Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/91/322e35382e38322e302f32342d3234203d3e20323132373434.roa
File: 322e35382e38322e302f32342d3234203d3e20323132373434.roa (raw, json)
Hash identifier: 8uA5E1YRUzMjTKxwNojYLWbMZ0Etq9CBDjESBsG3I4s=
Subject key identifier: 2E:34:39:89:EB:57:E1:25:94:C4:2B:43:F9:5C:1A:A0:2D:BB:AB:93
Certificate issuer: /CN=f6afa7b1a94ff5577f4a006792810c27ac1b4f2e
Certificate serial: 5CE461FB5D3584368453538F3E58F7E3B1BF91CD
Authority key identifier: F6:AF:A7:B1:A9:4F:F5:57:7F:4A:00:67:92:81:0C:27:AC:1B:4F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q-nsalP9Vd_SgBnkoEMJ6wbTy4.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/91/322e35382e38322e302f32342d3234203d3e20323132373434.roa
Signing time: Sat 23 Jan 2021 12:50:46 +0000
ROA not before: Sat 23 Jan 2021 12:45:46 +0000
ROA not after: Sat 22 Jan 2022 12:50:46 +0000
asID: 212744
IP address blocks: 2.58.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e4:61:fb:5d:35:84:36:84:53:53:8f:3e:58:f7:e3:b1:bf:91:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6afa7b1a94ff5577f4a006792810c27ac1b4f2e
Validity
Not Before: Jan 23 12:45:46 2021 GMT
Not After : Jan 22 12:50:46 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:88:16:b0:5a:7c:0f:b4:3b:18:29:46:ce:
5d:56:5a:27:2d:e0:26:aa:fd:90:f1:a3:ab:f3:1a:
8d:0d:90:0a:d3:f3:93:0b:7f:b2:48:6f:19:f6:a8:
48:4c:e2:f6:52:f7:ca:28:20:6d:27:97:df:ad:64:
6b:6d:b6:54:44:bb:a4:41:ba:2f:c3:28:f6:dd:f0:
f3:3f:7a:bb:13:39:ec:7f:4f:ca:2f:e5:d4:f5:77:
88:01:c6:eb:01:f9:4d:63:4b:8d:f1:97:d7:36:d9:
da:f5:1c:f1:22:03:a1:22:ab:56:ab:86:bd:15:88:
82:5f:fc:34:57:60:8c:6c:11:39:7d:67:aa:86:c9:
36:92:58:bc:75:3d:69:27:2a:05:ce:d4:fd:13:31:
06:cc:2c:38:c5:d5:0d:0e:cf:ed:9d:7c:0c:86:f1:
39:18:cc:ef:4f:f9:f1:04:79:d7:42:39:a2:ef:f2:
6a:a9:56:d1:5d:4e:3d:4a:d6:3f:b6:73:f7:bd:65:
b7:ff:f8:2b:89:8f:e7:b3:04:4f:31:0a:57:4b:9e:
4f:dd:be:66:06:01:c1:4c:b5:fe:66:95:c8:d6:02:
50:56:fa:3d:8c:52:a2:98:d5:42:4e:89:df:b6:f1:
5e:80:9f:b1:d2:25:bb:69:d4:a0:0b:45:2b:83:91:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:34:39:89:EB:57:E1:25:94:C4:2B:43:F9:5C:1A:A0:2D:BB:AB:93
X509v3 Authority Key Identifier:
keyid:F6:AF:A7:B1:A9:4F:F5:57:7F:4A:00:67:92:81:0C:27:AC:1B:4F:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/91/F6AFA7B1A94FF5577F4A006792810C27AC1B4F2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q-nsalP9Vd_SgBnkoEMJ6wbTy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/91/322e35382e38322e302f32342d3234203d3e20323132373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.82.0/24
Signature Algorithm: sha256WithRSAEncryption
06:59:63:a3:c6:39:47:fa:90:0b:37:f3:28:87:ac:81:8f:cf:
87:59:3d:b9:d6:27:a0:ff:5c:f6:41:69:41:61:de:ea:3e:49:
9b:27:ef:3f:30:0b:62:4e:12:61:6f:3d:1a:b6:a9:eb:da:cf:
2e:e1:20:85:c5:41:2b:8e:98:a4:01:8e:2c:6f:5f:88:31:c3:
45:14:de:a8:f5:33:07:4c:96:32:85:96:52:7e:72:f8:54:ef:
