Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203235303938.roa
File: 38352e3230382e35302e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier: TqxuxclqWpZgKQMPAWi+88hFpgaU+jQKTNbVE5B1HcQ=
Subject key identifier: 2A:F1:98:8C:E6:E2:B3:5B:0C:11:31:18:09:F1:01:0F:CE:4C:7E:83
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 2FA926DFE08B55902315C7F55E71A1477E2C7864
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203235303938.roa
Signing time: Sat 22 Oct 2022 04:33:11 +0000
ROA not before: Sat 22 Oct 2022 04:28:11 +0000
ROA not after: Sat 21 Oct 2023 04:33:11 +0000
asID: 25098
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a9:26:df:e0:8b:55:90:23:15:c7:f5:5e:71:a1:47:7e:2c:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Oct 22 04:28:11 2022 GMT
Not After : Oct 21 04:33:11 2023 GMT
Subject: CN=2AF1988CE6E2B35B0C11311809F1010FCE4C7E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:39:71:11:3d:bb:cd:3a:b3:08:cd:d0:cf:
8b:fd:a3:df:45:18:2c:0c:f6:39:7e:bd:da:a5:a0:
10:f3:e1:25:26:df:82:79:e8:f2:82:1e:3e:fa:78:
26:85:c9:04:05:fc:cc:3e:2f:7a:e0:63:41:08:eb:
f5:52:bc:39:00:29:1b:f3:bb:8e:b1:85:6f:bc:3e:
2b:b9:c8:f0:1f:16:a7:2d:f0:92:0f:ed:1f:10:82:
b1:4c:57:74:d7:cb:90:02:24:aa:50:3e:b2:59:71:
47:c0:4b:f4:7e:ff:6b:cd:34:a0:8a:22:c1:ae:e4:
7c:3a:59:43:26:4a:d0:1d:ee:95:4b:e1:8f:61:80:
df:f9:16:ce:18:dd:e0:fc:57:d4:7d:12:1d:76:b6:
01:dd:f7:8a:e8:2a:dd:f8:8c:e6:34:0b:e7:2f:11:
4f:f0:cf:c9:1a:54:fd:8f:3a:38:ad:e5:b4:68:0a:
43:e3:ae:9c:cf:62:64:30:a9:d7:2c:57:fc:63:f1:
57:00:ee:0c:3a:61:5e:2f:de:19:45:13:79:44:bf:
d5:52:d8:70:22:8d:6f:b1:f8:80:e7:10:46:a6:cf:
9c:a6:a0:01:7e:70:5e:24:32:7b:b1:22:64:d5:6e:
8e:1d:64:25:62:72:0d:00:8d:c1:d8:76:c5:c3:eb:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:98:8C:E6:E2:B3:5B:0C:11:31:18:09:F1:01:0F:CE:4C:7E:83
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203235303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:85:1b:b7:f5:6a:2b:b4:8f:d1:80:ec:08:1f:95:a2:e7:94:
ea:26:45:9d:61:08:f9:b7:37:31:6a:75:15:21:5a:87:f1:92:
5b:dc:76:63:7e:5b:d1:6e:ec:2f:56:e2:f2:67:7f:e7:15:b8:
47:bd:7a:94:34:00:72:e7:5f:3d:92:79:88:cb:93:97:82:ae:
a7:c5:8f:99:14:50:7b:04:c4:b4:38:74:b2:34:c5:0f:ec:e2:
b8:5a:87:d7:76:e7:58:ba:c9:fb:d0:3d:7c:ba:e2:78:da:70:
69:c4:c9:bb:c9:d5:29:e2:10:5d:cf:03:c5:29:7a:d1:57:74:
e1:bc:28:c4:d2:7b:32:de:e6:0c:c6:bb:c4:1a:99:af:a3:4a:
9b:1d:13:ed:64:d1:5d:68:c7:b8:a6:15:47:3f:a5:c5:3d:80:
1f:c6:f2:2a:bc:2a:09:0a:89:ed:e5:10:cf:74:75:2a:70:09:
60:bd:8c:45:9c:f7:90:ec:14:cf:ca:4f:c0:98:42:28:15:ae:
0a:c5:ca:de:5d:ea:74:81:19:53:ca:b5:90:88:e5:ff:8f:50:
f1:c7:36:12:c0:80:6f:3c:8c:2d:8e:cd:66:bd:62:0c:a5:52:
93:9e:af:47:d3:21:54:d3:3d:ac:d9:3d:bd:ca:ea:01:8c:04:
e4:74:5d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net