Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31352e302f32342d3332203d3e20313336373837.roa
File: 38362e34382e31352e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: C97l9ge+jvpXJ6Oq76S7ezjszAqlWYJM++NcO9b/4Ig=
Subject key identifier: 84:CA:48:EB:9D:FE:AA:FE:D8:F2:A5:6C:E9:D8:DD:85:BB:FA:4A:A7
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 15ABB6588B5F83A4019BC48C985AB46143ACD821
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31352e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 28 Dec 2022 09:45:58 +0000
ROA not before: Wed 28 Dec 2022 09:40:58 +0000
ROA not after: Wed 27 Dec 2023 09:45:58 +0000
asID: 136787
IP address blocks: 86.48.15.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ab:b6:58:8b:5f:83:a4:01:9b:c4:8c:98:5a:b4:61:43:ac:d8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 28 09:40:58 2022 GMT
Not After : Dec 27 09:45:58 2023 GMT
Subject: CN=84CA48EB9DFEAAFED8F2A56CE9D8DD85BBFA4AA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:8a:64:f3:35:9d:78:66:29:bc:df:db:f0:
f2:5c:3c:5d:ac:85:fd:47:39:2f:0a:9e:ec:1d:d8:
97:78:b2:8b:96:c4:66:77:76:fe:f6:fe:32:ed:6e:
7f:26:fa:b4:36:29:5e:b6:e7:f5:9e:1f:e0:9e:e9:
6d:7c:63:c7:4a:48:eb:0a:36:f5:aa:ce:eb:24:a6:
e1:f6:4c:e3:9f:d3:8c:c5:5a:6d:92:4d:59:1c:29:
20:f1:52:88:8b:1a:f3:5f:c3:ca:03:8a:c2:32:45:
df:b1:da:b2:f9:87:81:e7:31:0d:6d:ac:14:bf:3c:
0c:d1:f3:c0:80:66:e2:a5:ee:5d:c1:a2:c3:b1:dd:
0e:71:18:b8:05:3f:85:75:92:1c:a9:0c:68:eb:ff:
a1:90:71:59:1c:14:5f:7a:52:95:33:b3:59:6e:b9:
7d:7b:10:36:ad:23:fc:71:4b:2e:77:1a:c4:c8:eb:
5e:39:d2:3f:32:99:30:2e:3d:91:f3:eb:ae:27:62:
79:6c:cc:3a:ab:2f:4d:62:3a:f2:32:a7:76:97:9d:
e2:01:2e:3e:b9:47:26:c1:c7:f4:8a:59:5b:c9:75:
fa:ef:f1:8b:1e:ec:37:cb:87:32:ee:e7:51:de:22:
a9:6b:19:9d:76:ac:b5:6e:81:11:ea:79:18:bc:54:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CA:48:EB:9D:FE:AA:FE:D8:F2:A5:6C:E9:D8:DD:85:BB:FA:4A:A7
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31352e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.15.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9c:e8:6e:d4:89:d2:f6:6d:95:71:1e:02:50:8d:ee:bc:c9:
23:9c:a6:0f:9d:e2:eb:d2:2b:9c:f9:dd:b0:85:03:9f:0e:80:
d1:68:57:5c:68:68:bc:08:65:27:52:7e:27:4f:8b:51:5f:10:
17:f3:1d:7a:09:5d:35:ba:fc:0f:91:8c:7a:da:9d:e1:9d:31:
4d:f0:ed:15:d3:63:51:c3:19:81:8a:da:1a:10:42:fa:ae:7f:
27:39:ae:77:07:b5:83:c4:b0:29:d3:54:64:57:e5:35:fc:8c:
17:50:9f:97:be:e7:78:91:62:db:6e:c4:61:34:74:f7:d5:ab:
2e:3c:a5:54:17:01:a8:a5:1f:bf:5c:4a:34:3a:1d:c1:e3:e0:
77:e0:b9:c1:3b:0c:46:f0:14:05:55:ea:c3:e5:28:6e:75:a4:
8f:61:de:ad:5a:7b:c3:2e:b4:d7:3d:ec:a2:b1:fe:8c:9b:0d:
4e:a1:fb:ec:c8:28:ac:fa:4b:41:e8:ea:70:0b:79:fd:27:f1:
88:f4:1b:a2:b8:fe:a9:24:01:fa:08:62:80:9e:ea:49:5e:2b:
84:90:a5:82:ed:5e:88:7e:ba:38:09:9c:82:d7:ae:17:53:74:
3f:18:0f:49:bf:09:5d:5d:03:74:d3:bf:ce:5f:75:1d:85:a0:
5f:63:12:a9
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUFau2WItfg6QBm8SMmFq0YUOs2CEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEyMjgwOTQwNThaFw0yMzEyMjcwOTQ1NThaMDMxMTAvBgNV
BAMTKDg0Q0E0OEVCOURGRUFBRkVEOEYyQTU2Q0U5RDhERDg1QkJGQTRBQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVoopk8zWdeGYpvN/b8PJcPF2s
hf1HOS8Knuwd2Jd4souWxGZ3dv72/jLtbn8m+rQ2KV625/WeH+Ce6W18Y8dKSOsK
NvWqzuskpuH2TOOf04zFWm2STVkcKSDxUoiLGvNfw8oDisIyRd+x2rL5h4HnMQ1t
rBS/PAzR88CAZuKl7l3BosOx3Q5xGLgFP4V1khypDGjr/6GQcVkcFF96UpUzs1lu
uX17EDatI/xxSy53GsTI61450j8ymTAuPZHz664nYnlszDqrL01iOvIyp3aXneIB
Lj65RybBx/SKWVvJdfrv8Yse7DfLhzLu51HeIqlrGZ12rLVugRHqeRi8VGsDAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUhMpI653+qv7Y8qVs6djdhbv6SqcwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODM2MmUzNDM4MmUzMTM1MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2
MzczODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAVjAPMA0GCSqGSIb3DQEBCwUAA4IBAQBwnOhu1InS
9m2VcR4CUI3uvMkjnKYPneLr0iuc+d2whQOfDoDRaFdcaGi8CGUnUn4nT4tRXxAX
8x16CV01uvwPkYx62p3hnTFN8O0V02NRwxmBitoaEEL6rn8nOa53B7WDxLAp01Rk
V+U1/IwXUJ+Xvud4kWLbbsRhNHT31asuPKVUFwGopR+/XEo0Oh3B4+B34LnBOwxG
8BQFVerD5ShudaSPYd6tWnvDLrTXPeyisf6Mmw1OofvsyCis+ktB6OpwC3n9J/GI
9BuiuP6pJAH6CGKAnupJXiuEkKWC7V6Ifro4CZyC164XU3Q/GA9JvwldXQN007/O
X3UdhaBfYxKp
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net