5:03:af:f2:c1:a0:33:cf:cc:3b:8b:67:97:55:e5:
3e:ba:be:da:dd:ad:e7:f3:4f:83:d7:dc:48:b6:f0:
4b:88:65:37:7d:10:4c:10:47:18:82:fd:89:1a:66:
f4:75:93:1b:18:be:e3:ee:4b:35:4a:54:43:d3:9c:
64:78:83:3c:f2:9b:29:4a:4e:80:81:0b:b1:be:15:
0e:36:25:e1:fe:8f:0b:64:d3:2e:2f:dd:76:b4:bf:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D6:3D:67:5A:C2:5E:D1:0E:E8:70:D6:13:86:70:0F:B9:C3:44:39
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3231372e32312e36342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.64.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:fb:93:a7:8e:c7:45:1f:a7:70:cd:b7:e3:d1:fe:c9:29:df:
ed:8f:a7:62:25:d8:5d:1e:2b:eb:71:92:80:26:eb:35:fb:50:
cb:5e:8d:f1:36:6e:b5:d9:00:ea:c4:5c:17:d8:d1:b8:36:67:
78:90:9e:ec:98:2e:01:6c:6a:ee:6b:7a:b6:c0:c5:c4:f9:65:
09:ee:ec:3a:b6:12:2f:c4:f6:64:a9:9c:44:2e:d0:24:0b:c9:
37:d9:76:fb:0a:66:a5:98:72:2b:24:67:e8:91:cd:f1:36:16:
a3:94:80:e8:b7:fe:f4:77:b2:8d:b0:af:64:df:db:42:8a:21:
b7:fb:37:13:7a:cb:1f:d8:16:94:c2:b9:58:8e:de:56:26:c9:
fc:0f:ba:b5:41:db:77:a4:93:a2:e6:ef:5e:31:88:62:1b:f8:
78:4b:64:d8:12:cd:2e:04:6c:ef:50:20:3d:ff:a7:5a:24:ee:
85:77:07:19:22:fc:fb:62:fa:21:41:19:65:95:ad:21:22:60:
5c:37:2f:42:fd:d9:aa:6c:59:31:27:dd:c0:e7:c1:10:0a:7a:
ae:5f:d2:a2:dd:e1:43:ef:8b:24:ef:5b:13:21:81:0d:81:57:
d3:f4:03:3a:c0:24:d4:35:cb:c8:4f:b4:c6:96:08:38:e7:4b:
b2:42:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net