Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3231372e32312e36382e302f32322d3234203d3e203437353833.roa
File: 3231372e32312e36382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: rMiH/0/Cs4qZeYUBH9EjKzOvlGsrZOZuQfPR53NNPx8=
Subject key identifier: 4E:0F:E8:E4:99:36:65:51:7B:1F:32:A3:DB:DF:0C:46:D2:FF:13:CF
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 03470F27F6B31BF5D730522008DAD7E3712A16A0
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3231372e32312e36382e302f32322d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:34:23 +0000
ROA not before: Sat 22 Oct 2022 04:29:23 +0000
ROA not after: Sat 21 Oct 2023 04:34:23 +0000
asID: 47583
IP address blocks: 217.21.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:47:0f:27:f6:b3:1b:f5:d7:30:52:20:08:da:d7:e3:71:2a:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:23 2022 GMT
Not After : Oct 21 04:34:23 2023 GMT
Subject: CN=4E0FE8E4993665517B1F32A3DBDF0C46D2FF13CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:b7:11:a0:f6:25:c5:c6:49:93:23:0b:3d:
f9:b4:a9:dc:e6:ec:38:c2:0b:10:ec:d6:07:83:91:
b4:4b:7f:9e:3a:47:15:e2:08:14:57:6f:93:e8:bf:
fe:ec:23:e5:20:ad:4b:d5:d6:c4:ff:89:dd:96:e4:
d0:ca:92:0f:5b:f2:46:a1:aa:1d:3f:6b:8f:bb:bd:
2f:17:7f:dd:92:49:02:65:5a:fc:15:4b:2a:92:ba:
9c:ac:8e:86:c6:08:9e:f1:c0:0a:20:64:31:f2:2e:
fd:c1:b5:3c:af:a1:49:0e:d1:7f:d5:82:b9:96:60:
e5:46:dc:3c:08:39:5d:54:39:68:de:33:f9:ad:f3:
bb:55:82:78:e2:95:fc:5e:b5:da:1d:fc:91:47:bc:
4f:62:fd:6a:ac:73:5b:55:72:2a:4b:db:44:36:8d:
11:ab:48:f6:30:ca:80:d2:2b:9c:d4:d1:1c:a7:e9:
96:8e:39:fb:5c:d3:83:11:e7:92:d4:47:79:09:25:
f9:30:68:32:a7:44:82:01:28:12:13:e2:35:7d:46:
35:cd:d2:4c:cb:26:68:ad:47:2d:70:1e:d7:ea:89:
dd:f1:10:ee:b5:7c:ef:12:78:9b:c8:da:3b:4b:f7:
58:e6:ca:c4:50:1a:93:57:b7:db:1d:3b:11:46:72:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0F:E8:E4:99:36:65:51:7B:1F:32:A3:DB:DF:0C:46:D2:FF:13:CF
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3231372e32312e36382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.68.0/22
Signature Algorithm: sha256WithRSAEncryption
52:6f:e2:9f:da:58:ea:60:d2:09:d3:ee:11:74:dc:77:01:37:
6d:fe:d3:c4:d2:57:5a:14:16:19:39:d9:c0:47:63:d7:47:b1:
f8:82:da:7b:29:38:ce:0a:a5:09:6d:2f:fc:ca:7a:c5:9b:30:
9a:e5:d9:dd:83:26:d8:b0:c8:3b:ac:d3:7c:08:56:8f:e9:ba:
ec:4c:15:c5:7b:8f:cc:1e:e9:e4:1f:93:0e:59:c0:93:77:33:
31:7a:1c:93:76:7a:d8:1e:b3:22:3d:4d:76:e9:e7:95:fe:21:
3f:91:b5:7c:dc:e2:f5:96:24:36:ba:45:45:c0:13:fe:e0:d7:
3f:0a:4e:b0:1d:b9:6e:c2:4e:dc:a6:a8:e0:ed:e4:4f:e8:f1:
2e:ee:48:9b:60:40:86:84:c7:2b:16:52:28:74:73:5d:59:a0:
1b:cc:45:aa:de:66:94:37:60:00:2a:23:61:ad:3e:28:41:fd:
42:8f:59:6c:a0:d8:f6:db:15:23:7e:77:61:24:89:a6:e1:95:
3c:ad:17:58:e8:eb:e6:91:94:18:25:00:05:3e:a2:2f:3f:0a:
8f:17:07:7d:4d:5d:c3:37:d8:b8:4d:8c:84:86:8c:c9:11:f9:
98:ca:4b:d1:4e:58:66:70:cf:1c:ac:42:67:f8:0d:c1:93:07:
c8:93:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net