Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa
File: 38352e3233392e3235302e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: t5sLnCjItU/j64yBPY/N4SrQPWqDF5932ZgC+Os0/2E=
Subject key identifier: 32:22:2A:99:88:70:65:D7:B5:B4:DF:C1:49:C7:5E:15:C5:FC:EA:D7
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 28F219D2A65E2EA9B18226337978E0BB9AD868A5
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa
Signing time: Tue 22 Nov 2022 11:24:00 +0000
ROA not before: Tue 22 Nov 2022 11:19:00 +0000
ROA not after: Tue 21 Nov 2023 11:24:00 +0000
asID: 40021
IP address blocks: 85.239.250.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f2:19:d2:a6:5e:2e:a9:b1:82:26:33:79:78:e0:bb:9a:d8:68:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 22 11:19:00 2022 GMT
Not After : Nov 21 11:24:00 2023 GMT
Subject: CN=32222A99887065D7B5B4DFC149C75E15C5FCEAD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:98:fb:00:23:78:a9:f5:35:b5:f6:68:66:
3d:2d:ae:ba:c5:ff:8a:0a:cc:b9:31:af:13:c0:9d:
d9:9b:4b:8d:8f:dd:ef:12:a7:cf:ef:67:ed:ea:00:
6f:32:00:b0:6f:97:db:59:93:6a:84:20:51:d9:ff:
38:49:7f:ff:ec:15:e0:40:65:81:5f:7d:94:ae:68:
5c:13:87:27:61:38:0d:4c:0c:9e:9a:90:78:82:57:
fa:90:60:54:1d:80:60:bc:bf:bc:39:28:84:e0:64:
52:ac:1d:7f:6d:5c:77:77:df:69:b9:0e:a5:3b:4c:
ea:e5:aa:6c:87:fd:d8:5c:d4:9c:32:4b:b1:83:48:
52:75:d7:fd:9f:68:cc:e3:c5:22:12:09:8f:54:27:
da:66:f2:89:f3:02:cc:47:a9:f6:d2:57:a4:32:dc:
99:a2:06:2f:58:9e:95:bd:c9:a7:da:db:08:ce:d4:
d0:fc:9d:e6:c9:12:b5:da:60:e7:33:6f:6f:f0:49:
b9:ca:59:61:ec:3b:99:a3:52:6d:55:be:f7:54:ec:
b7:46:66:91:d5:05:6f:6e:e3:f4:97:76:51:31:db:
26:1a:48:cc:f1:5f:cd:22:ad:e9:51:b7:08:cb:bd:
f1:69:65:2d:91:32:eb:ca:e3:3f:d3:0b:77:e2:1f:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:22:2A:99:88:70:65:D7:B5:B4:DF:C1:49:C7:5E:15:C5:FC:EA:D7
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.250.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d5:d9:69:58:89:34:0e:41:eb:c1:db:62:a1:15:cc:1f:43:
ad:de:87:17:d1:33:a2:f0:ab:cc:08:17:39:90:18:fe:b8:63:
e6:f7:9a:6b:86:a9:73:57:d0:ee:e3:7e:c1:ed:5a:b2:0f:df:
84:ff:df:ab:09:c3:d3:07:3a:ea:8e:eb:88:3e:19:07:3e:bc:
cf:7c:dc:13:81:93:10:48:01:de:08:85:34:cd:b6:36:53:9a:
f6:98:42:88:43:e5:42:40:f7:ea:6b:c6:e5:67:42:fb:4d:1f:
13:2b:e0:70:65:26:ba:61:3e:cd:59:e7:0a:de:39:a1:57:1c:
f1:98:72:23:44:dd:a3:0d:b5:2b:80:63:83:33:dd:22:62:b7:
f4:9e:ee:6a:09:eb:c9:27:db:82:34:52:1b:d9:15:d1:c5:4e:
1a:74:8e:00:82:a6:87:cf:b7:cb:51:eb:48:76:6b:b0:c5:7f:
30:9c:01:ca:c4:39:f5:0d:ef:ee:0b:81:f2:0b:f8:d8:2f:4b:
e1:05:5d:40:fe:7d:ca:bd:df:3f:ab:e8:e0:8f:48:97:85:2f:
c9:fd:8b:66:70:21:15:b5:39:d3:ce:57:1d:e0:3c:dc:8e:b7:
3f:57:e9:9c:f9:75:5d:d6:d1:1b:48:fe:3d:04:0e:ca:56:c8:
a0:32:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net