Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203630373231.roa
File: 33312e3138372e37322e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: mcsALjXE8zdZs5JkGP/V0hFOnNS3PnDqCPnbceWW5ek=
Subject key identifier: 41:47:E8:07:9A:3D:4B:8D:64:63:66:89:3A:31:93:A6:C6:0C:B9:3B
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 7487A1F437F6F09842F516E640A723D874A448B2
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203630373231.roa
Signing time: Tue 09 Feb 2021 11:21:32 +0000
ROA not before: Tue 09 Feb 2021 11:16:32 +0000
ROA not after: Tue 08 Feb 2022 11:21:32 +0000
asID: 60721
IP address blocks: 31.187.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:87:a1:f4:37:f6:f0:98:42:f5:16:e6:40:a7:23:d8:74:a4:48:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Feb 9 11:16:32 2021 GMT
Not After : Feb 8 11:21:32 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fd:a7:71:91:f9:2a:8a:f1:c3:4a:b4:46:64:
70:3e:4b:37:48:a9:e8:5c:ee:84:51:5e:4d:fb:77:
5d:ca:19:c7:75:e3:dc:d1:9f:6a:e1:c0:24:47:f3:
a2:1a:c4:f5:18:37:71:51:14:7c:a8:e4:01:f0:0b:
0d:9f:5a:45:19:e0:de:80:54:5c:2d:7d:7d:4b:85:
f2:8a:96:89:16:42:3d:4d:89:0c:18:c8:f2:4a:f6:
b5:96:85:8e:d5:85:38:ab:fb:d2:6c:9c:fa:9d:ad:
eb:61:a1:bc:08:4f:b7:db:2a:19:fa:e5:92:39:a3:
b7:a2:3c:bd:33:1d:a0:43:04:3c:b4:8f:7a:c0:f4:
43:f9:31:a4:d8:53:d1:e9:14:98:42:b8:22:1d:82:
35:7d:04:65:5e:02:e4:b4:32:65:35:af:7f:68:fa:
70:7d:6d:5f:30:bf:03:1b:6d:93:58:a6:12:27:f0:
61:4b:16:cd:e7:20:4f:24:45:94:d0:72:dd:6e:fb:
cf:a2:3a:17:68:5c:2b:37:08:71:54:ee:a3:de:fd:
18:a6:dc:a6:d5:cc:dc:df:c4:6f:3c:37:53:3e:d0:
da:7c:09:0e:d6:b9:0e:a6:2a:ea:b7:04:91:c0:17:
cf:a6:8e:49:bf:d1:e5:4e:19:2a:f9:c0:40:4c:97:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:47:E8:07:9A:3D:4B:8D:64:63:66:89:3A:31:93:A6:C6:0C:B9:3B
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.72.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b8:81:31:6b:42:51:2f:52:0f:21:cc:01:e2:14:06:8f:50:
86:33:7b:71:2e:91:a9:74:52:04:e9:1d:ec:6c:a3:27:68:2f:
39:00:a0:50:ad:af:8f:48:93:61:d6:d2:b5:d4:16:fa:8b:e3:
77:e5:60:be:6b:3e:36:25:ab:9f:e9:8e:16:51:98:6a:36:7b:
20:36:3b:84:fd:16:ff:c6:ee:ac:14:a2:4f:4c:ac:ac:75:8b:
c0:6c:b5:81:03:6e:34:b6:6b:66:40:0f:af:ff:c4:d8:62:af:
23:f4:49:eb:7d:38:83:24:0e:ff:e9:fd:e3:82:85:e9:44:0f:
de:07:f1:c1:30:ba:0c:42:7a:73:4e:6c:2e:a6:b9:8d:18:aa:
07:f7:f2:73:f0:1d:af:4b:17:fd:8c:ea:a1:ed:e9:0e:4b:4b:
96:5a:9d:b1:5a:7a:d3:21:27:50:19:0b:02:3b:07:ff:a3:f5:
48:3f:95:2e:98:b9:96:a0:a3:8a:b9:02:a8:93:cb:6c:4d:3f:
f5:a1:4c:89:ea:b4:65:12:40:58:b8:f9:de:75:2d:b9:e7:d8:
0e:4d:bf:d5:b8:9b:eb:4d:1e:d3:a9:ab:6a:27:33:35:a1:bc:
96:64:9f:86:c8:bc:b3:69:d0:4e:03:91:27:8e:38:bf:5d:3e:
50:d7:fe:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net