Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36342e302f32342d3234203d3e203432373038.roa
File: 33312e3138372e36342e302f32342d3234203d3e203432373038.roa (raw, json)
Hash identifier: m1YtHvuj/3zsZUlJuoioWz0ZfeWktwjSJE8qHKDgh8o=
Subject key identifier: 02:5E:31:C3:FD:80:B1:AD:D4:2D:D9:77:9D:56:41:B6:D8:10:7C:D1
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 3F0354357859C09BAFA41DE3F6817ECA9AB37A3C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36342e302f32342d3234203d3e203432373038.roa
Signing time: Sat 22 Oct 2022 04:34:34 +0000
ROA not before: Sat 22 Oct 2022 04:29:34 +0000
ROA not after: Sat 21 Oct 2023 04:34:34 +0000
asID: 42708
IP address blocks: 31.187.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:03:54:35:78:59:c0:9b:af:a4:1d:e3:f6:81:7e:ca:9a:b3:7a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:34 2022 GMT
Not After : Oct 21 04:34:34 2023 GMT
Subject: CN=025E31C3FD80B1ADD42DD9779D5641B6D8107CD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:40:b1:fe:30:63:82:ab:67:13:8c:67:63:
5b:cd:cf:89:1c:b1:75:cf:7a:90:8f:c2:e5:f6:2a:
f8:04:09:ca:c6:88:44:f9:3a:be:24:d6:98:c8:1a:
0e:6f:b0:70:c7:f3:47:0f:1d:31:59:b1:ff:a6:bd:
8e:0e:81:e5:34:57:bd:a7:e9:e8:5d:bd:c3:8b:cc:
c1:d6:b0:67:1a:31:50:7d:f6:e7:b7:c2:72:8e:c1:
8a:4e:24:8e:68:b9:b4:75:52:fc:77:d3:9c:22:76:
68:53:64:4a:bd:b2:e2:ef:bf:7e:cf:65:96:20:ab:
40:02:6b:99:8d:d2:0c:c1:87:10:2a:0f:f4:02:6f:
c5:15:c2:65:a8:14:6e:af:24:2d:df:e8:37:aa:b4:
b0:a9:f8:6f:57:5a:04:ff:9f:be:83:07:1e:dc:95:
19:0d:33:85:0d:2a:ba:21:2f:03:8e:f4:a0:87:d9:
fd:32:d0:10:16:18:0d:d7:b7:db:ef:83:86:13:dc:
e2:de:92:93:6e:6e:95:2e:bf:ea:f0:9b:b2:74:c3:
84:f9:1c:87:12:bf:53:77:d8:24:46:f1:2a:5e:db:
b4:45:52:9c:b5:59:12:f1:8d:ec:82:40:c6:68:3e:
ac:54:d4:41:5d:62:ca:20:86:eb:35:b9:81:0b:b0:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5E:31:C3:FD:80:B1:AD:D4:2D:D9:77:9D:56:41:B6:D8:10:7C:D1
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36342e302f32342d3234203d3e203432373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d8:bf:4f:06:03:ff:8d:b2:e5:b3:65:6d:0e:94:57:97:ab:
c3:ea:8b:36:4a:51:86:c3:82:48:9a:3c:0a:b4:9a:b5:51:f8:
3b:59:54:1f:30:ed:6a:6d:1d:59:dc:2b:fb:6f:7a:8e:52:36:
7c:81:53:1e:3b:be:cd:69:ff:ad:94:85:4f:11:f0:13:7f:7d:
6b:da:5e:3f:a3:28:bb:f3:22:82:83:d7:aa:77:b9:c6:ef:a4:
7d:2a:92:0d:3a:42:dc:f2:72:dc:5e:a6:dd:88:c8:2a:38:af:
aa:9d:ef:46:47:64:97:65:7c:2c:32:b6:17:0e:c2:2c:52:ea:
76:c5:02:72:8c:0f:4b:09:d1:fb:8b:90:a5:20:52:7b:64:09:
8f:0a:b4:ac:5e:03:13:c1:2d:1a:c5:ef:b8:06:52:f8:0a:8a:
bb:d5:87:64:3f:bd:2d:d4:a3:05:4b:14:49:fd:a7:6c:00:88:
ff:d8:5b:cf:de:f2:8c:e9:be:be:5e:61:64:d8:a5:53:ba:8a:
47:ab:5e:51:67:09:0c:f9:c2:42:b8:32:8b:f2:42:97:c6:54:
0f:e1:87:86:a2:6f:95:fc:51:bb:5f:91:bd:46:52:e9:96:5f:
17:f9:d5:da:c6:2f:b9:d3:41:1f:f8:d3:2b:d3:9c:bd:dd:4e:
e7:7a:60:c7
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUPwNUNXhZwJuvpB3j9oF+ypqzejwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzRaFw0yMzEwMjEwNDM0MzRaMDMxMTAvBgNV
BAMTKDAyNUUzMUMzRkQ4MEIxQURENDJERDk3NzlENTY0MUI2RDgxMDdDRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbaECx/jBjgqtnE4xnY1vNz4kc
sXXPepCPwuX2KvgECcrGiET5Or4k1pjIGg5vsHDH80cPHTFZsf+mvY4OgeU0V72n
6ehdvcOLzMHWsGcaMVB99ue3wnKOwYpOJI5oubR1Uvx305widmhTZEq9suLvv37P
ZZYgq0ACa5mN0gzBhxAqD/QCb8UVwmWoFG6vJC3f6DeqtLCp+G9XWgT/n76DBx7c
lRkNM4UNKrohLwOO9KCH2f0y0BAWGA3Xt9vvg4YT3OLekpNubpUuv+rwm7J0w4T5
HIcSv1N32CRG8Spe27RFUpy1WRLxjeyCQMZoPqxU1EFdYsoghus1uYELsGb3AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUAl4xw/2Asa3ULdl3nVZBttgQfNEwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMzMxMmUzMTM4MzcyZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMy
MzczMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAH7tAMA0GCSqGSIb3DQEBCwUAA4IBAQB+2L9PBgP/
jbLls2VtDpRXl6vD6os2SlGGw4JImjwKtJq1Ufg7WVQfMO1qbR1Z3Cv7b3qOUjZ8
gVMeO77Naf+tlIVPEfATf31r2l4/oyi78yKCg9eqd7nG76R9KpINOkLc8nLcXqbd
iMgqOK+qne9GR2SXZXwsMrYXDsIsUup2xQJyjA9LCdH7i5ClIFJ7ZAmPCrSsXgMT
wS0axe+4BlL4Coq71YdkP70t1KMFSxRJ/adsAIj/2FvP3vKM6b6+XmFk2KVTuopH
q15RZwkM+cJCuDKL8kKXxlQP4YeGom+V/FG7X5G9RlLpll8X+dXaxi+500Ef+NMr
05y93U7nemDH
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net