Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e33312e302f32342d3234203d3e203437353833.roa
File: 33312e3232302e33312e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: heaO+UAbQRHYILOh7yRvAzxBGXVg66cij2cqKAHNVLU=
Subject key identifier: 33:A5:EC:B3:4C:24:BC:93:55:63:73:D3:A1:90:49:2F:4A:62:C6:B0
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 5473132B7ED42F76DDAAAF93A439779AE73FBD42
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e33312e302f32342d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:34:28 +0000
ROA not before: Sat 22 Oct 2022 04:29:28 +0000
ROA not after: Sat 21 Oct 2023 04:34:28 +0000
asID: 47583
IP address blocks: 31.220.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:73:13:2b:7e:d4:2f:76:dd:aa:af:93:a4:39:77:9a:e7:3f:bd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:28 2022 GMT
Not After : Oct 21 04:34:28 2023 GMT
Subject: CN=33A5ECB34C24BC93556373D3A190492F4A62C6B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:cd:8d:c7:d5:7c:e6:54:ce:4a:da:d6:c1:
0a:f9:21:5f:2d:90:c1:99:3e:22:c4:c2:8e:2c:20:
d8:b5:a5:59:ea:1f:71:73:fb:62:b3:99:62:e2:93:
c0:e4:d8:9c:48:1b:a8:48:ac:61:a5:34:45:6f:74:
9d:39:1b:e3:3f:79:ba:7b:9c:5e:bd:08:97:22:36:
c8:0f:92:3c:c6:cb:9c:6a:41:d1:ea:ac:93:a6:2e:
e4:93:16:7b:bd:2f:bf:53:95:e0:c2:36:5c:cf:12:
e5:4c:e7:1f:b8:3b:a1:2b:d5:c4:7b:88:3a:21:d8:
d5:f1:8d:66:ae:a5:ef:3c:69:f8:4a:ac:bc:3e:cb:
00:2b:c7:4c:5a:47:2d:6b:50:c4:7e:73:56:5a:fc:
11:7b:bd:f8:08:4b:d2:54:51:7b:5e:45:cb:2f:38:
6d:1d:0f:17:a9:1a:00:62:9f:6c:6f:b1:5b:b8:5a:
87:6a:40:f3:31:e9:d8:84:b7:84:df:d8:c8:17:eb:
05:54:bc:66:f2:6e:7d:ff:bc:d1:7a:da:73:c8:c6:
55:5c:8b:54:d0:24:36:3d:6b:8f:32:c5:a1:9a:d9:
18:15:84:18:fa:fd:a8:a9:98:f6:91:50:d2:8c:2f:
59:39:ce:26:46:c9:3a:9a:cf:c6:91:e0:b5:06:db:
94:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A5:EC:B3:4C:24:BC:93:55:63:73:D3:A1:90:49:2F:4A:62:C6:B0
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e33312e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.31.0/24
Signature Algorithm: sha256WithRSAEncryption
32:77:d5:72:bd:b3:a0:cb:0a:ee:ef:1c:29:8a:db:92:f7:60:
1a:13:0e:25:36:1d:7a:83:f9:33:4a:af:ee:67:ac:a1:f1:d4:
56:20:c3:99:16:f2:8e:0e:02:bd:94:6a:cb:9f:83:24:d8:c6:
b2:62:cf:ce:d1:18:64:6f:71:3a:a1:4c:02:9a:56:d1:5a:67:
55:3e:87:1f:fe:8a:c2:73:25:1e:22:a6:4b:1f:09:8c:66:30:
90:c6:00:81:ed:8e:b0:0f:5d:94:1a:12:04:0b:16:62:9c:f6:
9d:35:c7:8b:49:a0:fd:8a:f1:d7:3f:92:80:d0:08:96:4a:d9:
a9:70:21:3b:27:59:ca:19:a6:5d:48:a8:3e:32:68:41:03:81:
c6:86:ff:44:c3:4a:a4:8c:1a:8a:ba:b6:e3:86:ca:40:e6:a0:
3e:fd:65:fd:00:cc:47:b5:cd:2d:56:e4:af:5e:a0:2f:c2:ea:
09:ed:b9:3d:40:29:97:b3:83:1f:86:07:9d:7e:9b:ee:f6:6f:
e3:a3:c2:88:31:de:5b:09:ef:f3:f3:ea:20:78:26:0b:e4:99:
e4:40:9d:7b:fd:ec:a5:24:4f:a1:5c:22:f9:48:3d:49:5e:fe:
a7:85:00:19:6e:42:38:40:d6:3a:69:f8:79:31:ec:a7:bb:9e:
dc:48:0c:cd
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUVHMTK37UL3bdqq+TpDl3muc/vUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MjhaFw0yMzEwMjEwNDM0MjhaMDMxMTAvBgNV
BAMTKDMzQTVFQ0IzNEMyNEJDOTM1NTYzNzNEM0ExOTA0OTJGNEE2MkM2QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIM2Nx9V85lTOStrWwQr5IV8t
kMGZPiLEwo4sINi1pVnqH3Fz+2KzmWLik8Dk2JxIG6hIrGGlNEVvdJ05G+M/ebp7
nF69CJciNsgPkjzGy5xqQdHqrJOmLuSTFnu9L79TleDCNlzPEuVM5x+4O6Er1cR7
iDoh2NXxjWaupe88afhKrLw+ywArx0xaRy1rUMR+c1Za/BF7vfgIS9JUUXteRcsv
OG0dDxepGgBin2xvsVu4WodqQPMx6diEt4Tf2MgX6wVUvGbybn3/vNF62nPIxlVc
i1TQJDY9a48yxaGa2RgVhBj6/aipmPaRUNKML1k5ziZGyTqaz8aR4LUG25RdAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUM6Xss0wkvJNVY3PToZBJL0pixrAwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMzMxMmUzMjMyMzAyZTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAH9wfMA0GCSqGSIb3DQEBCwUAA4IBAQAyd9VyvbOg
ywru7xwpituS92AaEw4lNh16g/kzSq/uZ6yh8dRWIMOZFvKODgK9lGrLn4Mk2May
Ys/O0Rhkb3E6oUwCmlbRWmdVPocf/orCcyUeIqZLHwmMZjCQxgCB7Y6wD12UGhIE
CxZinPadNceLSaD9ivHXP5KA0AiWStmpcCE7J1nKGaZdSKg+MmhBA4HGhv9Ew0qk
jBqKurbjhspA5qA+/WX9AMxHtc0tVuSvXqAvwuoJ7bk9QCmXs4Mfhgedfpvu9m/j
o8KIMd5bCe/z8+ogeCYL5JnkQJ17/eylJE+hXCL5SD1JXv6nhQAZbkI4QNY6afh5
Meynu57cSAzN
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net