Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32342d3234203d3e20313339363630.roa
File: 3139342e33312e3134382e302f32342d3234203d3e20313339363630.roa (raw, json)
Hash identifier: WGy7ismhnJlImQAlYE6NeP6cdKcbSGevGKvw+hjM6rc=
Subject key identifier: E0:DE:1D:D6:87:AE:99:26:0E:3B:71:39:F3:C3:99:58:6C:AE:7B:76
Certificate issuer: /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial: 08809711027ACA0D97633F7213E83ECC4627A086
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32342d3234203d3e20313339363630.roa
Signing time: Sat 22 Oct 2022 04:33:54 +0000
ROA not before: Sat 22 Oct 2022 04:28:54 +0000
ROA not after: Sat 21 Oct 2023 04:33:54 +0000
asID: 139660
IP address blocks: 194.31.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:80:97:11:02:7a:ca:0d:97:63:3f:72:13:e8:3e:cc:46:27:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
Validity
Not Before: Oct 22 04:28:54 2022 GMT
Not After : Oct 21 04:33:54 2023 GMT
Subject: CN=E0DE1DD687AE99260E3B7139F3C399586CAE7B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:56:8a:f6:b4:3c:ff:34:8b:6e:02:f6:fe:
da:f1:1e:4c:90:46:02:9c:21:81:56:e0:87:2e:38:
87:9f:a9:b4:9e:7a:5e:4b:37:34:81:fa:9f:fc:ef:
a0:05:3c:fb:0e:58:11:92:0c:78:c4:2e:41:83:48:
35:78:a8:fc:87:cb:a4:9f:19:b0:83:d3:1e:1f:41:
14:13:6f:ca:34:54:8f:ae:04:24:a9:e0:4b:94:7a:
86:15:08:f5:22:c4:56:e0:13:cc:e2:44:ef:c0:ce:
8e:50:95:bd:59:ca:e5:fd:d6:4b:25:35:94:00:9d:
a2:62:d0:67:40:68:cf:25:89:ef:79:15:9c:37:85:
5e:c8:1b:0d:f7:75:56:de:a1:2e:e2:11:a2:c5:ad:
49:8e:b9:fe:da:3e:0e:34:2d:94:f4:93:d2:ce:c7:
da:2d:c4:ae:08:cf:6c:76:d7:1b:6c:00:22:0f:06:
26:cb:5d:48:57:12:b1:0d:9b:ae:01:05:ae:09:ae:
16:e6:05:f4:3c:82:af:1c:1f:4d:8b:58:6a:e4:9e:
5e:66:81:81:0f:51:8e:ba:de:73:20:55:96:19:b5:
10:0e:de:3b:d1:98:ba:cd:36:50:ba:83:3d:69:c1:
f4:74:1f:45:fb:56:44:cc:2f:2c:17:82:05:79:86:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DE:1D:D6:87:AE:99:26:0E:3B:71:39:F3:C3:99:58:6C:AE:7B:76
X509v3 Authority Key Identifier:
keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32342d3234203d3e20313339363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:08:68:cc:46:52:2a:f7:5f:bf:9a:e3:cb:d8:64:1e:e0:e7:
4e:3a:02:d1:cd:79:f8:10:90:58:91:99:5d:a6:f4:a0:cb:f6:
be:4e:e0:c9:b3:ae:7e:8c:f8:2a:4b:37:26:50:23:55:97:91:
7c:6f:41:f6:02:b5:87:6c:61:55:56:49:ca:c3:42:6e:8f:ca:
54:b5:b1:34:3f:fd:c6:a3:57:58:57:37:32:00:b1:8e:ec:84:
9c:40:34:45:40:9d:3b:e6:41:2a:62:ef:09:a8:81:5f:f2:2e:
30:4f:8f:b1:cf:73:18:7e:19:c4:74:14:81:31:56:28:49:69:
31:3e:8c:7e:b9:ea:c1:c2:06:44:c8:7c:d7:85:dd:89:8a:4e:
f0:14:50:80:10:ad:03:32:e5:08:e7:0d:07:e0:91:84:25:71:
15:32:9e:23:1a:06:4a:99:70:8b:de:cc:46:19:46:cf:92:b2:
09:f7:b6:2a:cc:cd:ae:1e:59:c5:9a:d6:2e:e6:b2:8d:be:97:
d8:0f:0f:a1:ce:95:c9:f3:d6:d0:84:24:ef:ad:ac:f2:1a:c6:
39:4e:f9:8c:77:c8:c5:73:16:54:6b:63:84:a6:df:36:a1:cc:
6f:72:ef:97:36:99:bd:ce:b0:da:ba:37:ed:09:0c:82:4b:af:
de:64:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net