Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3133362e31372e302f32342d3234203d3e203333363936.roa
File: 34352e3133362e31372e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier: Jn3D7OcmgfbFZpqvwNENp7DTT1XA83VlHGoI10xcBs8=
Subject key identifier: 83:F9:3D:54:96:D7:37:17:B0:52:B3:57:37:1A:E2:83:B7:B0:0F:D5
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 5DEA20542285607CC41586566DD97398DA41477A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3133362e31372e302f32342d3234203d3e203333363936.roa
Signing time: Thu 26 Jan 2023 11:48:41 +0000
ROA not before: Thu 26 Jan 2023 11:43:41 +0000
ROA not after: Thu 25 Jan 2024 11:48:41 +0000
asID: 33696
IP address blocks: 45.136.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ea:20:54:22:85:60:7c:c4:15:86:56:6d:d9:73:98:da:41:47:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Jan 26 11:43:41 2023 GMT
Not After : Jan 25 11:48:41 2024 GMT
Subject: CN=83F93D5496D73717B052B357371AE283B7B00FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:e0:a6:27:10:1f:02:04:a7:6b:9f:9a:c0:
7d:da:e1:01:9c:2e:11:2b:7c:3c:bf:90:2f:bd:97:
de:49:52:57:6a:cc:d7:ba:fd:5f:19:1d:88:47:db:
68:a0:7e:7d:06:45:6b:11:08:17:f1:d7:7c:80:42:
d5:dd:dc:42:e4:91:18:14:dd:1b:5b:c0:9c:e9:8a:
dc:ca:d8:08:4d:dc:29:3c:42:33:56:f0:5b:37:57:
d4:88:b1:53:53:55:c6:18:97:42:94:23:e8:6b:87:
5a:7c:c0:de:e9:5c:f1:f4:13:12:36:2e:28:97:52:
7a:7b:b0:0f:f8:23:f1:52:ca:61:80:4a:7c:a7:c5:
bd:cf:52:ac:f6:b1:a5:73:d8:91:47:1b:8f:28:60:
c3:04:9a:e8:16:e1:3d:cf:e9:ad:03:f1:52:e8:86:
d9:95:72:a8:4c:91:13:d1:3e:84:be:a9:44:4b:28:
dd:68:1d:79:f1:a4:d0:ea:90:a7:f6:23:1e:22:57:
8b:6f:f6:cf:17:53:d5:35:b9:cd:62:4f:18:8a:81:
77:19:13:99:4a:ab:24:02:3d:97:f8:1b:9c:a3:bf:
1c:ae:0a:da:4e:b2:33:ac:74:bb:72:67:8f:f3:3b:
88:a3:99:b6:48:23:cf:26:fd:08:2e:18:46:0c:97:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F9:3D:54:96:D7:37:17:B0:52:B3:57:37:1A:E2:83:B7:B0:0F:D5
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3133362e31372e302f32342d3234203d3e203333363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.17.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b8:9f:d2:32:34:24:a6:07:ac:60:69:11:5e:e3:14:6d:ed:
7b:e0:71:c4:70:20:23:c4:d6:46:ce:ac:13:09:47:f3:d0:34:
a6:ef:29:c0:9f:7c:e7:21:b7:9e:57:34:76:79:c3:28:d5:95:
de:ee:f6:72:af:58:1a:27:30:7e:8c:69:5f:f2:43:1e:d6:ba:
82:1d:5f:ca:7e:d3:85:28:8b:e3:1f:bd:a9:94:dd:73:8c:a9:
13:ee:8d:6f:99:bb:08:4b:43:3a:2f:47:30:22:b7:98:67:3d:
87:9f:44:f1:64:ce:b3:97:bd:86:da:38:f1:32:13:6b:2b:82:
3b:a1:12:f6:57:71:ff:63:85:9a:5c:be:19:97:11:68:02:29:
6c:e1:3b:d2:81:17:1b:c2:75:04:de:a4:72:b5:53:5c:ce:4d:
ac:da:cc:3b:61:25:ab:ce:b8:4c:11:4d:62:a6:6d:6e:d6:29:
e7:31:88:15:2a:9c:ec:68:d6:c3:bb:e0:38:0b:1f:75:b5:7b:
8d:03:c9:5d:3e:17:e1:18:15:63:21:d3:43:15:a5:64:f5:af:
67:3c:33:33:9b:59:e2:a6:3a:75:af:4f:cf:ec:44:0b:c7:af:
53:a9:5e:80:28:dc:fe:4b:30:4a:7e:0c:13:d0:1b:4b:15:82:
8c:e9:5b:af
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUXeogVCKFYHzEFYZWbdlzmNpBR3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAxMjYxMTQzNDFaFw0yNDAxMjUxMTQ4NDFaMDMxMTAvBgNV
BAMTKDgzRjkzRDU0OTZENzM3MTdCMDUyQjM1NzM3MUFFMjgzQjdCMDBGRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyj+CmJxAfAgSna5+awH3a4QGc
LhErfDy/kC+9l95JUldqzNe6/V8ZHYhH22igfn0GRWsRCBfx13yAQtXd3ELkkRgU
3RtbwJzpitzK2AhN3Ck8QjNW8Fs3V9SIsVNTVcYYl0KUI+hrh1p8wN7pXPH0ExI2
LiiXUnp7sA/4I/FSymGASnynxb3PUqz2saVz2JFHG48oYMMEmugW4T3P6a0D8VLo
htmVcqhMkRPRPoS+qURLKN1oHXnxpNDqkKf2Ix4iV4tv9s8XU9U1uc1iTxiKgXcZ
E5lKqyQCPZf4G5yjvxyuCtpOsjOsdLtyZ4/zO4ijmbZII88m/QguGEYMl5p7AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUg/k9VJbXNxewUrNXNxrig7ewD9UwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zNDM1MmUzMTMzMzYyZTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMz
MzYzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALYgRMA0GCSqGSIb3DQEBCwUAA4IBAQC7uJ/SMjQk
pgesYGkRXuMUbe174HHEcCAjxNZGzqwTCUfz0DSm7ynAn3znIbeeVzR2ecMo1ZXe
7vZyr1gaJzB+jGlf8kMe1rqCHV/KftOFKIvjH72plN1zjKkT7o1vmbsIS0M6L0cw
IreYZz2Hn0TxZM6zl72G2jjxMhNrK4I7oRL2V3H/Y4WaXL4ZlxFoAils4TvSgRcb
wnUE3qRytVNczk2s2sw7YSWrzrhMEU1ipm1u1innMYgVKpzsaNbDu+A4Cx91tXuN
A8ldPhfhGBVjIdNDFaVk9a9nPDMzm1nipjp1r0/P7EQLx69TqV6AKNz+SzBKfgwT
0BtLFYKM6Vuv
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net