Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3235332e3233362e302f32322d3232203d3e20323033303631.roa
File: 352e3235332e3233362e302f32322d3232203d3e20323033303631.roa (raw, json)
Hash identifier: Z5UCO38DKxbaJXDHlxvtKqaEynPVKcwwfploL9r7Bng=
Subject key identifier: 2C:73:9B:0C:40:C1:FB:2B:3B:AC:4F:F0:C2:3A:B4:E3:7D:65:39:B0
Certificate issuer: /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial: 34C1D07E933BC5C4150EE8CBA0FE883492E4A94A
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3235332e3233362e302f32322d3232203d3e20323033303631.roa
Signing time: Sat 22 Oct 2022 04:33:55 +0000
ROA not before: Sat 22 Oct 2022 04:28:55 +0000
ROA not after: Sat 21 Oct 2023 04:33:55 +0000
asID: 203061
IP address blocks: 5.253.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c1:d0:7e:93:3b:c5:c4:15:0e:e8:cb:a0:fe:88:34:92:e4:a9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
Validity
Not Before: Oct 22 04:28:55 2022 GMT
Not After : Oct 21 04:33:55 2023 GMT
Subject: CN=2C739B0C40C1FB2B3BAC4FF0C23AB4E37D6539B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:fd:c3:da:4a:3a:03:6d:2a:64:77:07:3f:
80:92:0a:66:7b:34:99:5f:c4:37:d5:b3:ec:6c:6b:
8e:12:fc:b3:41:c4:32:e0:7b:97:d1:a1:d0:4f:d8:
20:fc:c3:97:42:68:37:37:43:84:6a:ae:8b:f3:9e:
22:cb:f8:62:14:0f:8e:70:8a:87:5a:2f:12:ab:70:
f4:f0:0c:01:c9:97:cc:32:9b:68:ed:7b:ae:ff:82:
a5:b0:14:1f:78:cc:ed:42:a4:77:8f:ad:b2:33:2d:
e5:9d:71:36:f2:d0:63:f1:ab:63:32:c5:12:c9:0f:
d0:a4:fc:cd:ef:5e:55:11:51:77:79:92:01:32:37:
03:07:14:a6:fe:95:aa:34:7f:b2:bb:04:6b:65:e3:
5f:78:80:9f:6b:3d:be:91:17:ce:2a:aa:b0:69:b6:
ce:33:c1:06:92:f8:4c:6e:1b:50:dd:43:55:08:fe:
3b:ea:c2:25:77:84:a4:d2:74:6b:4d:1d:38:21:eb:
da:41:71:21:f9:91:84:97:93:f9:d8:12:78:4a:cd:
26:28:89:11:2c:1a:f4:09:4e:bc:ee:d3:49:79:3d:
d7:72:be:07:84:17:37:b6:3a:ed:73:09:15:c3:dd:
b1:ed:6e:e7:0d:5e:19:8a:90:60:7d:16:dc:d4:d7:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:9B:0C:40:C1:FB:2B:3B:AC:4F:F0:C2:3A:B4:E3:7D:65:39:B0
X509v3 Authority Key Identifier:
keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3235332e3233362e302f32322d3232203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:4c:49:ee:82:e3:97:76:ea:85:20:18:47:d6:bc:31:48:c1:
bf:38:82:e5:7b:59:f3:91:12:d7:3d:4e:1c:2c:80:1f:51:07:
70:1b:64:d7:82:0f:5b:43:11:4b:07:b8:a6:19:4b:94:c0:76:
38:54:78:39:9e:af:40:3e:19:ef:f4:f1:b2:4d:e1:b6:60:56:
d3:cf:cf:f0:90:c9:73:4d:76:ed:15:9e:3a:47:13:73:c4:55:
60:3b:6a:91:9e:68:d9:67:6f:d1:c1:d5:3a:b1:56:95:37:66:
0d:90:02:c1:02:7d:24:98:7b:89:a0:34:d5:50:2a:6c:cb:c8:
ec:3b:0f:55:83:fc:64:39:d1:c4:07:c3:69:ee:5e:e7:cf:13:
de:1f:d3:6b:39:e3:eb:41:3f:28:01:cc:55:ae:bc:18:04:10:
79:96:8d:f3:88:87:52:ed:3b:03:b4:49:37:34:d3:b3:cb:0f:
b0:e2:89:40:40:09:7e:2a:93:e7:a0:16:46:56:fe:2a:52:24:
41:b2:87:ef:b0:a4:b7:d3:b3:fb:7c:41:4d:83:0f:06:33:d9:
98:72:24:d5:75:d8:3b:50:87:72:4d:1e:3e:0e:b8:d9:31:55:
d9:c8:22:c7:dc:ba:32:f6:69:c4:79:7b:bd:cd:11:15:51:73:
29:32:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net