Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36342e302f32342d3234203d3e203633343733.roa
File: 33312e3138372e36342e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: dBV8dZOOPI4WsZGnIGMEnVyyqgJtvG4VWmyuOy3x0tg=
Subject key identifier: C4:E8:2D:56:88:D8:9E:03:01:CA:F4:D7:33:52:8F:5D:AF:25:31:83
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 4F5FE885C1812A6FE7AF94D3CB432B4E9A16227B
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36342e302f32342d3234203d3e203633343733.roa
Signing time: Sat 22 Oct 2022 04:34:27 +0000
ROA not before: Sat 22 Oct 2022 04:29:27 +0000
ROA not after: Sat 21 Oct 2023 04:34:27 +0000
asID: 63473
IP address blocks: 31.187.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:5f:e8:85:c1:81:2a:6f:e7:af:94:d3:cb:43:2b:4e:9a:16:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:27 2022 GMT
Not After : Oct 21 04:34:27 2023 GMT
Subject: CN=C4E82D5688D89E0301CAF4D733528F5DAF253183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:6f:aa:86:e4:d1:1c:5f:d1:a8:c9:bd:9c:
ff:d3:40:c9:5d:b3:0a:b9:74:99:1c:bd:89:c4:ed:
3c:f1:c9:d9:7c:34:a8:dc:55:60:0d:2c:33:3e:bd:
c4:e5:c1:06:e0:63:5d:00:60:ef:91:78:82:07:99:
6c:a2:d7:33:7e:b5:9b:3c:06:da:7a:58:74:20:d4:
00:4e:04:ee:64:27:45:80:a6:00:99:27:0d:44:08:
70:b1:89:6f:d1:47:0d:97:e4:d0:fa:8d:21:04:e1:
43:e1:ee:95:53:c6:c5:0c:bc:eb:b1:55:e4:6d:55:
95:5d:de:90:ba:84:2e:cf:12:33:f2:63:38:95:cf:
f4:13:0d:a9:38:d1:5f:a7:a2:c0:44:ff:a3:30:e9:
27:13:f6:2a:27:ff:60:b4:8c:7b:a9:11:ce:fd:36:
f8:6c:fd:68:a0:1b:e0:2c:dc:13:47:27:4b:63:00:
ae:53:3f:40:d9:f4:91:a3:95:06:34:b8:65:1d:af:
fb:5c:cf:31:b6:c1:a0:b7:95:ae:98:8c:8c:2c:c7:
f4:55:47:71:54:32:64:28:e8:c5:16:fb:4c:57:90:
46:0c:1c:e7:59:57:00:16:80:e1:88:04:2b:ba:5f:
c1:23:b1:2f:a7:c2:77:ac:db:79:24:3b:de:9c:f9:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:2D:56:88:D8:9E:03:01:CA:F4:D7:33:52:8F:5D:AF:25:31:83
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36342e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.64.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2c:af:42:46:55:a2:06:86:21:a8:04:6d:88:d0:89:bd:71:
1e:3e:44:5c:0b:34:31:ee:f8:c4:d0:84:cf:82:cd:fb:db:f6:
ef:f7:e2:ca:76:67:81:bf:74:47:80:8d:63:9b:4d:f8:cb:19:
a4:2d:63:32:c4:c8:1e:7f:07:9d:f3:a0:87:0c:c0:10:d2:c4:
73:08:41:bf:25:ef:35:2c:06:79:b2:f1:6a:6d:5c:79:5d:14:
f4:98:57:d8:60:1b:22:24:01:9b:03:2b:96:c6:37:7b:c8:2e:
78:0b:55:97:06:ac:4e:f2:1e:c9:6f:94:3f:2b:4a:9c:f3:dd:
0d:54:7b:f2:ab:c3:a3:4b:bd:18:a3:14:17:e7:87:a4:86:bc:
42:f1:a7:df:28:ff:4a:69:3c:0e:27:25:0a:38:16:fa:bc:0f:
b4:c2:fd:26:c9:ab:f5:42:26:8d:9e:43:87:8d:23:4f:2e:8a:
56:7c:34:e5:44:b7:41:e1:38:7a:c2:9a:ae:3b:1b:03:ea:5c:
05:b4:75:4d:7d:40:e2:13:6b:e8:0b:b3:bd:ad:1c:9d:de:5f:
9e:2b:45:c9:77:38:d1:14:d5:7b:a2:1c:d8:68:a9:68:40:71:
49:6b:fd:92:15:f4:01:69:4b:d7:9f:be:f0:06:17:d8:8e:b9:
f9:98:3c:b3
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUT1/ohcGBKm/nr5TTy0MrTpoWInswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MjdaFw0yMzEwMjEwNDM0MjdaMDMxMTAvBgNV
BAMTKEM0RTgyRDU2ODhEODlFMDMwMUNBRjRENzMzNTI4RjVEQUYyNTMxODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsm+qhuTRHF/RqMm9nP/TQMld
swq5dJkcvYnE7Tzxydl8NKjcVWANLDM+vcTlwQbgY10AYO+ReIIHmWyi1zN+tZs8
Btp6WHQg1ABOBO5kJ0WApgCZJw1ECHCxiW/RRw2X5ND6jSEE4UPh7pVTxsUMvOux
VeRtVZVd3pC6hC7PEjPyYziVz/QTDak40V+nosBE/6Mw6ScT9ion/2C0jHupEc79
Nvhs/WigG+As3BNHJ0tjAK5TP0DZ9JGjlQY0uGUdr/tczzG2waC3la6YjIwsx/RV
R3FUMmQo6MUW+0xXkEYMHOdZVwAWgOGIBCu6X8EjsS+nwnes23kkO96c+ZNvAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUxOgtVojYngMByvTXM1KPXa8lMYMwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMzMxMmUzMTM4MzcyZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMz
MzQzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAH7tAMA0GCSqGSIb3DQEBCwUAA4IBAQCRLK9CRlWi
BoYhqARtiNCJvXEePkRcCzQx7vjE0ITPgs372/bv9+LKdmeBv3RHgI1jm034yxmk
LWMyxMgefwed86CHDMAQ0sRzCEG/Je81LAZ5svFqbVx5XRT0mFfYYBsiJAGbAyuW
xjd7yC54C1WXBqxO8h7Jb5Q/K0qc890NVHvyq8OjS70YoxQX54ekhrxC8affKP9K
aTwOJyUKOBb6vA+0wv0myav1QiaNnkOHjSNPLopWfDTlRLdB4Th6wpquOxsD6lwF
tHVNfUDiE2voC7O9rRyd3l+eK0XJdzjRFNV7ohzYaKloQHFJa/2SFfQBaUvXn77w
BhfYjrn5mDyz
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net