Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203437353833.roa
File: 33312e3138372e37322e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: lzSR3YEhISvWAFx4ctW+CGQPzudouNS7w4tOssVWPjk=
Subject key identifier: F0:E2:9A:DB:CF:B8:0E:F5:31:37:C6:05:CC:D0:9C:3F:18:2D:55:05
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 246625B0B97D08C349E3725FA2BC88966A7F32CD
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:34:24 +0000
ROA not before: Sat 22 Oct 2022 04:29:24 +0000
ROA not after: Sat 21 Oct 2023 04:34:24 +0000
asID: 47583
IP address blocks: 31.187.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:66:25:b0:b9:7d:08:c3:49:e3:72:5f:a2:bc:88:96:6a:7f:32:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:24 2022 GMT
Not After : Oct 21 04:34:24 2023 GMT
Subject: CN=F0E29ADBCFB80EF53137C605CCD09C3F182D5505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:b7:9c:cc:4a:e5:65:3b:11:ce:b1:8c:e8:
c3:36:e8:da:0f:07:7f:3c:f6:25:0c:f3:0b:e9:66:
6b:33:a7:95:9e:09:ee:4d:9b:2a:42:b5:ff:34:de:
13:64:c1:e1:86:4d:aa:87:eb:53:ca:fc:27:7e:80:
57:f7:43:e8:8d:ca:15:13:1f:94:90:74:4f:c0:14:
4c:4f:b9:14:65:c1:04:b1:61:77:35:a9:8c:00:30:
75:c0:20:fb:f4:e0:e0:de:9a:a6:6d:76:df:db:af:
b9:6f:13:73:a2:c4:c6:79:84:f6:b3:2c:81:5f:0a:
02:7a:23:ee:52:eb:78:6f:63:45:6e:a1:be:70:56:
2c:f1:f1:c2:a8:d4:41:c5:8c:90:bb:c1:ad:ba:13:
06:48:4c:f0:c2:bc:d2:86:b2:fd:c6:ce:34:f1:d2:
e4:37:ae:1f:72:b5:cf:7f:62:aa:6e:0f:8e:cc:34:
3e:6b:29:54:cf:2c:47:eb:d9:9c:a3:91:49:f9:80:
ba:b8:b3:c5:44:a8:85:54:a5:6d:94:87:93:25:45:
0c:5b:9a:8b:84:ed:84:76:d8:38:dc:9d:3b:b5:2a:
d5:0a:da:01:69:31:75:8f:90:43:6e:7d:09:9b:4f:
fb:9e:0d:9c:f3:7f:52:b9:0d:d5:df:40:a1:50:34:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:9A:DB:CF:B8:0E:F5:31:37:C6:05:CC:D0:9C:3F:18:2D:55:05
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.72.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ad:7f:08:4d:61:fb:af:98:59:6f:2f:be:82:7f:50:be:85:
67:af:24:12:9f:df:44:ea:7e:a7:85:97:28:37:d8:1a:a0:91:
c8:5e:85:13:04:7d:75:c6:2b:12:1f:ff:78:e3:28:39:64:da:
ad:dc:94:b2:ba:02:d1:64:0c:86:50:85:06:20:d1:c4:7f:28:
51:c1:3f:65:bf:a3:3d:36:20:9a:a5:a1:13:ef:cb:70:24:68:
07:29:a1:a8:3c:c5:f7:23:ac:8e:43:3e:53:af:1a:f1:8d:0f:
36:a2:f9:c1:e3:3c:2f:17:f1:6d:4d:7e:3e:57:4c:2e:01:60:
16:2c:50:15:f3:c7:47:fb:a9:a6:eb:9c:23:97:79:12:a0:4e:
82:eb:21:f7:e3:83:5d:ee:48:0a:b6:dd:de:88:7a:de:b9:e9:
01:d1:e7:b1:7a:68:09:89:b5:1b:97:01:47:49:b3:d6:2e:c1:
35:42:06:5f:f7:28:f7:f1:a7:c4:82:91:ac:7c:be:21:97:5b:
86:f3:73:84:df:90:f5:35:3d:f6:0c:c3:50:09:ee:28:c5:57:
99:38:b8:38:cd:6b:e2:be:6a:ee:56:12:a6:d7:03:06:4d:7d:
5a:91:97:6c:50:98:3d:08:a9:ef:21:05:0c:36:ea:a5:6b:bb:
09:a4:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net