Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36392e302f32342d3234203d3e203631333137.roa
File: 33312e3138372e36392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 6F+4DCI2uI1awqB+W5DiQSW8k5qwrwWR5pcEA7vw69w=
Subject key identifier: 3E:E9:5B:9B:6C:14:CF:76:53:12:77:48:74:9F:66:CC:7C:96:C9:D8
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 1115259D2B7D61D359EF6F73D94FA09D2C43306E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36392e302f32342d3234203d3e203631333137.roa
Signing time: Fri 27 Nov 2020 15:10:33 +0000
ROA not before: Fri 27 Nov 2020 15:05:33 +0000
ROA not after: Fri 26 Nov 2021 15:10:33 +0000
asID: 61317
IP address blocks: 31.187.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:15:25:9d:2b:7d:61:d3:59:ef:6f:73:d9:4f:a0:9d:2c:43:30:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 27 15:05:33 2020 GMT
Not After : Nov 26 15:10:33 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:21:68:21:22:f4:c0:66:ba:09:2e:bd:f4:
05:51:3c:76:49:19:19:89:ad:d6:f9:fe:c6:58:78:
9e:8c:03:71:3b:e5:d8:1a:64:64:ae:1c:74:a0:a9:
f9:bb:b5:8d:81:77:6c:22:70:52:6c:a3:d4:cc:7d:
d9:85:b8:ed:9e:5c:b4:b0:84:78:a7:60:cd:fb:08:
fe:10:a7:09:3a:65:8a:29:de:bf:af:75:a2:2c:0c:
a4:36:88:7d:56:29:6f:bf:44:1c:a8:fb:e4:15:db:
24:39:d4:81:46:41:db:9a:2f:ae:9f:71:92:25:f9:
ad:6f:97:43:f2:8d:c1:9c:67:91:32:22:05:68:0f:
9e:ac:35:54:95:bc:2b:72:8e:4c:5f:47:0e:59:95:
33:ba:9b:92:35:ab:42:8f:1c:7f:16:11:14:4b:7d:
88:bc:98:04:62:ec:74:67:c0:b2:00:0d:3c:e3:0f:
a6:56:28:9d:4f:16:11:74:36:30:39:67:49:44:bd:
f0:00:ec:f1:a2:6c:81:cc:8d:04:ef:66:dd:4c:41:
55:0a:d8:00:0b:9a:9b:5f:86:a6:f9:a3:0b:d7:c3:
b9:65:5c:53:69:39:06:51:a1:52:09:2f:d2:57:cb:
eb:ba:fb:24:54:2f:cb:31:53:fb:b3:2a:0f:32:31:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:5B:9B:6C:14:CF:76:53:12:77:48:74:9F:66:CC:7C:96:C9:D8
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e36392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:66:d1:45:12:78:80:e7:79:e7:6e:79:a3:c6:07:80:ca:6d:
74:8c:9b:f1:6b:88:47:d2:0a:79:b7:2a:03:f2:46:58:fe:00:
25:c7:66:d5:6b:63:00:84:92:f3:5b:24:e8:0a:59:76:60:94:
af:05:c0:a6:03:92:e4:ec:05:8f:dd:cd:0c:94:5a:33:72:09:
cc:db:65:be:e9:8c:cf:50:2d:3e:2e:bb:92:f4:bf:bc:7e:fe:
ed:fb:68:47:f8:59:13:c6:5c:43:80:4d:91:a2:eb:ae:53:9a:
3f:98:1b:8d:c4:5f:2d:6a:7a:83:8d:e7:9e:02:84:e3:23:e8:
14:b1:80:89:4d:cc:a7:ea:b1:ba:f0:e2:8a:34:e1:48:00:f9:
