Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232382e302f32332d3233203d3e2030.roa
File: 37372e3233372e3232382e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: 4Fy4b164WfBHnBnCrAjyRDGTiAzPjJ117Dckez86Y2Y=
Subject key identifier: B4:8C:67:FE:12:D8:80:2A:D0:4F:B7:6C:C8:45:9C:97:A5:31:B7:C0
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 3358E8F2C24A1AF873E07B739DF5CE3046DFB190
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232382e302f32332d3233203d3e2030.roa
Signing time: Sat 11 Mar 2023 07:38:10 +0000
ROA not before: Sat 11 Mar 2023 07:33:10 +0000
ROA not after: Sat 09 Mar 2024 07:38:10 +0000
asID: 0
IP address blocks: 77.237.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:58:e8:f2:c2:4a:1a:f8:73:e0:7b:73:9d:f5:ce:30:46:df:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 11 07:33:10 2023 GMT
Not After : Mar 9 07:38:10 2024 GMT
Subject: CN=B48C67FE12D8802AD04FB76CC8459C97A531B7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:25:9c:eb:04:0f:b2:01:b8:3d:b9:1c:81:
94:38:ec:98:67:6c:32:82:87:68:ac:0c:fc:94:1d:
40:d1:94:42:6c:c0:f1:b7:ad:ae:9d:f6:23:7d:08:
b6:ea:04:e4:60:92:dd:86:c0:aa:be:98:aa:76:e8:
9c:29:2b:42:4d:d1:80:df:4c:33:f6:52:eb:f5:c3:
f5:37:ee:a6:83:3f:0c:53:d7:19:14:e8:a4:0c:1d:
6f:d9:98:40:e1:b9:be:00:77:48:4f:d5:86:96:24:
d5:0f:29:2d:82:7d:71:4a:82:8f:8b:9c:e1:b4:a8:
ca:de:7d:98:e9:09:94:21:f5:f7:c7:64:cd:24:6b:
66:74:87:09:9b:a5:a7:09:fe:3c:eb:5f:2d:a8:32:
0b:65:76:50:48:69:45:6f:e8:e8:66:4a:99:af:b7:
e8:3a:bf:ad:ab:b3:09:b7:15:5a:1e:87:f1:c4:50:
7a:85:92:51:ba:dd:24:d9:d5:6b:b8:c0:0f:02:41:
ae:e8:5d:73:4a:d1:b1:f7:37:4c:52:ee:ae:d8:46:
d9:9a:0f:9f:da:bd:54:5b:87:84:ea:6c:b4:ba:25:
c4:74:75:93:0c:2e:6a:38:a1:30:33:4d:96:19:d7:
2e:09:1a:69:1a:49:7c:98:78:21:19:94:36:ad:ad:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:67:FE:12:D8:80:2A:D0:4F:B7:6C:C8:45:9C:97:A5:31:B7:C0
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e3233372e3232382e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.228.0/23
Signature Algorithm: sha256WithRSAEncryption
17:9e:b9:8d:11:ca:bc:b4:98:30:54:6a:67:02:36:02:00:cf:
f1:0f:17:60:cb:68:80:d8:f0:21:f9:1e:b4:98:95:b0:37:b0:
ec:c9:8a:7d:38:ab:ee:a4:20:42:86:7c:9d:0a:ae:6f:5c:9c:
a2:a9:a9:9e:05:cf:ad:f9:13:d7:f9:4a:84:4d:69:b6:eb:8c:
fe:55:77:be:5c:dd:4b:65:b5:07:6a:99:d0:55:9e:2c:40:a8:
d7:6c:2d:85:c8:b0:f6:5b:b9:53:2a:97:4e:06:21:01:2d:63:
1f:70:9f:af:d8:33:ee:c2:28:88:d4:7a:58:dd:ac:ac:c8:b2:
e5:9e:2c:da:11:e4:a3:c0:12:eb:55:79:58:f8:8a:56:19:09:
d4:cc:4c:b4:f6:8e:a9:54:08:94:f9:71:e7:84:fe:aa:e9:cc:
79:ed:ec:6f:10:7a:61:8e:9a:ae:03:9a:76:64:50:e7:c7:46:
ef:20:5f:2f:99:5e:18:78:1c:4e:d2:14:10:40:85:d5:9a:3d:
3f:b5:8e:61:f9:2e:d2:e8:35:2f:4a:8d:e4:0e:8e:6c:71:19:
2d:d3:1b:35:14:b6:b5:11:fe:f8:4a:f1:aa:f7:bd:2c:11:68:
f4:12:9b:b2:c2:80:ca:48:fb:f1:73:26:8d:7e:51:9d:e0:71:
86:89:a1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net