Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/37372e37382e37322e302f32332d3234203d3e20313336373837.roa
File: 37372e37382e37322e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: LXgCQKwD4aFJoF+TXQseVvPVYJOnRr2TAjezsqNqDR8=
Subject key identifier: E2:03:5D:08:E6:C4:47:A6:EA:84:00:28:CE:CD:AC:AD:B8:20:3F:02
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 45B29ABD9FE013BAE71117F11344D410B6B40009
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e37382e37322e302f32332d3234203d3e20313336373837.roa
Signing time: Wed 07 Dec 2022 21:43:23 +0000
ROA not before: Wed 07 Dec 2022 21:38:23 +0000
ROA not after: Wed 06 Dec 2023 21:43:23 +0000
asID: 136787
IP address blocks: 77.78.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b2:9a:bd:9f:e0:13:ba:e7:11:17:f1:13:44:d4:10:b6:b4:00:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 7 21:38:23 2022 GMT
Not After : Dec 6 21:43:23 2023 GMT
Subject: CN=E2035D08E6C447A6EA840028CECDACADB8203F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:2b:cb:a2:f5:8f:74:ea:40:98:e5:7c:49:
3d:8d:df:0f:ff:81:35:b0:0d:25:4a:fd:62:83:dd:
74:e4:15:32:2d:a0:56:5b:a6:da:42:21:03:cc:78:
eb:b2:36:d7:ac:42:8f:41:47:67:12:94:af:0f:35:
2d:01:7d:b5:09:ee:9f:4c:54:50:02:f1:65:42:31:
07:d8:6d:c3:6c:bd:58:3e:63:8f:63:33:aa:18:02:
55:8c:13:ee:24:2f:35:78:2b:07:67:f7:79:5c:ce:
33:de:ae:19:9e:fe:bf:89:35:50:f9:75:c5:36:e4:
a6:fb:85:b0:29:0f:64:8d:59:a5:c7:42:bb:56:e2:
61:a2:c6:3c:9f:ea:7f:50:ca:48:27:83:76:2e:40:
aa:a4:18:87:ba:48:13:5d:ad:10:da:aa:fb:82:08:
ca:bf:59:af:6a:08:f9:d7:15:80:b0:18:ed:a2:22:
c6:27:87:53:b7:1a:1b:0f:d5:c3:55:af:4d:ef:07:
da:11:5a:bf:98:76:b1:6c:a6:c5:f1:07:2f:ee:a7:
f7:06:0d:b6:d1:55:8b:f4:f4:2f:dd:0a:09:7b:5e:
10:f9:30:ed:b6:16:23:63:9e:12:1b:be:46:6b:fe:
ec:cf:b8:10:5c:fd:80:54:9f:d1:8e:2c:bd:55:b9:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:03:5D:08:E6:C4:47:A6:EA:84:00:28:CE:CD:AC:AD:B8:20:3F:02
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e37382e37322e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.72.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:c9:b3:80:fb:cb:5e:02:5c:b2:95:da:f9:e4:34:8c:73:c7:
0a:56:80:9a:46:86:04:d4:1b:7a:19:36:6f:b2:55:21:f4:ec:
cf:10:4f:68:6d:38:ba:a6:65:f7:64:89:07:6e:75:ee:0e:09:
ee:28:a0:a9:63:2d:cc:a3:47:c8:73:97:11:70:00:0e:47:27:
a4:39:b3:7f:f4:8e:f1:5c:9e:e8:20:f2:bc:ed:85:57:39:61:
23:ba:04:c9:94:77:90:61:ef:e0:cf:e7:d0:bc:8f:34:be:1c:
9e:11:48:3b:5c:fe:6e:f9:e3:ba:2b:bb:70:a9:7a:fc:7d:ff:
36:86:23:a3:ba:81:6f:e4:c4:a6:77:33:b6:5e:a8:cc:ad:9b:
06:fd:c9:a3:7d:7f:9e:32:ff:7a:76:e4:a7:9e:36:b8:03:23:
50:8d:dd:e0:f2:73:d4:47:43:38:e7:6d:19:be:25:f9:ca:7b:
3f:1f:2c:13:a7:19:79:c5:c0:bf:c5:e3:aa:21:ba:50:7e:5e:
94:b5:53:bc:2e:20:4b:27:a6:97:cf:a9:c7:4f:78:bf:e6:83:
9a:db:40:22:f2:24:1a:9a:7e:b9:34:46:81:44:f3:07:cd:cc:
6b:d1:e3:4c:e7:b0:57:7a:be:49:a1:4c:39:f7:6c:82:3d:62:
89:64:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net