Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34342e302f32332d3233203d3e203432373038.roa
File: 33312e3232302e34342e302f32332d3233203d3e203432373038.roa (raw, json)
Hash identifier: EIe/A+fjQWgW46Ez3P54HkYcG00uDFePDbcWv+a3Ujo=
Subject key identifier: 97:0D:81:14:B4:73:D9:3C:03:AC:44:01:1F:43:56:4A:D7:E8:96:DC
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 3823C32AE71A225CCFB110725FF0AB15F6D51863
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34342e302f32332d3233203d3e203432373038.roa
Signing time: Sat 22 Oct 2022 04:34:11 +0000
ROA not before: Sat 22 Oct 2022 04:29:11 +0000
ROA not after: Sat 21 Oct 2023 04:34:11 +0000
asID: 42708
IP address blocks: 31.220.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:23:c3:2a:e7:1a:22:5c:cf:b1:10:72:5f:f0:ab:15:f6:d5:18:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:11 2022 GMT
Not After : Oct 21 04:34:11 2023 GMT
Subject: CN=970D8114B473D93C03AC44011F43564AD7E896DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:b2:1f:c4:04:d6:aa:d7:38:d3:f0:c2:37:
b3:ea:95:ff:4d:de:33:4a:29:e8:c4:dc:57:70:86:
a6:81:ca:36:8a:64:9f:f8:a2:f6:7e:c5:d5:6b:13:
8a:4c:bc:7b:44:02:87:05:35:43:af:8f:98:42:c6:
ef:66:e2:6f:a7:a0:6b:2e:2d:97:58:a3:57:d1:94:
74:bf:31:74:37:61:80:80:07:d6:26:8d:30:7b:3a:
89:92:b7:f6:db:1a:a0:2b:eb:cb:a2:8f:21:65:6b:
53:11:0e:04:dc:3a:6b:74:a6:45:eb:4a:40:58:10:
60:f9:df:3c:2f:04:15:6a:f0:8c:9b:57:40:f1:22:
a8:82:69:84:c1:84:28:da:1f:d5:b9:d2:03:b6:aa:
f3:44:32:e2:71:19:c3:37:87:05:c0:08:38:24:70:
88:ce:19:6d:32:1e:fd:f9:5a:ac:96:32:04:c0:fc:
41:af:3e:35:9e:46:16:70:be:25:cd:25:ac:ae:a4:
74:4c:3f:d1:9f:63:63:9d:21:f6:b9:0d:01:ae:08:
7e:7b:c7:fa:6c:c1:ba:3e:94:36:2e:85:f2:7f:b7:
8c:be:fc:7d:22:11:24:92:78:2c:83:74:97:ed:55:
28:59:6b:d4:70:13:fa:66:f9:0f:a5:c4:de:38:2d:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0D:81:14:B4:73:D9:3C:03:AC:44:01:1F:43:56:4A:D7:E8:96:DC
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34342e302f32332d3233203d3e203432373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:d6:8d:54:2d:b5:94:8d:55:ed:0d:cc:62:d0:a6:b8:62:5b:
45:2d:d0:d5:82:74:e1:98:47:8d:b0:21:f5:dd:7e:02:6d:2f:
82:38:ba:0d:42:5f:b4:91:46:24:81:b4:ec:44:7f:6f:07:2f:
b9:f7:5e:8c:9b:28:46:cc:2a:88:b3:4c:86:dc:be:03:41:9b:
19:90:3e:f2:ed:00:45:36:d7:0a:fb:f5:69:db:d1:dd:94:36:
c6:8d:38:f8:86:35:41:80:15:d2:18:f4:51:00:44:9e:09:e2:
65:d9:96:ea:cf:c1:5c:c9:71:0a:4a:36:9b:45:c4:db:f9:4d:
77:d8:e4:9c:41:36:5b:d4:93:b5:ba:32:5c:19:83:87:6a:b8:
c6:51:51:10:55:82:e0:56:b0:12:20:80:35:ef:24:df:31:9b:
76:1d:49:b2:5c:9a:78:6f:a7:52:ab:79:90:85:a0:51:8b:f5:
dd:72:bf:e4:94:91:f9:aa:42:5d:30:1f:78:31:cf:e2:93:03:
b3:b4:95:e9:9a:a8:d5:12:02:3b:73:91:40:0d:62:78:70:8e:
c3:92:82:8f:cb:30:3b:e9:a5:0d:b9:94:ad:d4:53:a9:44:fe:
16:2f:b4:17:0f:eb:30:9d:ac:db:42:a8:5c:9c:ea:84:6c:c1:
38:c0:b8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net