Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3235342e302f32342d3332203d3e203531313637.roa
File: 38352e3139302e3235342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: sxxuqAwmFfZ5ACxck8yT1EqFdaNokz2WXIHZmcJXgtU=
Subject key identifier: 70:B6:A9:74:36:1B:2D:1D:8B:DC:AD:FF:A1:A1:DA:9B:88:BC:24:59
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 3381AFAD497AB1E9FF8F0FFFE170DC181E4FD22F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3235342e302f32342d3332203d3e203531313637.roa
Signing time: Sat 22 Oct 2022 04:34:22 +0000
ROA not before: Sat 22 Oct 2022 04:29:22 +0000
ROA not after: Sat 21 Oct 2023 04:34:22 +0000
asID: 51167
IP address blocks: 85.190.254.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:81:af:ad:49:7a:b1:e9:ff:8f:0f:ff:e1:70:dc:18:1e:4f:d2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:22 2022 GMT
Not After : Oct 21 04:34:22 2023 GMT
Subject: CN=70B6A974361B2D1D8BDCADFFA1A1DA9B88BC2459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:00:49:48:ca:db:89:bc:74:ac:f1:9b:04:
c3:85:1f:59:c3:a5:b9:99:d9:e4:5d:1a:c1:b9:a1:
ef:96:0f:1a:1a:c4:52:57:1c:81:5e:4e:47:c7:7d:
8c:88:55:0a:5a:46:e7:d9:80:94:97:b5:01:ba:87:
fb:68:13:4c:8a:db:21:3c:87:bf:0e:c9:18:c3:78:
20:0b:e6:1c:29:5c:ae:3e:ae:4c:8d:68:66:09:98:
fc:7e:93:f3:65:6e:72:04:af:d5:6c:b7:28:ec:3f:
57:4e:6b:98:ef:67:6f:dd:8d:50:6d:41:cf:a8:ed:
f9:d5:e7:c1:4c:6c:fc:2b:92:cd:d2:e6:a5:e1:f9:
72:91:56:b6:55:cc:54:b9:a7:31:59:fc:44:c5:b1:
27:74:ee:ea:2a:ac:70:0a:68:ef:86:6d:ba:c3:5d:
15:9f:73:d8:e1:26:91:39:33:43:06:27:7f:1f:5b:
72:35:5d:64:6c:30:fa:aa:97:4c:a7:b6:8c:d2:4e:
f6:00:86:5f:d8:d2:4f:6e:a7:ed:15:7f:0c:72:74:
28:2b:d1:5b:81:6b:02:af:7c:51:fc:13:9d:78:06:
a1:41:30:a4:d6:19:84:04:63:24:11:59:ef:f2:f1:
f5:bb:30:2f:a2:54:f3:a4:fd:25:26:be:e3:3a:79:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:A9:74:36:1B:2D:1D:8B:DC:AD:FF:A1:A1:DA:9B:88:BC:24:59
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3139302e3235342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:67:6e:6e:8b:1d:ab:27:30:56:44:0b:e9:ba:94:91:be:20:
35:9f:06:b9:ff:db:62:41:d2:23:9e:c6:88:4f:58:3e:f8:c3:
b3:f8:21:a5:13:07:99:ed:9c:f5:d8:ae:25:d0:bd:ed:fd:0c:
1d:cc:94:f2:22:b4:a6:c3:c1:1d:e9:57:b9:db:b7:ca:e7:49:
4d:07:62:1b:66:0e:a9:4f:43:a8:74:c6:95:6e:51:ce:41:3c:
fd:ab:a3:34:29:d8:8b:c4:ab:c1:7a:ee:0c:90:94:a3:75:5e:
96:40:95:61:93:9b:b7:ec:51:be:ff:16:65:df:ad:81:d6:c7:
a3:59:d8:ff:1b:ec:1f:88:1a:4d:d9:5e:7f:47:31:a2:eb:59:
d1:b9:54:78:7d:69:1e:64:28:bd:ee:ca:fc:17:34:7d:b6:b4:
a2:d3:a2:64:c1:e0:1a:5c:07:6d:fd:25:d0:cf:ca:f5:8e:32:
46:a8:88:42:62:d4:64:a0:6d:86:b4:3b:0c:6f:1c:b2:3e:65:
a9:66:59:25:6a:e3:90:20:25:44:d2:5f:1f:f9:e1:5d:b6:77:
4d:a3:eb:58:6f:68:b3:f8:f7:e7:50:66:7b:56:8e:33:e6:0d:
7d:c1:80:7e:19:43:4d:f2:2f:02:0c:2d:5e:d9:78:a1:ff:2c:
61:3f:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net