Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31322e302f32342d3332203d3e20313336373837.roa
File: 38362e34382e31322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: J6TIsNaDxLWP1j9AumcZqiccpMV5pKIcDkgjfbEpi/s=
Subject key identifier: C8:68:AB:17:48:9D:D4:F3:CA:AD:0B:E1:13:4E:3B:23:BD:4E:CA:27
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 2100BB27B69C89324BB4063F919B6B71C6C66CCB
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31322e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 28 Dec 2022 09:44:59 +0000
ROA not before: Wed 28 Dec 2022 09:39:59 +0000
ROA not after: Wed 27 Dec 2023 09:44:59 +0000
asID: 136787
IP address blocks: 86.48.12.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:00:bb:27:b6:9c:89:32:4b:b4:06:3f:91:9b:6b:71:c6:c6:6c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 28 09:39:59 2022 GMT
Not After : Dec 27 09:44:59 2023 GMT
Subject: CN=C868AB17489DD4F3CAAD0BE1134E3B23BD4ECA27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:4d:cd:ad:4f:99:a5:18:75:5f:d8:af:ab:
b9:a9:25:06:5c:53:90:8a:66:d7:3f:54:e2:8a:30:
24:f9:6b:e7:5c:33:60:a5:88:28:6b:55:bb:2d:d5:
af:ba:8c:16:d7:2f:21:aa:91:af:e2:26:99:d8:82:
a1:57:f0:eb:45:31:cb:98:ac:63:08:68:ce:72:ef:
ea:77:87:ad:8c:2e:90:24:1d:e9:9e:e2:b9:62:19:
b9:08:97:45:ba:2a:6a:d2:8d:f4:3c:85:36:00:72:
2b:16:6f:87:32:ef:82:d0:16:df:33:15:86:fe:98:
ff:ad:73:f0:e8:8c:ab:19:a0:b4:b4:82:fd:63:00:
17:e4:f9:48:7b:dc:54:8a:16:e5:33:28:dd:7e:45:
55:21:82:45:85:75:f6:47:c4:2d:87:09:cc:a6:d8:
7e:9e:2e:6a:de:3f:8c:50:ae:58:42:72:d9:98:e2:
e5:ab:92:29:de:d8:3c:b1:05:25:a3:c5:55:60:cc:
c4:c1:a3:5a:7f:36:7e:1d:18:25:7e:49:76:44:a0:
01:80:f4:33:9e:94:78:44:fc:1b:6b:3d:1d:a1:35:
5c:f8:e4:8c:ec:a2:6d:50:9b:43:cf:ce:70:6a:42:
cb:0b:ce:c5:12:c9:93:5c:21:81:5f:d6:01:91:d0:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:68:AB:17:48:9D:D4:F3:CA:AD:0B:E1:13:4E:3B:23:BD:4E:CA:27
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31322e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4d:66:9a:b8:98:2e:d0:99:e2:7e:5b:59:db:39:af:5d:6e:
18:2e:4f:ec:02:73:7d:aa:3a:68:64:d9:51:63:8a:30:ba:29:
36:9b:67:11:9c:0e:c2:00:d4:fa:0d:af:dc:eb:e5:c7:18:82:
f6:7b:79:ea:2a:8e:8d:15:c6:31:2a:a7:46:e7:2f:7f:1c:0d:
7f:a7:ef:c5:1c:ee:d8:6e:82:2f:1d:47:74:ab:a2:7b:b9:c4:
bb:88:ec:73:b1:18:b5:6f:f6:ae:b6:34:9e:f8:ea:d2:aa:1e:
98:8d:d2:75:89:2e:5e:cc:87:36:d8:8e:cf:06:b5:ec:b3:76:
41:ca:e6:aa:fb:9d:c2:9d:75:7b:11:a5:02:b2:e1:e9:61:56:
aa:1d:be:f2:87:8b:68:0f:69:d6:e0:f2:a5:43:9f:ab:8c:fd:
d2:76:34:b3:28:61:df:af:4b:6a:cb:aa:57:f0:51:dc:a8:20:
07:a3:1b:e4:3b:1c:82:f9:19:bb:ab:7d:27:79:3c:da:0f:31:
17:d0:dc:43:75:cf:eb:2a:a7:72:f8:a4:5c:5f:a1:83:58:c0:
ae:f2:d8:eb:63:4e:34:27:2f:22:e8:dd:a2:8f:83:c4:a5:08:
9b:cd:ed:a7:d0:df:91:89:e4:1b:53:af:89:4b:97:81:d4:31:
41:1a:5d:ee
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUIQC7J7aciTJLtAY/kZtrccbGbMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEyMjgwOTM5NTlaFw0yMzEyMjcwOTQ0NTlaMDMxMTAvBgNV
BAMTKEM4NjhBQjE3NDg5REQ0RjNDQUFEMEJFMTEzNEUzQjIzQkQ0RUNBMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp2E3NrU+ZpRh1X9ivq7mpJQZc
U5CKZtc/VOKKMCT5a+dcM2CliChrVbst1a+6jBbXLyGqka/iJpnYgqFX8OtFMcuY
rGMIaM5y7+p3h62MLpAkHeme4rliGbkIl0W6KmrSjfQ8hTYAcisWb4cy74LQFt8z
FYb+mP+tc/DojKsZoLS0gv1jABfk+Uh73FSKFuUzKN1+RVUhgkWFdfZHxC2HCcym
2H6eLmreP4xQrlhCctmY4uWrkine2DyxBSWjxVVgzMTBo1p/Nn4dGCV+SXZEoAGA
9DOelHhE/BtrPR2hNVz45Izsom1Qm0PPznBqQssLzsUSyZNcIYFf1gGR0LMzAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUyGirF0id1PPKrQvhE047I71OyicwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODM2MmUzNDM4MmUzMTMyMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2
MzczODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAVjAMMA0GCSqGSIb3DQEBCwUAA4IBAQCfTWaauJgu
0JnifltZ2zmvXW4YLk/sAnN9qjpoZNlRY4owuik2m2cRnA7CANT6Da/c6+XHGIL2
e3nqKo6NFcYxKqdG5y9/HA1/p+/FHO7YboIvHUd0q6J7ucS7iOxzsRi1b/autjSe
+OrSqh6YjdJ1iS5ezIc22I7PBrXss3ZByuaq+53CnXV7EaUCsuHpYVaqHb7yh4to
D2nW4PKlQ5+rjP3SdjSzKGHfr0tqy6pX8FHcqCAHoxvkOxyC+Rm7q30neTzaDzEX
0NxDdc/rKqdy+KRcX6GDWMCu8tjrY040Jy8i6N2ij4PEpQibze2n0N+RieQbU6+J
S5eB1DFBGl3u
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net