Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa
File: 3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: eTrDB3UJNTaNhozQZ5nGwpJq/hQS+Dx96QNwa5fvlow=
Subject key identifier: F5:BB:AB:23:77:9E:13:E4:F1:32:8B:65:60:E9:59:2C:26:98:F6:5D
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 3FA8D5BBDBCE2133EF7AF2D45CD8BCFEABB9AFB1
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa
Signing time: Sat 22 Oct 2022 04:33:46 +0000
ROA not before: Sat 22 Oct 2022 04:28:46 +0000
ROA not after: Sat 21 Oct 2023 04:33:46 +0000
asID: 204170
IP address blocks: 194.156.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a8:d5:bb:db:ce:21:33:ef:7a:f2:d4:5c:d8:bc:fe:ab:b9:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Oct 22 04:28:46 2022 GMT
Not After : Oct 21 04:33:46 2023 GMT
Subject: CN=F5BBAB23779E13E4F1328B6560E9592C2698F65D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:e2:e9:aa:11:06:2c:5d:bf:53:7d:11:20:
ef:e7:cd:8e:ec:36:0f:a1:a1:4c:7a:8d:2f:51:47:
4e:58:70:01:8d:b9:3f:37:38:40:d2:8e:59:97:98:
61:37:5c:d1:84:1f:4a:2c:de:07:91:a4:a3:b5:a8:
07:e1:2a:c4:38:79:f0:12:9f:89:8a:09:c4:2d:e2:
b0:bd:0a:3e:97:70:09:14:d5:d5:6b:97:c1:9b:6e:
65:46:fa:dd:b1:73:3e:ec:48:6a:04:6f:25:b6:f8:
0d:dd:b9:e6:e3:f0:17:98:97:5d:f8:5e:ae:64:32:
25:16:23:58:e3:f4:7f:d5:37:38:1e:eb:84:5d:a1:
d2:6e:cd:67:b9:33:c8:84:2e:0f:91:3f:51:d3:c6:
21:82:0e:09:31:f5:18:7d:d9:fc:1c:c3:d7:d3:3e:
7e:1f:91:d7:4d:e9:66:15:72:7a:7c:dc:b3:5b:10:
43:0d:4c:0b:65:4b:4a:37:23:d4:16:5f:a5:32:fc:
bc:e0:7e:50:0d:57:8e:98:5d:8e:e3:b4:73:d9:10:
ee:0d:72:ae:2a:3f:d3:7b:dc:76:0b:70:c1:d3:57:
74:9f:c6:66:f1:66:62:1c:e1:ae:2a:17:b5:71:89:
a7:7e:2e:cd:0e:f8:8e:e0:1a:27:f6:d8:c2:3d:81:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BB:AB:23:77:9E:13:E4:F1:32:8B:65:60:E9:59:2C:26:98:F6:5D
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:21:55:f0:ec:b3:76:8b:69:dc:20:9b:c0:f9:19:22:a0:a7:
64:78:11:da:6b:d4:38:68:3a:11:52:11:30:0c:23:28:d8:93:
ab:8e:e8:78:4e:78:e7:e0:f3:7e:85:0c:7d:12:ee:fa:4c:af:
73:6f:e7:b7:27:7e:0c:1c:3d:30:0d:0a:c5:34:94:09:ac:cd:
41:59:39:b2:28:45:34:06:8f:8a:d9:e4:8f:13:64:bf:bf:20:
aa:2e:02:23:19:27:64:3e:4f:d5:2e:12:14:64:1f:c1:63:fa:
47:bd:80:cf:bf:59:25:fd:6a:99:6b:bf:26:5f:88:ef:01:85:
2c:2d:7d:0b:cb:63:87:51:a3:e6:f0:ed:ec:9f:c8:9f:c4:14:
78:a9:82:e4:77:d6:f4:84:a4:64:eb:32:b9:f1:99:30:37:66:
45:f6:c2:7f:70:5d:f3:1c:44:8f:ac:6f:c1:1f:27:8b:03:08:
c9:54:f5:45:c6:57:46:a7:c2:c6:c9:20:15:34:98:30:1c:8e:
4d:a1:00:94:e1:45:02:25:5c:a9:0a:8a:ef:6e:76:e6:e8:17:
d4:75:41:b3:fc:82:81:f0:58:18:ee:fa:f4:e6:b9:f9:ca:1c:
75:74:c1:4a:39:31:81:d3:60:f2:ed:d3:55:5d:77:ab:5c:42:
01:e5:f2:43
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUP6jVu9vOITPvevLUXNi8/qu5r7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDZaFw0yMzEwMjEwNDMzNDZaMDMxMTAvBgNV
BAMTKEY1QkJBQjIzNzc5RTEzRTRGMTMyOEI2NTYwRTk1OTJDMjY5OEY2NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpeLpqhEGLF2/U30RIO/nzY7s
Ng+hoUx6jS9RR05YcAGNuT83OEDSjlmXmGE3XNGEH0os3geRpKO1qAfhKsQ4efAS
n4mKCcQt4rC9Cj6XcAkU1dVrl8GbbmVG+t2xcz7sSGoEbyW2+A3duebj8BeYl134
Xq5kMiUWI1jj9H/VNzge64RdodJuzWe5M8iELg+RP1HTxiGCDgkx9Rh92fwcw9fT
Pn4fkddN6WYVcnp83LNbEEMNTAtlS0o3I9QWX6Uy/LzgflANV46YXY7jtHPZEO4N
cq4qP9N73HYLcMHTV3SfxmbxZmIc4a4qF7Vxiad+Ls0O+I7gGif22MI9gRzzAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQU9burI3eeE+TxMotlYOlZLCaY9l0wHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzcvMzEzOTM0MmUzMTM1MzYyZTMyMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMyMzAzNDMxMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKc4jANBgkqhkiG9w0BAQsFAAOCAQEA
HSFV8Oyzdotp3CCbwPkZIqCnZHgR2mvUOGg6EVIRMAwjKNiTq47oeE545+DzfoUM
fRLu+kyvc2/ntyd+DBw9MA0KxTSUCazNQVk5sihFNAaPitnkjxNkv78gqi4CIxkn
ZD5P1S4SFGQfwWP6R72Az79ZJf1qmWu/Jl+I7wGFLC19C8tjh1Gj5vDt7J/In8QU
eKmC5HfW9ISkZOsyufGZMDdmRfbCf3Bd8xxEj6xvwR8niwMIyVT1RcZXRqfCxskg
FTSYMByOTaEAlOFFAiVcqQqK72525ugX1HVBs/yCgfBYGO769Oa5+cocdXTBSjkx
gdNg8u3TVV13q1xCAeXyQw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net