Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33322e302f32342d3234203d3e20313431303339.roa
File: 352e3138322e33322e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: HQhfObfMPba7CQtnsMjz/73XQWJFWWXwc+A9JnMjOFs=
Subject key identifier: 35:DE:32:43:15:6D:0E:21:CD:75:39:4F:C1:EB:50:9F:3D:AA:9A:25
Certificate issuer: /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial: 42A80406CE7E1FD0D942B2569988FA623EC17619
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33322e302f32342d3234203d3e20313431303339.roa
Signing time: Sat 22 Oct 2022 04:33:55 +0000
ROA not before: Sat 22 Oct 2022 04:28:55 +0000
ROA not after: Sat 21 Oct 2023 04:33:55 +0000
asID: 141039
IP address blocks: 5.182.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a8:04:06:ce:7e:1f:d0:d9:42:b2:56:99:88:fa:62:3e:c1:76:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
Validity
Not Before: Oct 22 04:28:55 2022 GMT
Not After : Oct 21 04:33:55 2023 GMT
Subject: CN=35DE3243156D0E21CD75394FC1EB509F3DAA9A25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:f0:e4:4c:92:35:9d:af:f4:31:f8:8e:b2:
4b:80:d6:d3:ab:92:4e:c0:fc:04:76:8f:25:da:fd:
b5:1a:eb:4a:24:4c:29:75:7d:75:46:40:5c:18:98:
ae:b4:2f:14:0d:8c:77:15:9e:0f:1b:50:4e:db:1d:
ad:f4:9c:a4:58:aa:63:98:21:21:8c:01:ba:67:3e:
66:ed:10:79:40:62:c3:e7:68:b7:7d:b1:ad:93:88:
50:8a:e3:7e:62:31:a5:d5:b1:c4:23:96:91:50:6c:
7f:c3:8e:af:47:c9:c0:73:84:32:68:b5:06:93:d2:
8c:db:4b:8a:74:c1:37:2c:fb:aa:e8:f9:f2:b0:e9:
a5:d9:89:58:27:5d:99:e1:e2:5c:9f:72:14:72:7d:
35:52:a8:80:49:2c:14:71:30:ef:94:8e:ff:ec:40:
dc:4d:3f:db:8b:52:65:6f:f4:73:64:19:75:63:79:
84:64:fb:91:ff:2f:63:e2:83:1a:15:65:75:a2:a7:
a0:dc:93:a1:31:bf:42:1c:35:68:8e:e3:1d:ca:97:
f0:d1:1b:d7:fb:df:86:35:5b:0c:f5:6d:58:9d:63:
6b:bd:04:94:db:00:46:04:3e:56:fb:e6:17:67:e6:
27:e3:46:e7:8e:e5:99:91:94:b8:f7:3d:aa:fe:4e:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:32:43:15:6D:0E:21:CD:75:39:4F:C1:EB:50:9F:3D:AA:9A:25
X509v3 Authority Key Identifier:
keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33322e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.32.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8b:46:8e:a4:a7:f6:c3:3c:2c:cc:c8:c2:80:f9:8e:a0:9d:
19:eb:d3:f5:74:e9:79:65:9e:f6:89:29:84:37:a0:d7:0f:ab:
e7:2e:55:61:e5:49:98:fd:c4:70:4e:57:c4:00:c1:98:05:6a:
1e:72:74:23:ff:42:71:c2:f0:09:7c:1c:98:c5:9f:70:2a:74:
97:c6:cb:1d:f8:06:bd:51:bf:e8:a0:4b:a0:0d:d1:90:fc:fc:
d1:2b:39:c0:d3:db:36:e6:1e:34:a4:bc:91:3f:bf:50:7d:6f:
85:5e:b0:ec:19:66:cd:a8:c4:11:02:65:76:95:1b:c5:a8:bc:
e0:9c:28:57:76:ed:a5:9d:42:89:86:3a:25:b2:08:dc:a4:4b:
91:76:42:1f:f1:63:5e:41:f6:ac:9e:63:8f:93:53:73:2d:7f:
25:1c:b2:98:1f:7f:14:cc:66:57:82:f0:b4:6d:9e:b5:b7:29:
f1:4d:77:37:48:db:eb:92:b1:c1:90:cb:9a:9a:12:b8:b6:f7:
8c:d4:5c:d9:d6:03:4d:f5:18:28:fe:1b:2a:fb:be:f1:fd:bd:
dc:ff:20:6d:4c:c7:d6:25:ef:bb:34:0c:ed:ba:b0:67:35:4f:
84:de:51:a1:fd:71:e0:03:ff:da:c9:c5:4a:1b:7f:ea:bf:4a:
e8:56:a6:2b
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUQqgEBs5+H9DZQrJWmYj6Yj7BdhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMjEwMjIwNDI4NTVaFw0yMzEwMjEwNDMzNTVaMDMxMTAvBgNV
BAMTKDM1REUzMjQzMTU2RDBFMjFDRDc1Mzk0RkMxRUI1MDlGM0RBQTlBMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/W/DkTJI1na/0MfiOskuA1tOr
kk7A/AR2jyXa/bUa60okTCl1fXVGQFwYmK60LxQNjHcVng8bUE7bHa30nKRYqmOY
ISGMAbpnPmbtEHlAYsPnaLd9sa2TiFCK435iMaXVscQjlpFQbH/Djq9HycBzhDJo
tQaT0ozbS4p0wTcs+6ro+fKw6aXZiVgnXZnh4lyfchRyfTVSqIBJLBRxMO+Ujv/s
QNxNP9uLUmVv9HNkGXVjeYRk+5H/L2PigxoVZXWip6Dck6Exv0IcNWiO4x3Kl/DR
G9f734Y1Wwz1bVidY2u9BJTbAEYEPlb75hdn5ifjRueO5ZmRlLj3Par+Tn6BAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUNd4yQxVtDiHNdTlPwetQnz2qmiUwHwYDVR0j
BBgwFoAUV+6G38VtVSCaNZJNgxUwA1uuOQcwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzUvNTdFRTg2REZDNTZENTUyMDlBMzU5MjREODMxNTMwMDM1
QkFFMzkwNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1YtNkczOFZ0VlNDYU5a
Sk5neFV3QTF1dU9RYy5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NS8zNTJlMzEzODMyMmUzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMx
MzAzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQABbYgMA0GCSqGSIb3DQEBCwUAA4IBAQAAi0aOpKf2
wzwszMjCgPmOoJ0Z69P1dOl5ZZ72iSmEN6DXD6vnLlVh5UmY/cRwTlfEAMGYBWoe
cnQj/0JxwvAJfByYxZ9wKnSXxssd+Aa9Ub/ooEugDdGQ/PzRKznA09s25h40pLyR
P79QfW+FXrDsGWbNqMQRAmV2lRvFqLzgnChXdu2lnUKJhjolsgjcpEuRdkIf8WNe
QfasnmOPk1NzLX8lHLKYH38UzGZXgvC0bZ61tynxTXc3SNvrkrHBkMuamhK4tveM
1FzZ1gNN9Rgo/hsq+77x/b3c/yBtTMfWJe+7NAzturBnNU+E3lGh/XHgA//aycVK
G3/qv0roVqYr
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net