Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e203631333137.roa
File: 33312e3138372e37332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: PHrsfHPD2QXtgUOZC8Ja7OMW7PGCthIrShhn4c6I6A8=
Subject key identifier: AE:ED:58:C5:00:64:38:0D:5F:51:79:EC:1B:28:EF:E6:AD:8E:12:C9
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 5CEA0CFD7B6B5CEFF7FC92252990C3B4D66B0CDA
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e203631333137.roa
Signing time: Sun 26 Dec 2021 20:08:05 +0000
ROA not before: Sun 26 Dec 2021 20:03:05 +0000
ROA not after: Sun 25 Dec 2022 20:08:05 +0000
asID: 61317
IP address blocks: 31.187.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ea:0c:fd:7b:6b:5c:ef:f7:fc:92:25:29:90:c3:b4:d6:6b:0c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 26 20:03:05 2021 GMT
Not After : Dec 25 20:08:05 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:af:30:1e:bb:7b:70:9f:05:92:db:84:29:
86:dd:97:c5:83:4c:17:1e:c4:b3:73:46:02:b9:ce:
62:03:fd:1e:1a:df:f5:e1:6d:59:48:8c:90:8f:97:
d6:6c:65:8b:b4:e2:2e:d4:42:ea:ac:35:50:15:96:
23:e1:35:99:ce:9d:da:65:f5:2d:55:27:cb:fc:69:
eb:2b:e1:90:9f:86:cc:68:1c:71:a6:f1:6b:37:60:
fb:21:7f:0e:7c:8f:5b:b0:56:92:a1:41:26:83:93:
72:3b:bc:fc:a3:63:a6:cc:e9:10:36:24:c4:48:83:
19:6a:8c:01:48:81:68:3c:10:83:eb:44:c5:fd:74:
87:02:43:71:3f:97:56:13:d6:0d:5a:2f:72:0b:12:
9d:f4:17:ad:b2:58:0d:4d:35:22:2f:7f:14:6d:20:
62:ef:5d:a9:9d:ec:2b:7b:41:5c:f0:3d:64:98:58:
26:b7:af:5d:5b:ff:94:ae:70:40:4a:09:ab:aa:8d:
ff:b8:85:8c:8b:b1:70:60:91:00:94:ee:5b:c1:eb:
f3:b6:5c:5c:96:41:11:72:50:37:b7:12:97:39:f0:
f3:3b:d2:42:df:5e:f1:db:e4:43:d2:7d:a7:85:fe:
f2:b9:ca:62:83:9c:c4:4c:31:1e:f3:55:c5:50:ec:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:58:C5:00:64:38:0D:5F:51:79:EC:1B:28:EF:E6:AD:8E:12:C9
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.73.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fe:46:3c:9a:dd:c1:8e:61:be:65:36:5e:f4:05:22:f9:9b:
7f:8e:32:68:2d:d6:d4:bb:6e:a6:78:86:7f:8d:d1:48:ef:25:
e7:87:55:35:35:42:2d:a0:5d:14:5c:9e:6a:9c:55:df:04:ff:
bc:24:b6:07:ec:44:ea:de:d7:ec:3a:75:47:dc:1b:17:31:71:
d5:53:81:c2:20:17:71:cd:81:90:89:1b:86:ea:47:1d:29:41:
b1:81:48:0d:67:99:d8:97:55:de:cc:d7:36:34:1c:4d:38:47:
3a:74:44:ab:67:0e:4c:9a:58:58:93:8b:b9:78:d9:1d:ed:0d:
91:c6:6a:21:b6:29:ae:b3:f3:92:64:fd:89:f3:c9:de:21:97:
5b:e7:71:7d:76:a0:9b:e5:83:89:8a:9b:b6:85:91:af:16:fb:
35:14:70:68:e9:be:d1:ca:0a:c0:c7:ef:78:5f:48:bc:04:15:
5f:86:12:46:21:6a:65:2c:e1:8d:07:81:8f:29:4c:02:ff:51:
27:f8:03:44:ef:b4:4d:84:54:05:31:35:fa:c8:b9:05:47:d6:
e7:66:d9:8f:53:59:96:dc:8e:a1:d7:71:80:c6:ba:76:ef:cf:
05:67:30:6c:2c:db:02:59:34:a1:15:e8:98:0d:d7:e6:2e:87:
7c:3a:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net