cc:d6:d9:91:f4:ce:2c:19:d6:24:fc:84:e5:39:d6:2e:89:ac:
03:8a:99:56:88:9c:78:6d:1d:59:96:d0:11:b3:ee:91:fd:7f:
9a:8c:ef:d5:0a:40:a7:e8:fc:a2:ee:60:43:12:f8:72:86:22:
a4:e6:8f:f8:d9:83:61:fe:cb:b0:50:7f:b0:65:3c:e4:b0:05:
d3:7f:2b:62:d4:d4:36:e4:08:95:5d:2e:a0:fd:d1:7f:cf:fb:
02:bb:ac:c1:76:2c:a5:e4:6e:90:67:b9:56:a3:65:b2:89:fd:
0f:01:6b:61:c9:b4:91:24:de:95:79:72:4c:04:77:9d:1c:c3:
19:2d:2f:fe:0c:ca:af:6b:44:79:16:f9:e3:67:fc:b2:82:41:
35:53:45:0c:34:f8:09:94:f5:cf:de:83:92:7a:0f:f9:a6:d1:
83:d8:5b:11
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUXORh+101hDaEU1OPPlj347G/kc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjZhZmE3YjFhOTRmZjU1NzdmNGEwMDY3OTI4MTBjMjdh
YzFiNGYyZTAeFw0yMTAxMjMxMjQ1NDZaFw0yMjAxMjIxMjUwNDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU2Qzg4MTZCMDVBN0MwRkI0
M0IxODI5NDZDRTVENTY1QTI3MkRFMDI2QUFGRDkwRjFBM0FCRjMxQThEMEQ5MDBB
RDNGMzkzMEI3RkIyNDg2RjE5RjZBODQ4NENFMkY2NTJGN0NBMjgyMDZEMjc5N0RG
QUQ2NDZCNkRCNjU0NDRCQkE0NDFCQTJGQzMyOEY2RERGMEYzM0Y3QUJCMTMzOUVD
N0Y0RkNBMkZFNUQ0RjU3Nzg4MDFDNkVCMDFGOTRENjM0QjhERjE5N0Q3MzZEOURB
RjUxQ0YxMjIwM0ExMjJBQjU2QUI4NkJEMTU4ODgyNUZGQzM0NTc2MDhDNkMxMTM5
N0Q2N0FBODZDOTM2OTI1OEJDNzUzRDY5MjcyQTA1Q0VENEZEMTMzMTA2Q0MyQzM4
QzVENTBEMEVDRkVEOUQ3QzBDODZGMTM5MThDQ0VGNEZGOUYxMDQ3OUQ3NDIzOUEy
RUZGMjZBQTk1NkQxNUQ0RTNENEFENjNGQjY3M0Y3QkQ2NUI3RkZGODJCODk4RkU3
QjMwNDRGMzEwQTU3NEI5RTRGRERCRTY2MDYwMUMxNENCNUZFNjY5NUM4RDYwMjUw
NTZGQTNEOEM1MkEyOThENTQyNEU4OURGQjZGMTVFODA5RkIxRDIyNUJCNjlENEEw
MEI0NTJCODM5MUFFQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvmyIFrBafA+0OxgpRs5dVlonLeAmqv2Q8aOr8xqNDZAK0/OTC3+y
SG8Z9qhITOL2UvfKKCBtJ5ffrWRrbbZURLukQbovwyj23fDzP3q7Eznsf0/KL+XU
9XeIAcbrAflNY0uN8ZfXNtna9RzxIgOhIqtWq4a9FYiCX/w0V2CMbBE5fWeqhsk2
kli8dT1pJyoFztT9EzEGzCw4xdUNDs/tnXwMhvE5GMzvT/nxBHnXQjmi7/JqqVbR
XU49StY/tnP3vWW3//griY/nswRPMQpXS55P3b5mBgHBTLX+ZpXI1gJQVvo9jFKi
mNVCTonftvFegJ+x0iW7adSgC0Urg5GutwIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FC40OYnrV+EllMQrQ/lcGqAtu6uTMB8GA1UdIwQYMBaAFPavp7GpT/VXf0oAZ5KB
DCesG08uMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC85MS9GNkFG
QTdCMUE5NEZGNTU3N0Y0QTAwNjc5MjgxMEMyN0FDMUI0RjJFLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXEtbnNhbFA5VmRfU2dCbmtvRU1KNndiVHk0LmNlcjCB
hQYIKwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmlyc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC85MS8zMjJlMzUzODJlMzgzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjM3MzQzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAI6
UjANBgkqhkiG9w0BAQsFAAOCAQEABlljo8Y5R/qQCzfzKIesgY/Ph1k9udYnoP9c
9kFpQWHe6j5JmyfvPzALYk4SYW89Grap69rPLuEghcVBK46YpAGOLG9fiDHDRRTe
qPUzB0yWMoWWUn5y+FTvzNbZkfTOLBnWJPyE5TnWLomsA4qZVoiceG0dWZbQEbPu
kf1/mozv1QpAp+j8ou5gQxL4coYipOaP+NmDYf7LsFB/sGU85LAF038rYtTUNuQI
lV0uoP3Rf8/7AruswXYspeRukGe5VqNlson9DwFrYcm0kSTelXlyTAR3nRzDGS0v
/gzKr2tEeRb542f8soJBNVNFDDT4CZT1z96DknoP+abRg9hbEQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net