Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203633343733.roa
File: 33312e3138372e37362e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: gcdAHG5lpBMttxNtUNeh0SV4hoQVyhLA5zYQjrviAbI=
Subject key identifier: E2:A3:F9:2E:3D:14:17:AC:EE:94:EB:A9:7B:45:05:12:F4:F7:A3:E4
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: C6D2F8C9CBF7C9DD95CD79D139317266087900
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203633343733.roa
Signing time: Fri 27 Nov 2020 15:10:37 +0000
ROA not before: Fri 27 Nov 2020 15:05:37 +0000
ROA not after: Fri 26 Nov 2021 15:10:37 +0000
asID: 63473
IP address blocks: 31.187.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c6:d2:f8:c9:cb:f7:c9:dd:95:cd:79:d1:39:31:72:66:08:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 27 15:05:37 2020 GMT
Not After : Nov 26 15:10:37 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:ff:6a:19:b6:a9:e7:d2:63:93:2c:35:24:
e2:2b:81:bf:67:07:ed:73:17:40:70:f3:65:f2:20:
c2:1f:5d:6b:8d:f8:70:d0:3a:e7:d5:a7:75:12:5c:
10:99:2c:b9:df:de:c7:88:98:da:18:9f:2e:1b:9f:
d4:b4:41:0b:38:01:1a:96:b5:85:b8:e8:2d:67:a4:
15:3c:6a:45:f3:c5:e0:93:f2:77:56:f1:5d:58:f2:
29:cb:bd:a4:30:3d:ea:91:bf:68:2e:3a:92:04:68:
36:64:b5:9b:c3:3b:82:06:4a:04:91:e3:e9:b2:15:
99:2d:63:24:0a:61:02:38:f0:8c:95:52:b5:6d:f1:
0a:1e:7d:cd:71:5d:fd:81:d6:43:64:dc:8b:aa:bb:
3a:c3:15:95:f6:c0:42:55:a9:2e:fa:60:06:8c:9a:
8e:e7:bb:4b:98:d7:df:2d:f7:80:49:02:87:63:64:
36:73:ed:fb:d2:bc:cd:01:2d:03:8a:1a:a8:ac:5f:
c1:58:fc:18:67:9d:1b:36:19:4b:c5:9b:5a:51:87:
4d:40:f7:39:72:6d:06:5b:0d:9f:48:c2:17:91:1c:
d9:20:c2:28:8b:62:38:4a:31:b6:fb:1f:0a:89:71:
0d:a3:ee:0e:f7:53:b2:ff:0d:bf:a7:8d:cc:a9:e0:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:F9:2E:3D:14:17:AC:EE:94:EB:A9:7B:45:05:12:F4:F7:A3:E4
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.76.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a5:6b:9e:d1:d7:95:c0:92:c6:d1:72:10:f5:3f:89:18:b3:
32:a5:94:0d:eb:7c:14:14:eb:8f:3c:20:6f:6b:c8:33:c2:e5:
ea:72:da:f3:99:ac:69:2a:83:42:d0:a9:63:27:29:a7:06:3e:
70:5e:ec:4a:be:d0:ac:be:8b:05:8f:41:5f:9d:3a:bf:dc:78:
01:ca:92:a5:5b:80:d5:d1:6b:0c:91:01:a9:ee:54:aa:2a:20:
df:cf:df:79:0c:0a:1c:45:33:df:02:84:98:5f:c3:00:c4:02:
dd:66:2f:60:40:1c:95:0f:90:5e:f3:3e:d9:5a:10:97:ab:92:
d1:82:d0:e0:69:c5:ea:5a:23:12:3c:1c:d3:5c:46:9e:a2:5e:
81:55:c7:61:5d:02:7e:a5:98:79:86:64:8d:4c:ae:e5:f1:24:
66:be:ea:fe:3f:65:69:4d:cb:d8:71:48:dd:3e:bf:e1:08:80:
f1:24:99:f2:c3:ff:7b:f5:82:a2:7c:bf:4c:5a:d5:cb:48:57:
ac:42:e3:ed:9c:2d:36:48:8f:fa:c2:2e:43:00:43:15:d3:fc:
be:59:55:eb:3a:90:7d:fe:b4:b0:15:56:2e:9f:e7:f8:41:dd:
84:a2:3c:6d:f9:42:43:46:04:9d:95:40:ea:c6:db:0d:65:1d:
8e:24:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net