Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa
File: 33312e3232302e34322e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: LxpBnoNDQgoZP0JVB8Nl0il4h3FdYUVZqjCTYfhLznA=
Subject key identifier: 74:E0:FA:BF:C1:0F:C2:E7:7A:8B:5D:B0:DC:50:D6:94:2F:39:7A:AF
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 4110770C2EA9B39947931A2FDAF3E0C8D8506CEB
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa
Signing time: Sat 22 Oct 2022 04:34:22 +0000
ROA not before: Sat 22 Oct 2022 04:29:22 +0000
ROA not after: Sat 21 Oct 2023 04:34:22 +0000
asID: 63473
IP address blocks: 31.220.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:10:77:0c:2e:a9:b3:99:47:93:1a:2f:da:f3:e0:c8:d8:50:6c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:22 2022 GMT
Not After : Oct 21 04:34:22 2023 GMT
Subject: CN=74E0FABFC10FC2E77A8B5DB0DC50D6942F397AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:4d:ce:48:62:51:b5:1d:aa:44:2e:8d:15:
4d:e0:17:f2:81:ba:1e:9a:d6:2f:b1:f6:6e:61:11:
0b:3a:c3:da:ef:56:60:a5:10:d2:88:33:af:b1:87:
e5:e2:19:63:7a:72:68:e2:75:81:c7:2f:e5:77:64:
cc:a4:ba:ef:95:e1:4b:5b:e8:d8:fe:d8:0b:78:dd:
d4:51:c9:e4:a1:4e:bb:bc:66:af:ae:0b:e5:86:e5:
b2:58:bc:78:b3:5e:95:8b:c0:f8:3f:ca:c2:c9:37:
5f:8f:de:c4:42:89:8b:ee:7d:6c:4d:25:6d:04:ec:
66:08:19:e9:0e:a1:87:d7:75:b3:e0:e3:00:4d:8c:
df:97:4d:5f:1a:10:9b:ad:8c:b8:f1:69:57:53:d1:
3a:b6:33:50:84:32:e3:4b:d4:93:93:db:ba:2e:03:
49:21:bc:9b:f5:22:36:fe:c6:e8:1d:22:a5:5b:3c:
1d:41:9c:52:a3:79:e4:30:d0:49:d8:c7:55:fc:63:
22:40:1c:a8:55:b6:70:9f:a9:c0:99:09:b5:7d:8a:
a7:fa:41:72:0a:9c:a4:75:70:53:52:65:f5:a5:a1:
54:51:d3:aa:80:d9:ed:46:91:c8:b9:0e:2f:02:a9:
6c:52:e7:89:54:12:4d:e3:30:5a:d8:ae:8e:dc:f8:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E0:FA:BF:C1:0F:C2:E7:7A:8B:5D:B0:DC:50:D6:94:2F:39:7A:AF
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.42.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8a:46:fc:d0:31:a5:58:ed:b7:77:2e:6a:59:7b:0d:71:56:
24:0d:e3:33:c9:5e:fa:94:ab:da:e8:0e:93:a5:8d:2b:f6:63:
4d:e8:08:7e:65:64:d5:26:02:93:47:8b:0b:b4:dd:b0:4e:41:
51:5f:7d:5e:7f:d9:c7:35:b5:b3:de:3c:bb:10:bf:71:5b:bc:
b3:9f:2b:ae:18:71:1f:fa:60:6d:d0:c4:cd:97:83:cc:b1:e7:
ce:a6:53:c4:66:f5:09:db:0d:72:57:c3:37:f2:3f:1b:8c:b4:
1f:fe:e9:4a:e1:21:8f:93:46:0d:6a:43:c4:c3:82:10:be:26:
a2:60:ef:95:26:ec:7c:2d:2c:7e:36:05:fd:05:ea:3b:da:e8:
80:a4:a4:2d:2c:71:52:12:67:40:1b:79:5b:16:4d:89:f3:d7:
2d:5c:32:f9:11:2b:ff:d6:76:a1:96:7f:a9:7c:5a:53:e6:fd:
31:9e:27:47:02:bc:24:99:2b:b4:f2:cc:77:6e:21:d7:6f:fa:
25:b9:89:30:a6:32:ff:da:19:fd:e0:63:66:cf:2c:db:56:68:
0b:33:a7:8e:f7:cc:18:3c:e5:53:2c:57:01:f2:e5:51:65:ed:
3f:8c:d8:d1:13:ef:6f:6a:64:22:5a:a5:84:55:b8:ee:4c:11:
ae:9b:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net