Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/38352e3230322e3230342e302f32322d3232203d3e20323033303631.roa
File: 38352e3230322e3230342e302f32322d3232203d3e20323033303631.roa (raw, json)
Hash identifier: ymmpKbzqmPJDqSEexPvCTWK+M9oRMKLd/wdAXMlOdf0=
Subject key identifier: 46:42:2A:6A:43:C8:38:16:02:49:E4:1C:B9:DC:2F:DA:C9:43:F5:8E
Certificate issuer: /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial: 5EB23CE1D4BD6112DDAE1DC3FDF3C9392D2DF6BE
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/5/38352e3230322e3230342e302f32322d3232203d3e20323033303631.roa
Signing time: Sat 22 Oct 2022 04:33:55 +0000
ROA not before: Sat 22 Oct 2022 04:28:55 +0000
ROA not after: Sat 21 Oct 2023 04:33:55 +0000
asID: 203061
IP address blocks: 85.202.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b2:3c:e1:d4:bd:61:12:dd:ae:1d:c3:fd:f3:c9:39:2d:2d:f6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
Validity
Not Before: Oct 22 04:28:55 2022 GMT
Not After : Oct 21 04:33:55 2023 GMT
Subject: CN=46422A6A43C838160249E41CB9DC2FDAC943F58E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:a1:bd:14:d4:ee:3b:a0:63:29:18:c3:a3:
73:f5:28:08:2f:a3:32:a2:a1:28:83:f0:40:ad:32:
85:8b:03:48:01:1d:a2:74:0a:17:df:5b:e8:e1:be:
eb:8e:74:57:96:0d:6d:b8:5e:fa:30:89:94:22:17:
e7:2d:06:67:9c:91:d1:92:12:58:30:45:fd:ae:cd:
e0:92:da:a8:6a:59:2c:22:1b:37:25:87:ec:e9:2a:
56:6e:c7:ea:2a:c3:76:31:da:b8:4a:62:ef:dc:62:
28:2a:b0:1f:df:29:f7:4c:63:85:a0:89:3f:ea:23:
72:29:96:4b:5f:9d:62:6e:24:b6:bf:95:2b:95:e0:
9a:44:18:cf:63:bd:2b:ca:24:4e:a2:30:db:67:33:
b1:8a:02:ca:23:1e:0b:2f:be:97:4e:29:83:30:7a:
4a:5a:e1:02:f4:47:84:91:c2:31:54:d9:15:1e:ee:
83:a3:bf:a0:9d:ef:cf:8f:69:1a:81:2e:67:06:98:
59:41:a2:d3:1b:35:ad:05:fa:92:03:60:ae:db:30:
02:83:a9:17:24:a9:a9:14:47:01:5c:df:6c:de:7a:
30:a8:59:89:6e:d8:91:60:a7:f6:d6:9d:ed:eb:82:
92:60:c1:f2:d2:c4:c1:5f:06:c0:b2:1e:c9:c2:1c:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:2A:6A:43:C8:38:16:02:49:E4:1C:B9:DC:2F:DA:C9:43:F5:8E
X509v3 Authority Key Identifier:
keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/38352e3230322e3230342e302f32322d3232203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.204.0/22
Signature Algorithm: sha256WithRSAEncryption
97:34:3c:ef:e8:86:16:40:5e:dd:cf:b0:04:45:7e:42:3b:bc:
1c:13:a1:da:d4:4a:89:63:80:a6:96:37:75:e7:a5:e9:4a:a0:
b5:a5:7d:cf:b3:02:67:01:f0:3e:65:61:fd:8d:5b:14:83:ab:
ce:94:2a:a4:97:9f:54:6e:c9:d0:c5:ca:e3:d2:10:df:bb:f4:
72:05:8b:5f:79:fb:7a:15:83:b3:7e:c9:ee:1b:55:81:f0:ad:
e5:b1:b4:15:eb:95:a0:26:32:90:ba:0d:1b:fa:0a:ef:93:bc:
21:ea:e2:fd:fd:c9:9c:ab:7f:02:9d:21:a0:40:73:87:ec:8b:
05:02:a2:09:95:96:29:dc:9a:12:be:55:e4:40:e7:51:df:fb:
66:7c:d2:c6:5b:d6:72:af:25:33:26:5a:fe:47:8e:b3:52:d9:
95:81:8e:fb:69:b1:47:8e:c6:7c:99:e9:47:23:14:2e:aa:41:
2c:29:59:7c:90:7a:96:3e:ad:2d:7a:bf:ff:b1:e8:d8:13:41:
76:b6:b1:0c:5d:ae:6b:8a:73:99:aa:f0:d0:74:4b:99:67:89:
90:37:c5:0b:45:2d:51:9a:65:77:a8:f1:f0:a9:00:b2:f0:41:
c7:9f:fc:28:0d:54:c1:8e:5a:2f:08:ea:97:3b:a7:68:da:68:
f0:d4:56:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net