Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203437353833.roa
File: 33312e3232302e362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: x/amYhfocSMs0Wc/mBlwsDWpl94KlI9c1YX89feYLco=
Subject key identifier: FA:2F:36:EF:A9:00:99:E3:34:FD:B5:42:6E:F5:9F:B0:29:4D:31:23
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 48BE84A007868F109A81C6366C78C779978E8C7C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:34:12 +0000
ROA not before: Sat 22 Oct 2022 04:29:12 +0000
ROA not after: Sat 21 Oct 2023 04:34:12 +0000
asID: 47583
IP address blocks: 31.220.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:be:84:a0:07:86:8f:10:9a:81:c6:36:6c:78:c7:79:97:8e:8c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:12 2022 GMT
Not After : Oct 21 04:34:12 2023 GMT
Subject: CN=FA2F36EFA90099E334FDB5426EF59FB0294D3123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:b4:65:15:d8:b2:be:d7:91:c5:75:75:7a:
49:c4:5a:2c:a5:39:84:59:1a:c6:cd:d0:59:7a:92:
4a:7b:de:42:f3:45:bb:f6:7d:99:52:9d:83:19:fc:
35:ea:c5:4a:c0:83:2f:4e:7d:80:fe:69:e3:04:4b:
6e:41:87:9f:ee:4c:66:2b:82:f9:67:2c:95:37:05:
21:0f:e2:56:60:fd:74:76:8c:01:e7:16:48:75:4c:
66:6b:82:4a:94:56:3b:1c:98:0b:a8:ac:11:e0:04:
f3:ca:cc:3e:3f:6e:b4:72:d7:29:42:08:7d:dc:51:
a0:52:64:0b:81:f3:41:3f:c8:e2:74:f1:37:fb:2c:
cc:e8:74:83:20:07:58:cb:d4:73:0b:b1:73:4f:0f:
40:7d:6b:df:69:81:79:de:d4:1b:c4:da:6e:4e:0e:
ff:f7:fb:f1:47:56:6e:57:20:51:f3:88:82:17:12:
73:76:84:d3:cc:4e:5d:1d:72:6c:83:70:52:ca:85:
df:e6:f8:57:48:3d:96:89:08:57:b9:0c:36:19:1b:
82:36:a8:c8:94:8e:58:6d:c3:d9:41:a9:fa:10:1f:
5c:58:bc:f7:7e:fd:9e:91:d5:17:0f:37:53:4d:fd:
f5:43:90:e1:ad:1e:e6:fd:df:3a:6c:d5:a6:bd:be:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2F:36:EF:A9:00:99:E3:34:FD:B5:42:6E:F5:9F:B0:29:4D:31:23
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.6.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:e3:37:89:c5:be:fb:a2:95:2c:18:2d:dd:22:e2:05:48:29:
eb:0e:55:c7:2e:c8:ac:0c:9f:5a:dc:ee:ad:87:c3:af:61:76:
54:fe:40:17:97:12:69:c1:78:62:a5:71:47:05:c9:94:d4:cd:
9f:23:8a:fe:dc:97:a1:04:76:d7:55:cd:83:ea:2c:c6:3f:87:
25:59:c3:0f:94:44:fb:5c:91:d1:24:4f:c0:e0:07:08:ae:76:
ec:c1:d9:04:02:75:12:cf:e4:c7:e7:1c:11:4f:04:31:e1:1e:
b1:04:1c:73:c4:87:dd:40:93:f4:20:f9:b3:f9:29:92:d9:15:
e3:9d:cf:8d:6d:82:3d:f4:31:78:c6:f0:d2:65:5d:c7:7d:90:
21:0a:60:c6:47:64:9f:e5:7d:73:8b:f5:e0:75:3e:01:ee:cc:
bc:ae:1b:ab:82:45:20:57:cb:60:e7:0a:60:cd:1b:7f:12:c1:
b4:3b:32:77:da:81:e1:f0:89:57:37:61:9d:8f:b3:dc:9f:88:
85:45:4f:44:60:12:e1:62:b9:89:a1:f3:27:b8:47:ea:1a:17:
d3:88:b3:55:74:4f:b9:f6:20:f8:8c:c3:4d:47:49:ae:07:ae:
95:31:fb:8a:38:86:a0:aa:fc:6c:f3:c9:ac:38:0a:f5:fd:63:
25:6f:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net