Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e203139343337.roa
File: 38352e3230382e34392e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: mHgjL9vgepP0VgFjXNz+4HsLj+GTIEnnOYqQBn8S3f0=
Subject key identifier: 5C:7B:12:AC:CF:B7:F1:5C:5F:C4:8E:0B:A0:7A:D9:A4:FF:D5:A5:C8
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 23FF47E63F77428AA5744482D2ECEF58D45A3213
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e203139343337.roa
Signing time: Sat 22 Oct 2022 04:33:11 +0000
ROA not before: Sat 22 Oct 2022 04:28:11 +0000
ROA not after: Sat 21 Oct 2023 04:33:11 +0000
asID: 19437
IP address blocks: 85.208.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ff:47:e6:3f:77:42:8a:a5:74:44:82:d2:ec:ef:58:d4:5a:32:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Oct 22 04:28:11 2022 GMT
Not After : Oct 21 04:33:11 2023 GMT
Subject: CN=5C7B12ACCFB7F15C5FC48E0BA07AD9A4FFD5A5C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:37:e4:6f:fd:51:90:85:db:a0:b2:45:e9:
f2:15:72:5a:29:bd:f3:a6:90:c3:e8:6a:6e:67:f7:
ac:e1:9d:92:e8:21:6b:75:cf:24:88:15:b5:8d:eb:
51:ba:22:63:35:25:b9:5b:27:f5:e1:e7:84:75:47:
0e:32:99:f3:da:55:c7:2e:e9:64:2c:0b:3d:ce:40:
6b:5c:54:a0:b3:13:af:89:d2:bf:7e:21:9e:f5:ec:
f6:64:14:c2:02:5c:e3:cb:81:31:cb:9f:7f:5d:c8:
15:36:5a:9f:c1:f0:b6:d9:be:29:ed:49:16:b5:fc:
dd:69:26:48:65:ff:4b:d0:27:2f:3c:41:f0:e7:44:
ec:17:d1:71:57:de:d3:ea:b9:0f:55:c2:61:67:f9:
06:eb:55:bd:f7:47:24:b2:2d:31:39:77:b7:43:40:
79:e1:32:87:d8:73:47:c0:31:0b:e8:d2:62:3c:bb:
73:cf:59:73:70:80:13:6b:af:3c:be:af:ef:e5:0f:
9e:ed:65:b0:0b:5a:49:80:24:eb:75:aa:d7:6e:00:
b0:df:ed:ed:3b:58:3e:2f:40:d8:0c:fe:5d:39:87:
66:b7:53:51:a0:f6:69:d1:e3:10:24:9a:18:50:d1:
8f:8d:d8:5d:8b:84:ae:31:7d:b8:bc:5f:8c:68:b6:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7B:12:AC:CF:B7:F1:5C:5F:C4:8E:0B:A0:7A:D9:A4:FF:D5:A5:C8
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.49.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3b:40:70:79:19:d8:c4:ee:7b:93:d8:d0:47:8c:fc:7b:cc:
09:f9:cd:e1:f8:00:81:5d:db:27:d3:61:aa:0a:83:28:a6:48:
4a:e9:43:b2:70:6b:e8:8e:dc:42:ea:b7:a8:67:c4:51:cf:8e:
4b:83:b1:d5:8c:0d:60:fb:b3:d1:27:e7:bf:65:9e:e7:9b:17:
d9:2e:bf:58:47:fa:d6:56:9a:da:e8:3c:61:bf:ba:20:7e:c6:
9e:01:06:1b:7b:c2:ec:9c:f0:63:06:d8:f4:c5:c1:37:8a:37:
a4:1b:85:d6:b0:9f:44:0b:09:7a:50:66:84:39:47:10:fa:3f:
55:b4:2f:0a:63:86:b3:91:a6:5a:47:96:01:7d:ab:a7:80:21:
3b:26:b9:20:2d:33:78:d9:6a:41:b8:28:57:00:5b:25:46:15:
94:cc:79:4a:d3:d0:d3:5c:bb:ca:22:c2:c1:91:0d:d5:32:0d:
04:3c:37:4f:18:43:2b:c3:1d:40:e0:2f:de:ee:55:b7:68:de:
85:12:a1:a4:20:ea:ef:79:62:f1:af:e1:b5:a7:4e:aa:da:78:
9d:f4:34:11:32:ba:73:d6:a6:eb:c2:b8:0c:60:a0:53:66:ca:
4a:f4:31:55:fa:d9:64:20:b5:a0:7d:22:b5:ad:68:8c:c5:17:
55:cb:3a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net