82:f1:43:4f:c2:49:d1:c9:eb:d3:89:59:6d:9f:80:5f:ea:32:
25:4d:9c:a1:69:d3:18:7e:67:ea:a0:ef:ce:31:08:5c:8c:75:
3f:50:bb:1e:4f:73:1f:9c:56:63:9b:a8:1d:93:51:85:b2:58:
bc:d2:1a:d0:a0:88:11:5d:63:a2:f8:3a:d7:be:a6:22:9f:46:
67:35:c2:04:0b:b5:de:04:5a:fa:7b:af:f6:c7:04:c2:38:e4:
fa:9a:b7:05:f0:c0:3d:0d:4e:76:55:e3:16:22:9e:36:6f:bc:
55:d9:0c:cd
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUERUlnSt9YdNZ729z2U+gnSxDMG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMDExMjcxNTA1MzNaFw0yMTExMjYxNTEwMzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFCRTIxNjgyMTIyRjRDMDY2
QkEwOTJFQkRGNDA1NTEzQzc2NDkxOTE5ODlBREQ2RjlGRUM2NTg3ODlFOEMwMzcx
M0JFNUQ4MUE2NDY0QUUxQzc0QTBBOUY5QkJCNThEODE3NzZDMjI3MDUyNkNBM0Q0
Q0M3REQ5ODVCOEVEOUU1Q0I0QjA4NDc4QTc2MENERkIwOEZFMTBBNzA5M0E2NThB
MjlERUJGQUY3NUEyMkMwQ0E0MzY4ODdENTYyOTZGQkY0NDFDQThGQkU0MTVEQjI0
MzlENDgxNDY0MURCOUEyRkFFOUY3MTkyMjVGOUFENkY5NzQzRjI4REMxOUM2Nzkx
MzIyMjA1NjgwRjlFQUMzNTU0OTVCQzJCNzI4RTRDNUY0NzBFNTk5NTMzQkE5Qjky
MzVBQjQyOEYxQzdGMTYxMTE0NEI3RDg4QkM5ODA0NjJFQzc0NjdDMEIyMDAwRDND
RTMwRkE2NTYyODlENEYxNjExNzQzNjMwMzk2NzQ5NDRCREYwMDBFQ0YxQTI2Qzgx
Q0M4RDA0RUY2NkRENEM0MTU1MEFEODAwMEI5QTlCNUY4NkE2RjlBMzBCRDdDM0I5
NjU1QzUzNjkzOTA2NTFBMTUyMDkyRkQyNTdDQkVCQkFGQjI0NTQyRkNCMzE1M0ZC
QjMyQTBGMzIzMTJCNzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwb4haCEi9MBmugkuvfQFUTx2SRkZia3W+f7GWHiejANxO+XYGmRk
rhx0oKn5u7WNgXdsInBSbKPUzH3Zhbjtnly0sIR4p2DN+wj+EKcJOmWKKd6/r3Wi
LAykNoh9Vilvv0QcqPvkFdskOdSBRkHbmi+un3GSJfmtb5dD8o3BnGeRMiIFaA+e
rDVUlbwrco5MX0cOWZUzupuSNatCjxx/FhEUS32IvJgEYux0Z8CyAA084w+mViid
TxYRdDYwOWdJRL3wAOzxomyBzI0E72bdTEFVCtgAC5qbX4am+aML18O5ZVxTaTkG
UaFSCS/SV8vruvskVC/LMVP7syoPMjErdwIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FD7pW5tsFM92UxJ3SHSfZsx8lsnYMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGG
BggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzQvMzMzMTJlMzEzODM3MmUzNjM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB+7
RTANBgkqhkiG9w0BAQsFAAOCAQEAPWbRRRJ4gOd55255o8YHgMptdIyb8WuIR9IK
ebcqA/JGWP4AJcdm1WtjAISS81sk6ApZdmCUrwXApgOS5OwFj93NDJRaM3IJzNtl
vumMz1AtPi67kvS/vH7+7ftoR/hZE8ZcQ4BNkaLrrlOaP5gbjcRfLWp6g43nngKE
4yPoFLGAiU3Mp+qxuvDiijThSAD5gvFDT8JJ0cnr04lZbZ+AX+oyJU2coWnTGH5n
6qDvzjEIXIx1P1C7Hk9zH5xWY5uoHZNRhbJYvNIa0KCIEV1jovg6176mIp9GZzXC
BAu13gRa+nuv9scEwjjk+pq3BfDAPQ1OdlXjFiKeNm+8VdkMzQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:50 2023 by rpki-client on console-fra.rpki-client.org