Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e31342e3139322e302f32332d3234203d3e2030.roa
File: 34352e31342e3139322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: PDvB1OE0gLis7macVZpG002QWWgYtuxPZuSYsIoChY0=
Subject key identifier: A2:7A:78:44:F7:07:8B:0E:7F:F9:DF:2B:B6:C4:AD:6F:DD:AF:48:8C
Certificate issuer: /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial: 4DE5D6F8EAB1003706AB369FFDDB7EC446BDA996
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e31342e3139322e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:22:46 +0000
ROA not before: Fri 03 Mar 2023 16:17:46 +0000
ROA not after: Fri 01 Mar 2024 16:22:46 +0000
asID: 0
IP address blocks: 45.14.192.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e5:d6:f8:ea:b1:00:37:06:ab:36:9f:fd:db:7e:c4:46:bd:a9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Validity
Not Before: Mar 3 16:17:46 2023 GMT
Not After : Mar 1 16:22:46 2024 GMT
Subject: CN=A27A7844F7078B0E7FF9DF2BB6C4AD6FDDAF488C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ab:94:b7:c5:f1:22:9e:70:6d:b7:81:5d:33:
5d:fc:8b:60:0c:09:ae:e3:77:fa:a8:e7:6c:e6:cc:
10:50:28:79:ac:1e:ae:0b:ee:87:52:a3:21:7a:44:
c2:ec:ae:1a:99:87:16:fb:19:6a:ab:d2:2c:88:a9:
b6:46:05:81:93:e1:35:fb:73:91:86:65:48:12:29:
c6:f4:af:27:16:99:3b:1a:12:82:9e:cc:0b:d6:7f:
9a:4e:9d:38:94:a1:b8:8b:98:02:f8:49:18:b7:c4:
44:ea:05:64:52:0d:37:4d:6f:a0:e0:b4:79:62:54:
0b:67:4b:ad:ea:ca:ff:9d:cb:8e:e9:fa:96:60:26:
87:d8:1e:17:37:6b:67:2d:ea:f9:ef:58:2d:25:79:
63:b7:62:97:a0:02:7f:38:68:3d:b9:43:70:85:30:
ec:b1:e4:ce:e9:15:f3:3e:8f:29:ff:db:c3:1c:17:
11:40:bd:12:22:f8:02:00:53:9f:47:e1:7a:73:35:
cf:57:a8:85:21:41:4c:0a:29:cf:d9:3a:9c:0f:46:
c3:d9:ba:11:3b:78:2f:26:ff:af:92:d8:b6:7b:ff:
2b:7c:ae:93:39:b6:c4:ce:60:48:39:7a:c0:6b:ba:
73:62:b8:bd:9c:1b:0d:92:29:6a:d7:97:03:56:a8:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7A:78:44:F7:07:8B:0E:7F:F9:DF:2B:B6:C4:AD:6F:DD:AF:48:8C
X509v3 Authority Key Identifier:
keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e31342e3139322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.192.0/23
Signature Algorithm: sha256WithRSAEncryption
39:1f:21:e8:b4:6f:79:e4:7a:5c:24:ae:00:d1:a3:e0:f0:f0:
b5:be:74:d4:b8:fc:fe:3b:a2:12:5e:be:bb:1f:40:14:8a:01:
60:b6:e9:e1:28:9a:4c:b5:e1:e9:ef:31:0e:4b:2a:c7:ae:bc:
f4:c2:2c:61:3c:4f:59:46:db:55:de:c7:0f:53:64:24:12:c2:
a0:3b:74:de:dd:a9:59:16:fe:23:fb:13:b1:d3:34:f6:c3:69:
53:e5:83:49:5e:39:5f:42:40:a1:29:60:7b:4e:72:64:be:e2:
16:d3:23:32:66:99:2e:49:25:c7:65:a7:ff:50:96:9a:de:1d:
5a:94:cc:a7:bb:a1:77:33:10:14:15:25:f4:06:a3:91:66:f2:
a7:e3:b6:d9:29:79:4c:9a:00:e5:51:1d:d6:09:88:a3:3c:a3:
b5:71:d0:1b:2d:aa:4f:29:f2:f6:2c:d8:d4:e1:40:a6:f0:de:
57:52:33:5a:ad:94:39:6e:45:82:45:4e:78:75:72:90:50:5f:
9e:3b:50:a5:b2:49:6f:c3:af:dc:0d:6d:86:f9:a1:dc:47:f0:
a9:4c:2d:8e:b3:ba:ce:e1:be:fb:79:3e:9b:86:1e:f8:d9:fd:
da:09:13:74:a9:d2:da:5c:5c:74:9f:a4:23:e5:a6:74:7d:30:
2e:21:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net