Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa
File: 39312e3139362e3232302e302f32342d3332203d3e203632323430.roa (raw, json)
Hash identifier: 84akFXL9LAkcPPVIb+k+v8Ip3n2Y0GGxXI60+wH7XFA=
Subject key identifier: 26:8C:BA:4E:79:25:74:01:B0:3D:4C:83:02:8A:B6:40:9F:43:3F:06
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 0274618363496BDAAFEC9283C2EAE5742BBF6D4B
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa
Signing time: Wed 28 Dec 2022 09:32:18 +0000
ROA not before: Wed 28 Dec 2022 09:27:18 +0000
ROA not after: Wed 27 Dec 2023 09:32:18 +0000
asID: 62240
IP address blocks: 91.196.220.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:74:61:83:63:49:6b:da:af:ec:92:83:c2:ea:e5:74:2b:bf:6d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Dec 28 09:27:18 2022 GMT
Not After : Dec 27 09:32:18 2023 GMT
Subject: CN=268CBA4E79257401B03D4C83028AB6409F433F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:37:ba:ac:cc:34:2a:f6:b2:61:be:7a:bf:
80:1e:35:6f:af:e4:aa:8f:8a:c6:b1:b8:28:59:37:
e4:b1:5f:5d:63:7f:77:a4:77:aa:75:f8:cc:e1:f1:
7d:cb:d5:59:1c:91:bd:57:ff:14:24:bd:91:bf:1f:
cd:fa:cd:7f:87:9b:a4:99:8c:1b:72:97:0f:1f:ce:
75:a0:6f:f4:a5:9f:29:c6:47:12:6e:42:86:12:c1:
b6:35:af:af:c5:28:63:46:a1:8b:c6:c4:8f:91:33:
62:d1:00:7b:22:24:d5:06:47:d2:66:9c:3a:ae:b8:
d6:d1:e1:d7:5a:75:09:d8:22:6a:6a:97:91:85:ed:
1e:94:d0:14:f4:a0:97:f5:35:50:ab:26:5b:80:16:
58:19:1b:13:87:d4:7a:c5:2f:5e:d8:d4:56:53:7d:
a0:e4:af:a5:89:6e:ba:95:7a:d3:00:c5:cc:73:f2:
02:b6:af:69:ef:26:8c:fb:83:6c:16:30:02:4e:8e:
f3:a2:36:cd:db:b1:ff:da:2f:dc:9c:c9:03:b5:bd:
b7:10:4c:42:1a:70:e3:84:03:8e:3d:f5:1f:ba:a6:
80:e9:05:75:cd:4e:5f:fe:eb:3c:bf:fd:18:57:62:
57:7f:73:92:06:13:d7:22:ec:39:e3:94:a4:14:1f:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8C:BA:4E:79:25:74:01:B0:3D:4C:83:02:8A:B6:40:9F:43:3F:06
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.220.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:af:5d:23:a9:8d:a6:c4:7e:9f:ea:f2:a7:e3:59:c6:83:02:
d3:0f:40:57:12:5b:85:4d:34:1a:bb:f8:cb:8f:29:d4:68:b9:
da:49:a2:c0:57:73:c9:94:12:0c:9a:70:09:29:cd:18:51:5b:
4c:a6:16:d1:5f:fb:f4:3b:45:5c:be:0d:1e:e8:23:da:ab:14:
89:a8:ff:18:fb:26:dd:81:9d:4c:66:fe:90:60:6d:a3:6a:ac:
74:4e:be:bd:83:f6:e8:87:0e:38:79:20:13:79:4d:32:84:f2:
15:61:50:16:b6:47:e9:93:df:7c:e2:a2:40:e7:f0:90:2d:01:
d2:50:fa:2e:31:0b:9e:8e:4b:af:16:cb:55:a7:4a:77:a3:0d:
1d:f5:d1:0d:e8:31:0e:92:65:b4:71:be:d1:16:13:0b:f1:a8:
da:83:ac:a8:29:8d:56:14:29:47:5a:31:07:94:c3:a2:17:a1:
7f:65:4d:91:39:6b:94:c6:58:cb:f6:a2:f7:68:d6:0e:20:03:
28:59:f5:df:eb:89:82:cd:fd:89:8d:b2:ea:d5:91:e4:b1:01:
e2:da:3b:59:d9:52:a2:9a:10:e6:82:3d:60:23:2f:bd:70:d8:
fa:36:d8:fd:29:5e:bf:b5:30:4b:b3:49:c5:13:a0:2d:60:1c:
61:40:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net