Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203432373038.roa
File: 33312e3138372e37362e302f32342d3234203d3e203432373038.roa (raw, json)
Hash identifier: 5Tgzn/fZmxpmbAjC6Z6vn4McAzYwzvxWyRjqfMqtfN8=
Subject key identifier: C5:29:4F:BF:66:7F:01:64:7D:30:F5:81:91:F1:2A:23:E8:30:7F:62
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 2D0E5A23A48DCB760567DF17BC38F84C2101E579
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203432373038.roa
Signing time: Fri 27 Nov 2020 15:10:39 +0000
ROA not before: Fri 27 Nov 2020 15:05:39 +0000
ROA not after: Fri 26 Nov 2021 15:10:39 +0000
asID: 42708
IP address blocks: 31.187.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0e:5a:23:a4:8d:cb:76:05:67:df:17:bc:38:f8:4c:21:01:e5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 27 15:05:39 2020 GMT
Not After : Nov 26 15:10:39 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:ae:57:b3:bd:60:b5:0b:49:97:92:7a:93:
43:b7:68:2a:4a:a5:1f:02:90:c8:12:46:08:e3:57:
12:e2:61:c6:1f:44:57:7f:ae:f8:09:0f:d1:8e:cf:
35:7a:b2:5b:87:83:95:e6:38:4c:83:ea:62:67:9a:
89:07:d0:76:6c:76:53:28:48:43:1f:bc:c8:00:88:
a7:12:75:ff:20:2d:9e:68:da:b8:4b:fc:be:8b:ad:
df:d8:07:52:a6:47:4a:b0:7b:7c:44:5d:a8:f9:31:
27:6d:7b:46:8b:ab:15:3d:05:06:22:40:a4:be:05:
d1:d2:9a:ce:fd:f2:a8:2b:ea:2a:c3:28:38:8b:31:
46:18:a7:41:fb:d7:93:82:c5:46:0f:47:cd:26:03:
68:24:65:21:b6:5a:1e:cb:6e:52:34:89:d5:e7:96:
a0:1c:c8:f8:a1:66:41:63:f8:ca:53:2d:31:74:c2:
ea:f6:a9:7e:90:9b:b5:6a:3d:45:af:ed:e3:77:e8:
9a:61:75:9d:ab:94:80:10:c1:dd:a7:86:bf:b4:86:
ad:f3:3b:fe:ed:01:83:41:22:ec:eb:ac:79:0b:29:
6b:59:06:87:c5:9b:1a:0b:4e:6d:af:ec:3b:fe:ac:
5e:dc:cb:9b:11:59:70:51:2c:fb:aa:eb:7c:b8:bb:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:29:4F:BF:66:7F:01:64:7D:30:F5:81:91:F1:2A:23:E8:30:7F:62
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203432373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.76.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:9a:84:f5:d4:6b:a4:11:4e:13:61:b9:28:2c:ce:a4:9c:94:
24:aa:9e:23:8c:08:4b:d6:bf:e2:1a:e1:8d:f1:99:2f:36:a0:
88:be:88:54:35:d7:21:4d:36:80:8c:3c:88:bd:f0:7d:b3:aa:
c9:8e:5a:5c:e6:60:d5:39:ee:19:27:1c:22:7d:d0:3a:0b:b6:
e5:5b:56:96:40:a9:fc:11:90:32:a3:ce:83:9f:78:30:3f:70:
b7:38:c7:a3:b6:6e:a9:a8:4e:90:cd:d9:91:d4:f5:f9:cf:66:
71:b9:ee:8c:32:e5:b9:6c:ff:ea:ae:68:27:bd:a8:13:a3:34:
9d:51:6e:a2:fe:54:ce:1a:f6:77:a5:9e:f9:0b:b2:57:85:29:
3d:0f:5c:9b:95:3a:ac:47:bd:13:d6:5f:17:66:e9:b4:45:23:
19:10:ad:65:32:10:ee:76:c0:7a:28:91:40:76:03:2b:87:40:
9a:06:b2:c1:ad:86:a2:df:73:2e:fe:74:2c:37:30:32:d5:90:
a0:15:c3:83:58:e1:e2:b2:3d:ab:4f:d8:02:1d:11:c4:dc:53:
2a:fd:89:76:5b:48:84:90:4e:77:da:31:c9:44:36:ba:74:3c:
ba:76:ba:54:82:65:70:db:89:7b:f6:1b:fd:83:58:48:88:2f:
e7:97:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net