Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3233322e302f32342d3234203d3e20323037313337.roa
File: 38352e3139302e3233322e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: VDWaPKClUYc8QIPXFUIDw6eRbtsJsUO/0YxTTGKCpE8=
Subject key identifier: 69:0A:71:70:65:4D:9A:71:A4:B7:9A:AE:E1:47:C5:B8:35:B5:4B:C6
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 3F8795FB6166D5394BAADFC1B662880948CB5B3A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3233322e302f32342d3234203d3e20323037313337.roa
Signing time: Fri 17 Mar 2023 09:17:59 +0000
ROA not before: Fri 17 Mar 2023 09:12:59 +0000
ROA not after: Fri 15 Mar 2024 09:17:59 +0000
asID: 207137
IP address blocks: 85.190.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:87:95:fb:61:66:d5:39:4b:aa:df:c1:b6:62:88:09:48:cb:5b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 17 09:12:59 2023 GMT
Not After : Mar 15 09:17:59 2024 GMT
Subject: CN=690A7170654D9A71A4B79AAEE147C5B835B54BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:cc:8e:13:b9:77:ac:aa:60:22:50:3e:25:
9d:fe:cb:e8:87:f0:9f:66:2e:23:75:61:0b:d7:5d:
bb:ee:0f:73:47:a5:77:38:13:07:c3:45:a3:d3:01:
89:30:e4:b6:a5:a7:7b:b4:9e:01:5f:c2:c4:31:ac:
6e:7d:ad:db:6a:37:ad:7a:eb:2f:a8:85:61:61:c3:
f1:66:62:6e:c0:9f:07:29:6f:91:f3:a4:db:7c:23:
30:70:36:12:74:3a:36:46:e0:12:69:cd:e3:8c:b5:
a7:dd:43:0d:d4:a8:6a:f5:92:91:8c:c3:a9:38:2d:
5e:75:b3:2e:c7:14:d0:5e:86:d1:43:57:59:f2:79:
fa:28:6f:1b:8f:c3:4c:44:05:28:c0:ee:ac:ac:fe:
d0:5a:c8:a9:28:25:cc:ec:b6:8e:b6:84:e7:51:99:
c2:3d:83:c2:91:80:07:e0:36:f3:15:e9:18:84:4e:
82:24:68:00:37:1b:8c:c1:8c:67:8a:d7:93:8d:3a:
ef:5d:11:6e:ba:21:f3:d4:57:bd:12:46:d9:60:91:
98:6e:71:9b:6e:08:87:0a:91:12:67:2a:47:9a:7b:
be:9c:54:46:d8:e8:73:3c:18:f2:cb:be:30:67:4c:
43:08:33:24:72:db:a5:f5:4b:a4:c9:02:b6:4e:8e:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0A:71:70:65:4D:9A:71:A4:B7:9A:AE:E1:47:C5:B8:35:B5:4B:C6
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3233322e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.232.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bf:c9:0f:84:e2:c6:2c:25:ab:bb:9f:09:81:2c:4a:d7:4d:
50:84:5d:87:bb:e8:59:e8:45:2f:19:d7:bc:7c:83:25:1b:ce:
e5:2a:a6:8b:ec:e9:38:90:bd:fc:8a:83:71:5a:ec:b3:a8:29:
3c:74:6e:98:aa:d2:22:9e:24:33:25:72:69:9d:7b:50:76:1f:
bb:52:af:f0:d4:53:3f:47:eb:b9:bc:4e:b6:15:f1:b8:93:cf:
1b:dd:f3:ab:64:52:98:2f:1a:29:e2:87:0d:eb:15:1a:13:b7:
be:c2:7a:25:1c:0e:6f:b1:e6:d3:f8:da:c3:f5:6d:ff:0f:ad:
a2:de:36:e2:0b:97:3b:dd:d9:1c:20:0f:54:57:e6:4b:ab:29:
56:ce:f4:92:f0:1a:f1:45:b2:4e:55:22:ac:e4:99:cc:f0:29:
2c:89:0c:3f:e3:74:7d:f1:fe:81:ca:39:e5:79:38:cd:85:a5:
38:c1:aa:dc:ab:eb:2a:70:e2:76:ba:42:d9:9d:4a:dc:5e:16:
45:e5:17:50:3e:a5:f5:81:bf:8e:40:9b:4b:d1:07:d7:01:c9:
6a:9b:81:46:ff:a2:60:c5:4e:48:e6:48:47:3f:66:90:d0:ee:
d8:c4:15:94:6d:a7:e1:ed:60:68:1b:4f:3a:c0:76:1c:20:67:
25:9c:ff:d3
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUP4eV+2Fm1TlLqt/BtmKICUjLWzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAzMTcwOTEyNTlaFw0yNDAzMTUwOTE3NTlaMDMxMTAvBgNV
BAMTKDY5MEE3MTcwNjU0RDlBNzFBNEI3OUFBRUUxNDdDNUI4MzVCNTRCQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJc8yOE7l3rKpgIlA+JZ3+y+iH
8J9mLiN1YQvXXbvuD3NHpXc4EwfDRaPTAYkw5Lalp3u0ngFfwsQxrG59rdtqN616
6y+ohWFhw/FmYm7Anwcpb5HzpNt8IzBwNhJ0OjZG4BJpzeOMtafdQw3UqGr1kpGM
w6k4LV51sy7HFNBehtFDV1nyefoobxuPw0xEBSjA7qys/tBayKkoJczsto62hOdR
mcI9g8KRgAfgNvMV6RiEToIkaAA3G4zBjGeK15ONOu9dEW66IfPUV70SRtlgkZhu
cZtuCIcKkRJnKkeae76cVEbY6HM8GPLLvjBnTEMIMyRy26X1S6TJArZOjqJxAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUaQpxcGVNmnGkt5qu4UfFuDW1S8YwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODM1MmUzMTM5MzAyZTMyMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzAzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAFW+6DANBgkqhkiG9w0BAQsFAAOCAQEAG7/J
D4Tixiwlq7ufCYEsStdNUIRdh7voWehFLxnXvHyDJRvO5Sqmi+zpOJC9/IqDcVrs
s6gpPHRumKrSIp4kMyVyaZ17UHYfu1Kv8NRTP0frubxOthXxuJPPG93zq2RSmC8a
KeKHDesVGhO3vsJ6JRwOb7Hm0/jaw/Vt/w+tot424guXO93ZHCAPVFfmS6spVs70
kvAa8UWyTlUirOSZzPApLIkMP+N0ffH+gco55Xk4zYWlOMGq3KvrKnDidrpC2Z1K
3F4WReUXUD6l9YG/jkCbS9EH1wHJapuBRv+iYMVOSOZIRz9mkNDu2MQVlG2n4e1g
aBtPOsB2HCBnJZz/0w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net