Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37352e302f32342d3234203d3e203437353833.roa
File: 33312e3138372e37352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: qGAJdk/gBksowFIO3NwtQA7+2vkfcanKg3v+3r+GY/k=
Subject key identifier: D7:09:91:F6:4A:F4:E7:12:6E:EF:68:3E:47:49:83:3A:E3:E1:56:EC
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 7BDF0F948E36F7BE7D3F83A84427733196CD6102
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37352e302f32342d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:34:15 +0000
ROA not before: Sat 22 Oct 2022 04:29:15 +0000
ROA not after: Sat 21 Oct 2023 04:34:15 +0000
asID: 47583
IP address blocks: 31.187.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:df:0f:94:8e:36:f7:be:7d:3f:83:a8:44:27:73:31:96:cd:61:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:15 2022 GMT
Not After : Oct 21 04:34:15 2023 GMT
Subject: CN=D70991F64AF4E7126EEF683E4749833AE3E156EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:af:2a:e6:69:97:65:2d:ce:99:8c:f9:26:
36:57:15:d9:d5:88:22:51:c0:57:c9:89:94:cb:0b:
ef:ed:f5:d2:c6:7a:3e:c9:97:58:b0:72:8f:42:5b:
dd:d0:14:49:4e:8a:ac:21:b6:3c:0b:9a:d6:4d:82:
73:bb:03:0c:c5:8f:62:86:5c:15:b0:3e:ee:4f:17:
fc:ef:53:7d:2e:53:41:1e:94:94:6a:1d:53:a9:b8:
20:76:d6:d3:73:a2:dc:f8:97:36:82:d1:47:5f:9e:
55:fb:03:ae:d6:18:df:78:59:a7:3b:01:1a:8e:af:
a7:8a:dd:2c:2e:cf:73:36:32:dc:9c:70:93:24:c1:
10:f8:fe:8f:19:76:7b:a6:93:da:d8:b0:34:a0:7a:
25:9d:db:46:de:74:f2:8f:24:00:08:cd:48:34:89:
9c:c1:ea:ef:7f:d3:21:2f:0f:9c:5c:da:88:62:d4:
0e:bb:cb:40:16:1c:5d:b9:98:5d:a4:e2:c9:3b:a1:
f9:70:ba:34:ba:d1:e8:7a:23:22:fa:8f:e9:ee:62:
b4:d4:4b:a2:5d:e6:4e:c9:fb:48:53:a2:49:c5:3c:
bd:6f:3a:f6:61:77:67:85:e0:22:4e:bd:6d:00:5b:
37:e1:7a:30:47:fd:cc:9d:7d:29:d2:ce:af:8e:47:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:09:91:F6:4A:F4:E7:12:6E:EF:68:3E:47:49:83:3A:E3:E1:56:EC
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37352e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.75.0/24
Signature Algorithm: sha256WithRSAEncryption
21:51:ad:8a:96:7b:a1:59:94:37:5c:b5:8e:ea:6a:f3:3c:1a:
8d:16:58:29:ac:85:33:3b:93:d0:00:7b:3b:58:1c:b5:16:5e:
4b:88:72:56:d3:7a:55:8f:2b:0e:7a:65:28:12:a4:13:68:83:
6f:65:2f:81:78:b2:fe:0c:9b:49:8c:80:0f:c8:16:42:5a:94:
b2:3a:71:c8:55:33:e0:f6:48:8b:bb:7f:0d:ac:ad:c2:52:a3:
f1:55:5d:7f:80:df:46:72:0d:19:0a:a0:05:3b:dd:e4:78:d7:
7f:5f:28:ce:16:8a:0e:2d:56:fa:5a:9a:73:34:c9:40:4a:ed:
cd:4c:02:dc:50:fb:38:12:76:37:4c:62:94:48:09:3a:9a:c5:
4a:8a:f0:27:b0:7c:30:86:39:13:d9:e8:68:ad:96:d4:c9:07:
cb:c3:6f:a2:7e:76:c8:7d:dc:81:39:2d:5d:d0:c9:18:72:e2:
a1:b3:cf:9a:e5:17:a1:c0:6a:36:dd:e5:f8:ff:d8:6c:a8:40:
a9:86:f9:f5:14:42:74:b1:1b:b0:75:20:5b:38:00:80:04:79:
97:f8:03:06:0a:a6:69:8d:64:d8:d2:2e:b3:76:4f:47:3b:8a:
51:6e:31:e7:b9:46:b0:63:52:3f:68:8f:df:36:a2:dc:c8:67:
6e:6a:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net