Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e32392e302f32342d3234203d3e20323132373434.roa
File: 33312e3232302e32392e302f32342d3234203d3e20323132373434.roa (raw, json)
Hash identifier: dEF80fh3/QGZdSypREL/vSiAVB2vbit4p4c5JnfsexY=
Subject key identifier: 49:77:FD:8E:90:6A:9A:2E:7B:0C:5E:CF:F9:5E:4B:2E:66:B7:BC:94
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 1DD8A9054F52F20628DC16461E212074C47B0DB2
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e32392e302f32342d3234203d3e20323132373434.roa
Signing time: Tue 28 Jun 2022 04:40:44 +0000
ROA not before: Tue 28 Jun 2022 04:35:44 +0000
ROA not after: Tue 27 Jun 2023 04:40:44 +0000
asID: 212744
IP address blocks: 31.220.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d8:a9:05:4f:52:f2:06:28:dc:16:46:1e:21:20:74:c4:7b:0d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Jun 28 04:35:44 2022 GMT
Not After : Jun 27 04:40:44 2023 GMT
Subject: CN=4977FD8E906A9A2E7B0C5ECFF95E4B2E66B7BC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:89:53:2e:ba:70:46:6f:43:a1:d3:e2:c8:
0c:45:70:e5:3c:af:54:5b:ee:cb:9f:e1:2e:4a:1d:
42:4a:f7:bf:31:b2:5a:d2:0c:76:fb:1d:be:49:41:
88:a1:8b:c1:c9:c2:4b:1c:69:7c:cc:0d:dd:f7:46:
4c:eb:24:c1:d3:e5:92:ac:8e:01:4b:7a:7f:41:9d:
5e:02:08:ed:0a:f3:bd:6c:3c:5d:39:94:3c:6c:e2:
63:69:50:a8:ce:1e:c7:ce:df:93:2d:e6:e5:bf:5d:
2d:17:8d:2e:cc:2b:98:e2:bc:3e:68:b8:07:b8:c5:
10:2c:9b:56:36:3f:74:e1:11:00:44:28:d7:ce:13:
e3:23:ae:5c:21:86:41:a6:dc:2a:e7:56:16:a6:c7:
7c:26:f8:87:03:51:49:c5:2c:71:20:25:d0:14:e9:
8a:69:c0:01:27:62:a9:1c:bc:3e:8a:bf:e0:da:2a:
b6:8c:92:9a:90:1e:64:89:d4:8b:b8:59:00:56:9e:
61:c4:ad:c3:2c:e5:bd:08:8f:f5:43:ee:d5:d7:f4:
59:4e:7f:01:54:2b:d4:22:91:80:62:65:03:32:8e:
04:98:7e:44:e1:ff:39:12:6d:d9:5d:1f:df:52:ae:
d2:19:00:82:6c:7c:cb:e8:eb:12:83:f6:b1:34:3d:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:77:FD:8E:90:6A:9A:2E:7B:0C:5E:CF:F9:5E:4B:2E:66:B7:BC:94
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e32392e302f32342d3234203d3e20323132373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.29.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4c:f4:77:88:60:54:eb:03:95:58:c2:38:2d:1d:a3:10:31:
a1:6f:a6:3e:86:70:7e:a5:5e:b1:0a:4a:24:2f:ed:a4:81:4f:
e0:2d:4c:94:33:49:61:4e:0f:1e:24:13:93:ea:ae:da:a3:d1:
83:18:ca:94:a0:7d:80:35:41:11:3d:19:24:3e:ed:99:5f:84:
cb:58:77:0b:4e:f1:30:44:e0:e0:b9:3c:a4:5b:75:7f:3f:7f:
cb:be:a6:e0:cd:2a:ab:6b:c6:93:50:3e:a9:18:39:41:6e:11:
51:20:ac:3a:b9:ef:52:78:92:35:d6:8a:76:fe:9f:a2:cb:9f:
68:a0:9d:bd:76:7b:4d:7a:aa:36:40:5e:75:38:f3:5e:70:91:
cc:50:d5:4d:87:14:04:5f:c0:39:07:b5:2b:53:1d:a9:8e:c7:
f3:69:64:ea:db:99:79:98:64:e6:b8:8d:7d:f2:71:33:07:fd:
36:d4:09:78:69:d0:08:17:d4:e5:b9:ed:64:7b:bd:f6:e3:cd:
c1:ac:37:73:d5:c9:7f:6b:0a:b7:96:f1:5e:3f:77:c5:0a:14:
42:20:55:10:74:9a:21:2f:88:25:a5:1d:16:e3:82:c4:eb:f2:
76:41:88:84:38:66:40:82:be:2e:5e:05:cf:56:a5:e3:b4:ff:
e2:34:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net