Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31312e302f32342d3234203d3e20313337343039.roa
File: 38362e34382e31312e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: +j/Ej1GpqYE7YyQNtc8AVKetUvYPItG7CRB2MVX5E+I=
Subject key identifier: 96:B1:48:08:3B:9D:90:CA:33:DD:36:2B:DD:5D:15:61:B7:26:4B:B8
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0C2321225471508930863442DFD9514DD1866872
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31312e302f32342d3234203d3e20313337343039.roa
Signing time: Sat 22 Oct 2022 04:34:30 +0000
ROA not before: Sat 22 Oct 2022 04:29:30 +0000
ROA not after: Sat 21 Oct 2023 04:34:30 +0000
asID: 137409
IP address blocks: 86.48.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:23:21:22:54:71:50:89:30:86:34:42:df:d9:51:4d:d1:86:68:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:30 2022 GMT
Not After : Oct 21 04:34:30 2023 GMT
Subject: CN=96B148083B9D90CA33DD362BDD5D1561B7264BB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:8b:1a:be:3e:78:2f:4c:a9:9f:4b:48:a8:
f3:1e:32:11:45:bc:22:ab:f5:5e:28:3a:65:88:b4:
20:48:0e:d7:07:38:6b:36:af:47:9b:55:24:07:14:
2a:7a:5d:90:27:51:1d:51:9f:c8:bf:d1:ef:d3:8f:
11:cf:58:64:61:dd:0c:9d:b7:9d:b7:52:2a:49:57:
9f:5a:bb:fe:e7:4d:05:4d:cf:08:60:e2:96:25:b6:
ba:bb:f1:8a:ba:7d:05:e4:71:23:85:c6:14:66:0e:
40:0c:c0:60:3d:6c:36:f2:d5:22:4d:f1:e4:12:de:
89:6f:19:bb:f5:8c:82:af:26:a5:05:f1:a9:0c:aa:
37:88:b4:69:9d:65:9d:dd:67:37:8b:c0:c6:18:58:
e5:6e:3e:d4:09:c8:cb:5c:0d:fa:21:c4:0c:ac:71:
57:0c:02:06:64:9b:51:79:9d:6c:ed:08:75:8b:7d:
ba:3c:3e:ec:83:18:d0:24:5b:bb:7e:5d:32:b8:aa:
5a:34:fe:16:38:76:09:c4:c3:e6:e0:b8:9e:92:5c:
8b:d2:3a:df:45:e3:23:27:43:f9:5a:16:32:c6:e3:
2b:02:54:47:79:b1:7a:a0:90:2b:ad:bd:79:d3:bd:
91:64:8c:66:74:47:33:d4:90:b9:44:3b:03:07:a9:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B1:48:08:3B:9D:90:CA:33:DD:36:2B:DD:5D:15:61:B7:26:4B:B8
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31312e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.11.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:77:7b:5e:84:ad:33:9d:a6:1b:f8:eb:59:74:38:96:fb:1b:
a0:1f:90:30:07:bc:9b:44:97:91:11:07:41:6b:5b:a7:29:b4:
8f:85:53:cd:4d:b4:af:7b:e6:04:7b:17:89:ab:6e:97:72:81:
55:b0:86:a3:8e:bb:4d:47:05:9d:ba:52:cf:16:aa:83:48:03:
6c:0a:66:8e:6b:de:24:b7:01:ef:13:23:9f:ae:f1:6f:87:6d:
25:ed:39:08:2c:3f:c6:23:bf:d5:d5:19:99:08:be:73:07:49:
b7:93:59:78:67:df:90:2f:4c:58:0f:86:18:51:f1:bc:f3:64:
d3:cf:17:77:bd:c1:3d:f8:bc:65:39:10:11:cc:d7:a5:5e:27:
d6:be:1a:70:07:29:07:9f:de:c8:da:bb:6f:87:8d:1d:ed:7a:
bb:4d:5d:ce:1d:63:3e:9f:d4:31:84:ab:60:a0:7b:f9:7a:f2:
5e:51:12:cb:6e:85:82:51:6c:7f:8f:7b:93:59:df:29:c7:4a:
18:aa:15:d3:7d:e2:e8:c0:3d:62:75:fc:0c:c0:2c:9e:e1:c7:
16:1a:8e:6b:51:09:bd:1d:4d:c3:a6:27:cf:97:28:e7:62:cc:
d2:f6:4c:90:99:a7:28:71:36:83:72:98:15:98:4d:f6:ab:78:
2b:d5:73:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net