Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e342e302f32342d3234203d3e20313336373837.roa
File: 38362e34382e342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: LXq8QeUvHyCoxkmtCiqEfmtbZxbf2WXgEJ7ZBYWBkPw=
Subject key identifier: 45:B9:A8:76:5C:EF:05:01:BB:3B:FB:E7:74:6B:71:C4:6A:5F:61:F9
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0DCEC59ABCCA254FDF0BD77386ECCEA500126BE4
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e342e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 22 Oct 2022 04:34:34 +0000
ROA not before: Sat 22 Oct 2022 04:29:34 +0000
ROA not after: Sat 21 Oct 2023 04:34:34 +0000
asID: 136787
IP address blocks: 86.48.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ce:c5:9a:bc:ca:25:4f:df:0b:d7:73:86:ec:ce:a5:00:12:6b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:34 2022 GMT
Not After : Oct 21 04:34:34 2023 GMT
Subject: CN=45B9A8765CEF0501BB3BFBE7746B71C46A5F61F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:a1:75:36:2a:98:8a:8a:c5:cc:9d:01:e9:
28:ad:40:3a:2e:11:36:50:b2:f9:44:18:00:ad:78:
6c:fc:44:b8:dc:94:40:0a:bb:d5:1a:92:7d:20:00:
21:55:31:ac:b4:f4:6c:bb:2f:36:f0:60:83:2e:e8:
b6:d0:f2:63:32:38:31:af:66:1e:50:d6:af:a3:0e:
ed:3f:7d:72:57:35:c0:4a:c2:d6:08:9e:05:f1:9d:
47:67:d5:38:61:4f:2e:e1:da:50:34:90:3d:9a:bb:
77:ec:b3:47:37:aa:66:80:97:12:07:66:b7:be:16:
67:be:35:3d:86:25:5e:c4:5b:7e:9f:f2:f9:6f:66:
55:78:71:ef:08:55:e6:e1:f7:bf:b0:58:e3:2a:94:
1b:4a:61:7d:2c:b4:b5:72:34:72:ef:c7:a1:bf:5d:
99:91:37:a2:21:2c:aa:19:43:0c:7d:cd:dc:30:7f:
66:ec:77:97:a1:ed:9c:08:b4:78:36:30:d7:12:d5:
13:f6:77:03:38:12:46:97:8f:c5:55:a7:65:75:d8:
01:41:bf:d9:26:9c:1c:52:9d:ff:f5:85:14:e7:5b:
6d:a1:14:18:da:b9:db:0a:a2:d3:de:09:2e:74:93:
92:f2:72:ff:33:a1:a8:fd:5f:ef:6a:75:7a:f8:00:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B9:A8:76:5C:EF:05:01:BB:3B:FB:E7:74:6B:71:C4:6A:5F:61:F9
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.4.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fa:43:2b:2c:8e:81:92:72:92:43:b8:ac:3e:e0:03:b7:b6:
29:02:3f:21:25:35:4c:24:a1:ae:0e:e8:5e:b1:f2:61:f1:a3:
ee:c6:ba:81:12:e4:ec:cc:ae:46:59:5a:85:ac:b6:43:8b:72:
0a:8d:05:38:e4:42:9e:03:b8:5d:0d:45:6f:fd:4b:a3:24:14:
51:49:2b:d3:da:8f:00:fc:14:a3:99:3a:f3:5e:9f:f9:e0:d4:
44:c9:08:df:53:c3:73:62:f7:f8:bd:33:92:96:eb:ef:48:74:
81:d8:86:68:6e:24:f4:49:eb:0d:bf:b1:95:60:ef:ee:db:9e:
ff:f9:23:01:b6:cc:ea:1a:3d:de:2d:da:38:bb:75:53:01:85:
d1:37:c9:1b:51:3c:8f:0d:0a:9e:35:63:ae:97:6c:48:bd:98:
35:a6:33:93:89:d1:62:4a:fe:ee:0f:8f:b0:52:ce:b4:7a:ef:
9d:f5:bb:ae:7e:07:e3:9b:6f:47:36:39:b0:26:04:a1:e1:3e:
57:d8:69:eb:83:d3:4b:a7:5d:0a:f8:42:e6:53:56:46:2c:34:
1b:19:cb:75:f9:ec:d1:ee:17:f8:f6:55:c3:bb:60:fc:e0:d6:
23:34:cf:25:2d:6e:8c:47:32:ad:fc:37:a1:8e:93:97:37:b0:
e8:cb:76:41
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUDc7FmrzKJU/fC9dzhuzOpQASa+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MzRaFw0yMzEwMjEwNDM0MzRaMDMxMTAvBgNV
BAMTKDQ1QjlBODc2NUNFRjA1MDFCQjNCRkJFNzc0NkI3MUM0NkE1RjYxRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfaF1NiqYiorFzJ0B6SitQDou
ETZQsvlEGACteGz8RLjclEAKu9Uakn0gACFVMay09Gy7LzbwYIMu6LbQ8mMyODGv
Zh5Q1q+jDu0/fXJXNcBKwtYIngXxnUdn1ThhTy7h2lA0kD2au3fss0c3qmaAlxIH
Zre+Fme+NT2GJV7EW36f8vlvZlV4ce8IVebh97+wWOMqlBtKYX0stLVyNHLvx6G/
XZmRN6IhLKoZQwx9zdwwf2bsd5eh7ZwItHg2MNcS1RP2dwM4EkaXj8VVp2V12AFB
v9kmnBxSnf/1hRTnW22hFBjaudsKotPeCS50k5Lycv8zoaj9X+9qdXr4AFUrAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQURbmodlzvBQG7O/vndGtxxGpfYfkwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODM2MmUzNDM4MmUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3
MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAFYwBDANBgkqhkiG9w0BAQsFAAOCAQEAA/pDKyyOgZJy
kkO4rD7gA7e2KQI/ISU1TCShrg7oXrHyYfGj7sa6gRLk7MyuRllahay2Q4tyCo0F
OORCngO4XQ1Fb/1LoyQUUUkr09qPAPwUo5k6816f+eDURMkI31PDc2L3+L0zkpbr
70h0gdiGaG4k9EnrDb+xlWDv7tue//kjAbbM6ho93i3aOLt1UwGF0TfJG1E8jw0K
njVjrpdsSL2YNaYzk4nRYkr+7g+PsFLOtHrvnfW7rn4H45tvRzY5sCYEoeE+V9hp
64PTS6ddCvhC5lNWRiw0GxnLdfns0e4X+PZVw7tg/ODWIzTPJS1ujEcyrfw3oY6T
lzew6Mt2QQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net