Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203633343733.roa
File: 33312e3232302e362e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: 3owfrNDzcPnbUTluXPwFyo1/hfcJcczlHwq7n7QVd1Q=
Subject key identifier: 3B:16:50:ED:F4:E2:FA:23:13:6C:BB:72:38:B5:B2:F2:E1:36:4F:24
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 1A371D378D1652190FA3FBD614347D50BDD1BDF3
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203633343733.roa
Signing time: Fri 27 Nov 2020 15:10:31 +0000
ROA not before: Fri 27 Nov 2020 15:05:31 +0000
ROA not after: Fri 26 Nov 2021 15:10:31 +0000
asID: 63473
IP address blocks: 31.220.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:37:1d:37:8d:16:52:19:0f:a3:fb:d6:14:34:7d:50:bd:d1:bd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 27 15:05:31 2020 GMT
Not After : Nov 26 15:10:31 2021 GMT
Subject: CN=3082010A0282010100DF735AA0B4D406C84AAEB1831145B7584EBD9647EC5444AE65F1AFC5530C72574DED7C702726B18365B3694935CB193F1A0D69EC07495797E524B1C29DAD2D3837D2FB0C7E6C62C7A742E431E413135474AC7A0A8D63AEB4914A5AF0E4EE45A37A894F77ED3DDF70A1C0708FCF4E89D4F0F35797461564BCF8AA553192360DE443100062D32E5788291851A6C5CE8134745D29F400822EA7BDA5DB9EE5DF307702670BB7FF533112A619497C6D6C715BEDF71E1AC3941784173D531100DA459CF9AC63866DC09D14BF31BAAEF066392BC078636A7F30DE52B35E7BFC9ED8B451884045738D41E53BA30A94C6AF2CE952BAF1388DD0C0BF184FAE8D61B264830F0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:5a:a0:b4:d4:06:c8:4a:ae:b1:83:11:45:
b7:58:4e:bd:96:47:ec:54:44:ae:65:f1:af:c5:53:
0c:72:57:4d:ed:7c:70:27:26:b1:83:65:b3:69:49:
35:cb:19:3f:1a:0d:69:ec:07:49:57:97:e5:24:b1:
c2:9d:ad:2d:38:37:d2:fb:0c:7e:6c:62:c7:a7:42:
e4:31:e4:13:13:54:74:ac:7a:0a:8d:63:ae:b4:91:
4a:5a:f0:e4:ee:45:a3:7a:89:4f:77:ed:3d:df:70:
a1:c0:70:8f:cf:4e:89:d4:f0:f3:57:97:46:15:64:
bc:f8:aa:55:31:92:36:0d:e4:43:10:00:62:d3:2e:
57:88:29:18:51:a6:c5:ce:81:34:74:5d:29:f4:00:
82:2e:a7:bd:a5:db:9e:e5:df:30:77:02:67:0b:b7:
ff:53:31:12:a6:19:49:7c:6d:6c:71:5b:ed:f7:1e:
1a:c3:94:17:84:17:3d:53:11:00:da:45:9c:f9:ac:
63:86:6d:c0:9d:14:bf:31:ba:ae:f0:66:39:2b:c0:
78:63:6a:7f:30:de:52:b3:5e:7b:fc:9e:d8:b4:51:
88:40:45:73:8d:41:e5:3b:a3:0a:94:c6:af:2c:e9:
52:ba:f1:38:8d:d0:c0:bf:18:4f:ae:8d:61:b2:64:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:50:ED:F4:E2:FA:23:13:6C:BB:72:38:B5:B2:F2:E1:36:4F:24
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.6.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c7:e0:d3:59:79:36:6c:55:e1:d6:da:1a:7a:51:37:cc:c5:
92:a4:57:4a:41:61:85:fe:ce:24:23:c9:74:29:79:e9:f9:b0:
e6:64:07:7f:52:b5:15:11:41:f2:4b:5a:8c:01:48:8f:93:06:
4f:64:39:72:d5:9d:1a:b5:4a:0a:f0:c8:f6:38:e4:0f:5f:94:
6c:32:d7:f3:2b:44:7d:43:a2:a8:1e:57:f5:80:6a:c3:00:f6:
2f:0c:a2:a3:54:27:7f:3e:14:79:6e:af:81:dd:de:6a:77:0a:
94:fa:02:ae:fa:a1:b4:3b:a3:46:bd:fc:8e:38:0a:6c:70:4c:
d1:44:29:2c:d1:02:20:1b:e8:ec:fe:aa:fe:ef:ba:55:90:2c:
76:94:ce:81:b9:46:bb:3b:23:32:4c:bf:cd:21:5f:9c:95:9a:
5f:59:78:b6:80:6b:cd:2d:69:39:81:63:7d:30:f5:05:cc:79:
a5:28:b8:1b:70:6b:89:48:97:5b:f2:a2:cc:38:9e:bc:34:e9:
be:41:48:82:1b:80:08:8e:cb:0d:e2:09:94:63:df:be:b2:32:
25:b9:cd:03:e8:f3:33:95:7d:a5:ee:64:c7:17:fe:e5:20:cb:
4e:19:e5:2d:05:7d:0c:51:78:e3:01:b2:ce:b4:5f:e4:3e:02:
73:94:d4:a5
-----BEGIN CERTIFICATE-----
MIIG3zCCBcegAwIBAgIUGjcdN40WUhkPo/vWFDR9UL3RvfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMDExMjcxNTA1MzFaFw0yMTExMjYxNTEwMzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREY3MzVBQTBCNEQ0MDZDODRB
QUVCMTgzMTE0NUI3NTg0RUJEOTY0N0VDNTQ0NEFFNjVGMUFGQzU1MzBDNzI1NzRE
RUQ3QzcwMjcyNkIxODM2NUIzNjk0OTM1Q0IxOTNGMUEwRDY5RUMwNzQ5NTc5N0U1
MjRCMUMyOURBRDJEMzgzN0QyRkIwQzdFNkM2MkM3QTc0MkU0MzFFNDEzMTM1NDc0
QUM3QTBBOEQ2M0FFQjQ5MTRBNUFGMEU0RUU0NUEzN0E4OTRGNzdFRDNEREY3MEEx
QzA3MDhGQ0Y0RTg5RDRGMEYzNTc5NzQ2MTU2NEJDRjhBQTU1MzE5MjM2MERFNDQz
MTAwMDYyRDMyRTU3ODgyOTE4NTFBNkM1Q0U4MTM0NzQ1RDI5RjQwMDgyMkVBN0JE
QTVEQjlFRTVERjMwNzcwMjY3MEJCN0ZGNTMzMTEyQTYxOTQ5N0M2RDZDNzE1QkVE
RjcxRTFBQzM5NDE3ODQxNzNENTMxMTAwREE0NTlDRjlBQzYzODY2REMwOUQxNEJG
MzFCQUFFRjA2NjM5MkJDMDc4NjM2QTdGMzBERTUyQjM1RTdCRkM5RUQ4QjQ1MTg4
NDA0NTczOEQ0MUU1M0JBMzBBOTRDNkFGMkNFOTUyQkFGMTM4OEREMEMwQkYxODRG
QUU4RDYxQjI2NDgzMEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA33NaoLTUBshKrrGDEUW3WE69lkfsVESuZfGvxVMMcldN7XxwJyax
g2WzaUk1yxk/Gg1p7AdJV5flJLHCna0tODfS+wx+bGLHp0LkMeQTE1R0rHoKjWOu
tJFKWvDk7kWjeolPd+0933ChwHCPz06J1PDzV5dGFWS8+KpVMZI2DeRDEABi0y5X
iCkYUabFzoE0dF0p9ACCLqe9pdue5d8wdwJnC7f/UzESphlJfG1scVvt9x4aw5QX
hBc9UxEA2kWc+axjhm3AnRS/Mbqu8GY5K8B4Y2p/MN5Ss157/J7YtFGIQEVzjUHl
O6MKlMavLOlSuvE4jdDAvxhPro1hsmSDDwIDAQABo4IB7TCCAekwHQYDVR0OBBYE
FDsWUO304vojE2y7cji1svLhNk8kMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGE
BggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzQvMzMzMTJlMzIzMjMwMmUzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzNDM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAf3AYw
DQYJKoZIhvcNAQELBQADggEBAEHH4NNZeTZsVeHW2hp6UTfMxZKkV0pBYYX+ziQj
yXQpeen5sOZkB39StRURQfJLWowBSI+TBk9kOXLVnRq1SgrwyPY45A9flGwy1/Mr
RH1DoqgeV/WAasMA9i8MoqNUJ38+FHlur4Hd3mp3CpT6Aq76obQ7o0a9/I44Cmxw
TNFEKSzRAiAb6Oz+qv7vulWQLHaUzoG5Rrs7IzJMv80hX5yVml9ZeLaAa80taTmB
Y30w9QXMeaUouBtwa4lIl1vyosw4nrw06b5BSIIbgAiOyw3iCZRj376yMiW5zQPo
8zOVfaXuZMcX/uUgy04Z5S0FfQxReOMBss60X+Q+AnOU1KU=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net