Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/81/3138352e3139332e31362e302f32342d3234203d3e203230343733.roa
File: 3138352e3139332e31362e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: kfPFseV6bshm99T2TfVXPU2O7hxNXd4M0IjdRquIToU=
Subject key identifier: 11:5C:11:05:96:E6:F3:AC:64:B0:E1:23:E0:BF:FF:0E:FB:CC:41:88
Certificate issuer: /CN=ae99f7a676c12b1cebe350580b4c5cd4ab286b74
Certificate serial: 2C353AC9D6B3B4FBEB6C672439BE687278E5BE21
Authority key identifier: AE:99:F7:A6:76:C1:2B:1C:EB:E3:50:58:0B:4C:5C:D4:AB:28:6B:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpn3pnbBKxzr41BYC0xc1Ksoa3Q.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/81/3138352e3139332e31362e302f32342d3234203d3e203230343733.roa
Signing time: Tue 01 Dec 2020 23:28:43 +0000
ROA not before: Tue 01 Dec 2020 23:23:43 +0000
ROA not after: Tue 30 Nov 2021 23:28:43 +0000
asID: 20473
IP address blocks: 185.193.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:35:3a:c9:d6:b3:b4:fb:eb:6c:67:24:39:be:68:72:78:e5:be:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae99f7a676c12b1cebe350580b4c5cd4ab286b74
Validity
Not Before: Dec 1 23:23:43 2020 GMT
Not After : Nov 30 23:28:43 2021 GMT
Subject: CN=3082010A0282010100CB6BD20F853646D26E5CC7F3890E88434AA81D0F9F32D83B453BEEDF8B8B376F17D9EC48777E172CBA096EE2D0D2C7B0298628C6EB779BCB384B257B1E3D3A64E92EE2065BB6B37C9B18E93789F550856AFFBC38347281F77BA14151616AA857C7FCD9F2450C2BA04C9E79F73C42BD5F80259B861C117C6FEED1F3283A5309101EDFE5A28597AAD89085DC73BC8B4F543ED024571C2722CE805EB14C86F8B7418BCC7CB09FC85E6C5F0E1BF2F065FA2537106BDB005D61B2540680B88D14834AB47A716913808F54B9A46080D875497669A722155F668AB0BE7604C5F1BCED0D67552A61A75A03F78F7734F3D065748702BF19A653EAFB2CEF5FBFE8FF5EDCC10203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:d2:0f:85:36:46:d2:6e:5c:c7:f3:89:0e:
88:43:4a:a8:1d:0f:9f:32:d8:3b:45:3b:ee:df:8b:
8b:37:6f:17:d9:ec:48:77:7e:17:2c:ba:09:6e:e2:
d0:d2:c7:b0:29:86:28:c6:eb:77:9b:cb:38:4b:25:
7b:1e:3d:3a:64:e9:2e:e2:06:5b:b6:b3:7c:9b:18:
e9:37:89:f5:50:85:6a:ff:bc:38:34:72:81:f7:7b:
a1:41:51:61:6a:a8:57:c7:fc:d9:f2:45:0c:2b:a0:
4c:9e:79:f7:3c:42:bd:5f:80:25:9b:86:1c:11:7c:
6f:ee:d1:f3:28:3a:53:09:10:1e:df:e5:a2:85:97:
aa:d8:90:85:dc:73:bc:8b:4f:54:3e:d0:24:57:1c:
27:22:ce:80:5e:b1:4c:86:f8:b7:41:8b:cc:7c:b0:
9f:c8:5e:6c:5f:0e:1b:f2:f0:65:fa:25:37:10:6b:
db:00:5d:61:b2:54:06:80:b8:8d:14:83:4a:b4:7a:
71:69:13:80:8f:54:b9:a4:60:80:d8:75:49:76:69:
a7:22:15:5f:66:8a:b0:be:76:04:c5:f1:bc:ed:0d:
67:55:2a:61:a7:5a:03:f7:8f:77:34:f3:d0:65:74:
87:02:bf:19:a6:53:ea:fb:2c:ef:5f:bf:e8:ff:5e:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5C:11:05:96:E6:F3:AC:64:B0:E1:23:E0:BF:FF:0E:FB:CC:41:88
X509v3 Authority Key Identifier:
keyid:AE:99:F7:A6:76:C1:2B:1C:EB:E3:50:58:0B:4C:5C:D4:AB:28:6B:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/81/AE99F7A676C12B1CEBE350580B4C5CD4AB286B74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpn3pnbBKxzr41BYC0xc1Ksoa3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/81/3138352e3139332e31362e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.16.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0b:83:87:f0:dc:79:70:fb:c8:29:33:2d:2e:3b:10:50:fc:
2a:d9:ac:64:c5:8a:5b:69:f6:57:37:b4:db:24:fb:be:4e:f6:
db:7c:5e:2c:68:bf:55:9c:44:e4:bb:af:35:00:25:3f:2c:b8:
e0:92:ff:be:0f:4c:3d:9c:94:ed:9f:0b:6c:21:7e:6c:98:37:
22:c1:3c:8b:bd:b8:a3:e2:69:74:b5:88:46:3c:0c:8d:98:cb:
4d:c3:ce:97:98:6a:42:7d:e4:d1:4d:45:51:85:b0:82:88:f2:
c2:a8:0e:91:67:9e:91:97:81:6c:22:27:5e:fc:4c:19:c2:4e:
74:17:5a:70:5b:2a:57:fb:a7:00:ea:82:2e:5b:be:c5:ca:da:
5f:f4:3c:aa:7e:a4:e9:48:9f:0b:5e:1b:1f:6d:91:0a:fb:9f:
83:7c:39:b5:82:77:b0:18:e0:ca:d9:03:83:64:7e:41:90:ce:
e1:fc:26:b5:58:1b:22:cc:43:2e:3d:2b:16:81:8d:e2:9c:4e:
0b:92:85:5a:0f:94:97:b7:51:2d:04:8a:1c:39:1d:3d:f9:c9:
84:2a:77:fc:44:3f:1f:1b:ee:63:d6:be:d6:f7:d1:1d:75:00:
97:27:b7:24:67:35:e8:e6:f7:8e:ed:02:02:00:d4:32:25:fb:
c7:07:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net