Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203437353833.roa
File: 33312e3138372e37362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: vE6IDV5tZMvuvn/8aGGcqfCq6VuWjg3u2nFgkIIkr2I=
Subject key identifier: DA:72:7F:3B:9D:DF:E2:20:5B:26:66:37:58:EE:F9:1A:29:52:BA:31
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 32CB3AA8A7FE1C524344A0CDABCA67F4A7146770
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:34:14 +0000
ROA not before: Sat 22 Oct 2022 04:29:14 +0000
ROA not after: Sat 21 Oct 2023 04:34:14 +0000
asID: 47583
IP address blocks: 31.187.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cb:3a:a8:a7:fe:1c:52:43:44:a0:cd:ab:ca:67:f4:a7:14:67:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:14 2022 GMT
Not After : Oct 21 04:34:14 2023 GMT
Subject: CN=DA727F3B9DDFE2205B26663758EEF91A2952BA31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:03:4f:17:63:02:17:93:0f:a6:d9:fc:f9:
c7:c6:3a:2a:43:e4:22:64:37:01:1c:c0:77:dd:7f:
f2:06:5c:8a:42:3f:90:1b:4b:97:e7:01:de:15:a0:
34:c0:96:c1:b1:60:0a:fe:1a:54:1e:c9:f0:6f:d0:
2b:c4:8e:b9:29:8a:f0:ed:83:ab:3f:eb:53:18:5b:
26:15:eb:b6:81:10:ee:ed:de:65:25:78:2c:b2:75:
43:44:29:be:5d:2b:2b:32:5d:bf:e3:45:5c:bb:7d:
b3:5e:0f:42:36:55:f2:aa:c5:1c:e4:e1:2b:45:dd:
a2:5a:ac:a7:eb:57:70:e0:d7:67:db:d8:bb:d5:e7:
79:9f:02:83:6d:23:aa:1b:18:38:24:2a:21:eb:18:
ea:64:ed:f4:1c:d1:d8:d4:e3:5a:c6:82:32:7a:f2:
40:ab:9b:3b:f7:a8:f3:a5:f6:d0:59:ab:fa:cd:76:
b2:66:c7:10:18:32:0e:f1:32:41:27:18:f0:5a:66:
ce:c8:dc:1b:4f:c0:ec:df:a0:5d:24:b8:0e:ba:6e:
f0:8f:b6:2a:c9:46:03:5e:9c:55:20:ce:c3:3a:3a:
e5:cb:f1:38:af:0c:74:d8:16:24:8f:1a:7a:07:78:
61:9f:3b:c2:d5:43:5f:c5:09:8a:62:82:7c:3c:5f:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:72:7F:3B:9D:DF:E2:20:5B:26:66:37:58:EE:F9:1A:29:52:BA:31
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b8:b9:9e:47:bd:f5:a4:9a:1a:7f:03:c3:2f:72:c5:c5:e1:
75:4e:8f:f9:99:bc:07:87:e1:a4:49:5c:43:11:93:27:6d:72:
cb:80:5b:8c:84:d0:c6:b8:3e:e9:d2:15:59:e5:83:2d:c4:d5:
85:eb:7e:41:fc:2d:40:55:84:0c:7c:4a:5d:4f:7c:a5:94:ad:
f4:1e:e1:21:69:3f:80:46:c4:f7:bb:4a:32:35:29:ae:cf:70:
22:be:83:d6:44:83:28:81:1c:93:96:c7:2f:61:18:59:f9:e3:
88:cd:6b:e8:94:a7:fb:0a:77:5d:a1:cd:d7:31:b3:b1:52:5d:
b7:f7:e6:ce:b6:91:70:36:1c:dc:28:96:16:5b:08:20:5e:00:
ab:a4:ea:fb:d1:15:2e:92:b4:55:08:04:03:69:8a:e7:9b:97:
99:bf:8b:94:72:9d:01:77:55:7a:67:7e:73:db:43:2e:1f:75:
c3:aa:8c:03:3c:29:16:50:15:bf:bc:91:38:55:26:e2:68:6b:
ec:35:11:81:20:60:f6:2e:c4:26:cc:8f:d2:97:00:14:8a:1c:
07:49:f5:4b:80:bb:b9:63:84:fd:09:c2:68:18:cb:ec:e3:bb:
4e:f8:9f:4e:11:25:17:7a:cd:e9:3f:5d:46:2e:ec:fe:a3:3f:
f0:9f:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net