Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e302e302f32322d3332203d3e203531313637.roa
File: 38362e34382e302e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: 8K+aijukBlZZk8tE1N4ZHPPH1rUC2AYjqG0WDLM8u68=
Subject key identifier: 55:78:1E:5E:E5:DF:B0:00:70:5C:84:76:02:8C:FC:91:11:5E:2B:34
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 59DC88AF395F48CFD3638532123F518A13FAD094
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e302e302f32322d3332203d3e203531313637.roa
Signing time: Sat 22 Oct 2022 04:34:35 +0000
ROA not before: Sat 22 Oct 2022 04:29:35 +0000
ROA not after: Sat 21 Oct 2023 04:34:35 +0000
asID: 51167
IP address blocks: 86.48.0.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:dc:88:af:39:5f:48:cf:d3:63:85:32:12:3f:51:8a:13:fa:d0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:35 2022 GMT
Not After : Oct 21 04:34:35 2023 GMT
Subject: CN=55781E5EE5DFB000705C8476028CFC91115E2B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c8:54:dd:79:1b:76:65:33:c4:99:af:60:06:
14:5d:87:77:d7:30:05:58:c9:b7:4c:a5:2f:db:72:
ff:21:5b:52:a8:b5:06:c0:ba:d2:59:eb:a4:9b:81:
e5:b9:50:c5:e6:23:ee:17:11:65:ff:3d:a5:0b:7d:
19:b8:7e:5c:25:b5:da:78:08:c4:a2:36:78:c6:25:
01:01:c7:75:1d:91:18:01:eb:fc:e6:71:69:59:f7:
72:43:95:d9:e5:b3:d0:18:12:c8:ef:3b:02:dc:25:
8b:41:e0:83:66:09:40:2c:c0:f5:14:4f:df:b2:51:
ad:5c:96:14:1b:0c:9e:5e:fc:b9:0c:0a:92:c6:4d:
f4:96:c5:f4:dd:bf:e6:7f:16:82:c9:55:68:1c:98:
8c:3a:bb:7d:ac:22:30:26:79:f5:b0:5b:18:75:93:
5f:c1:d1:0d:f3:de:cd:13:10:dc:72:88:a8:f1:ca:
81:da:a8:3f:41:b8:79:bd:75:d2:a1:89:49:ed:f1:
a4:9c:77:58:7b:3f:b9:ce:74:d7:f2:00:9f:dd:ef:
e6:a1:f2:9f:a4:46:a0:4e:83:41:80:ee:a3:bb:4a:
56:41:56:65:9b:37:d5:40:4d:39:51:3a:4f:3a:58:
91:fb:bb:51:4b:c3:6a:7a:0a:27:3e:cd:51:e2:ba:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:78:1E:5E:E5:DF:B0:00:70:5C:84:76:02:8C:FC:91:11:5E:2B:34
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e302e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.0.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:dc:cd:12:b1:23:6a:91:7d:e3:39:36:57:86:ef:2d:14:1b:
76:3e:e6:b4:36:2b:86:c1:38:1f:df:ad:58:22:b6:7e:d7:46:
ba:87:bf:7a:dc:c5:00:dc:be:b4:93:f4:d9:e1:6f:47:7e:ba:
fa:23:0d:c9:90:94:9b:54:04:28:3d:59:07:d7:41:1a:5c:d9:
b8:55:ac:f0:16:df:34:56:bc:99:49:31:6d:90:79:23:14:a5:
f3:aa:36:9a:dc:8f:5d:37:52:23:7f:ca:b1:72:59:fa:87:e2:
a2:b7:82:c6:89:56:51:f2:6e:f2:fb:50:99:e6:a0:ad:14:ee:
a9:ee:2d:86:37:3b:7c:ad:cd:2b:27:1e:4d:2c:1d:4a:4a:22:
52:fd:9b:03:52:29:5b:4e:16:88:5a:5e:e6:33:77:aa:e4:44:
a5:75:1d:ac:33:1c:2f:3e:6f:ff:d4:5e:bf:7a:f8:3b:f5:ed:
88:20:92:65:ac:27:10:15:8e:26:f5:ae:07:2e:f2:2c:d5:a5:
44:07:6e:b3:72:35:ec:ae:c8:06:15:fb:ba:58:43:a3:b4:03:
cb:7f:1d:46:cf:4e:e4:f6:d9:1e:a3:4e:12:3e:21:49:9f:c2:
78:f0:d9:31:30:a1:d3:3b:5c:c6:79:9d:6e:96:46:47:9c:4d:
46:41:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net