Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235302e302f32342d3234203d3e203632323430.roa
File: 38332e3137312e3235302e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: dRlyuJQpn0AWXIHWwuCaANecCz+bFsd69HLp+vI8J94=
Subject key identifier: F6:6D:D6:90:96:E3:45:4E:6F:A4:3B:D5:98:9A:D9:D7:47:0C:E7:76
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 33F0A7DA7C71EB7318D3F4C361DE109792EA9096
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235302e302f32342d3234203d3e203632323430.roa
Signing time: Sat 22 Oct 2022 04:34:02 +0000
ROA not before: Sat 22 Oct 2022 04:29:02 +0000
ROA not after: Sat 21 Oct 2023 04:34:02 +0000
asID: 62240
IP address blocks: 83.171.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f0:a7:da:7c:71:eb:73:18:d3:f4:c3:61:de:10:97:92:ea:90:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Oct 22 04:29:02 2022 GMT
Not After : Oct 21 04:34:02 2023 GMT
Subject: CN=F66DD69096E3454E6FA43BD5989AD9D7470CE776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:0b:ef:4f:6a:97:af:1f:f1:cb:15:e8:ee:
ca:e5:de:82:eb:5c:95:a5:81:78:a4:71:75:5f:68:
c5:d9:56:0d:ac:4f:a8:07:60:04:b7:57:32:23:c2:
cc:b2:8c:68:ef:37:82:eb:c4:58:4b:30:4d:ce:d4:
e6:33:87:2c:3a:67:de:e2:7a:89:97:30:6c:8b:de:
c1:07:f4:cc:17:e0:79:80:3f:c4:97:05:f4:f4:04:
96:c3:48:ba:0d:b8:b6:9c:bb:6e:14:c7:08:e1:dc:
30:75:33:48:dc:99:09:30:28:8d:75:4b:3e:e3:89:
e9:2a:07:85:92:3a:27:5a:df:66:c1:85:47:c6:d7:
5e:7e:94:cc:28:90:4a:a3:32:4b:c7:0e:d6:0f:ae:
cc:d7:53:56:81:a4:8d:05:3c:b0:29:d7:74:16:e4:
eb:91:00:03:47:01:13:f4:c4:c4:7e:62:c4:b0:b1:
8f:b4:6e:cd:be:29:fc:ef:e7:ce:08:91:3b:7c:31:
2f:c0:90:16:fb:f2:a0:34:82:73:00:fc:e1:bb:62:
9e:ae:19:a5:45:40:ec:ef:ac:8e:fb:41:9c:0b:a2:
6e:e2:b0:71:6e:a8:c0:1d:7c:d6:9f:78:b4:c5:ec:
6e:fb:3d:20:39:01:c2:a4:c3:11:2f:07:a2:c4:46:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6D:D6:90:96:E3:45:4E:6F:A4:3B:D5:98:9A:D9:D7:47:0C:E7:76
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235302e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.250.0/24
Signature Algorithm: sha256WithRSAEncryption
35:60:27:bb:2e:ee:80:b2:09:fa:36:15:d2:36:e5:b2:9a:8c:
bf:24:44:e4:0e:b7:23:d2:80:d4:b4:c5:1f:dd:18:a0:71:bd:
cc:28:2f:69:e6:85:fc:29:63:30:0a:27:96:36:66:e5:0d:8e:
09:cd:d5:2d:a5:d6:0e:f8:17:73:71:77:82:dd:69:da:fe:fa:
1f:1f:76:a0:de:77:a5:e6:d2:e1:a9:74:34:1a:f9:4c:84:b4:
1b:3b:93:7d:d0:49:60:8c:17:eb:7c:99:f3:87:77:c4:7d:89:
23:59:28:83:29:06:d3:0b:b1:81:2d:1c:6c:2c:1e:3d:ed:b6:
d3:7b:05:64:90:3f:09:41:ae:69:7f:43:af:6e:37:13:99:29:
73:e4:da:68:f0:e5:47:9e:99:b5:95:e1:05:a5:62:1a:36:3d:
16:ea:75:39:d8:0e:b2:fa:77:52:0d:57:38:4f:74:16:3e:d6:
a7:90:13:06:4e:10:f9:d8:09:67:d0:b9:6f:2f:13:a3:27:8e:
9e:d8:01:51:9f:2b:af:04:06:ff:46:cb:b4:f8:d4:11:5a:3f:
93:a4:1d:ce:51:23:ba:07:b5:1c:76:ac:ad:36:97:1a:3c:08:
e1:e6:7d:29:ec:1c:91:33:ee:43:c7:24:34:b6:b1:da:71:2d:
1b:59:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net