Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e31342e3139352e302f32342d3234203d3e20313431303339.roa
File: 34352e31342e3139352e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: hInlLNr3IBMFu9cOzRTILNozLSr7bbjrL+z6nh3AqHg=
Subject key identifier: 1F:4B:9D:81:DD:1A:17:40:43:B4:CF:F6:76:D6:CB:F1:FE:0F:B3:19
Certificate issuer: /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial: 059FA3B15AEA6F2427BEA6F6CBE8A64F66F98677
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e31342e3139352e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 24 Feb 2023 07:43:50 +0000
ROA not before: Fri 24 Feb 2023 07:38:50 +0000
ROA not after: Fri 23 Feb 2024 07:43:50 +0000
asID: 141039
IP address blocks: 45.14.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9f:a3:b1:5a:ea:6f:24:27:be:a6:f6:cb:e8:a6:4f:66:f9:86:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Validity
Not Before: Feb 24 07:38:50 2023 GMT
Not After : Feb 23 07:43:50 2024 GMT
Subject: CN=1F4B9D81DD1A174043B4CFF676D6CBF1FE0FB319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:85:65:be:c1:19:c1:fb:45:51:5f:5d:14:
a1:ca:d3:23:02:3b:df:1e:04:9c:0c:84:1d:52:09:
81:6f:4a:88:fd:ae:6a:c3:99:41:8c:11:70:da:94:
dc:5d:c7:a5:ea:4b:0d:e6:d7:ae:28:5d:cc:74:f1:
54:04:a4:05:44:85:5e:c7:b2:f3:a2:7b:a3:11:aa:
f4:3d:d5:7c:f5:34:f6:de:90:68:57:a0:de:c9:84:
e2:75:f3:bb:c3:73:45:87:40:50:af:b9:28:15:84:
3a:41:da:95:cd:08:69:06:86:64:6e:c8:c1:7b:27:
03:5f:09:08:17:a9:cb:48:d0:5f:4e:c3:51:4b:75:
69:9a:72:f1:ae:f5:0a:51:80:af:34:03:8f:13:68:
84:95:75:03:7f:f6:9b:c5:09:91:9e:31:1b:e2:9a:
57:da:29:eb:a0:91:bb:29:b0:e2:7d:b8:03:b5:f8:
0f:98:2b:7b:29:dd:ce:3f:55:eb:bb:61:d8:7a:27:
a3:ec:ca:43:5c:24:20:06:b8:a0:bb:b7:cc:84:c0:
05:70:bc:87:72:28:1b:b5:b9:de:8b:14:53:11:0d:
43:3c:8c:a7:b6:93:26:1c:b9:a7:81:f4:bd:69:d8:
e1:0f:83:f9:e5:13:24:55:3e:79:ae:32:aa:56:d8:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4B:9D:81:DD:1A:17:40:43:B4:CF:F6:76:D6:CB:F1:FE:0F:B3:19
X509v3 Authority Key Identifier:
keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e31342e3139352e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ce:87:7a:81:15:99:67:ab:55:2e:83:ad:7d:21:66:23:15:
14:a0:4e:62:4c:dd:6d:ae:8b:3b:de:0a:d1:e9:3c:ee:93:21:
91:5c:b6:f9:db:8c:2e:3c:b8:48:c8:17:97:f5:94:2c:1f:e7:
11:d2:78:33:4f:5b:bd:f4:96:bb:aa:d4:b8:09:bf:f7:95:d5:
d1:af:2c:be:bf:f7:17:25:d0:82:00:25:41:5a:cb:99:11:fb:
fb:5f:0d:b3:8a:1b:5a:41:66:91:ce:88:a2:95:80:be:f0:b5:
db:28:34:31:96:29:e9:6a:3a:ee:d6:e5:42:62:8b:7e:a6:8b:
9c:58:58:5b:88:33:05:37:74:35:7f:31:58:3d:16:28:0d:48:
e3:47:bf:ca:de:db:b5:e9:cf:a1:94:68:48:06:6d:b4:82:c3:
76:34:98:cb:87:01:28:44:6d:2c:0c:0f:e0:12:66:47:f0:27:
24:fc:50:11:2c:b1:d2:b7:e6:de:42:dc:6e:85:5c:91:5d:b4:
95:51:9b:d7:b6:3b:4c:f5:2c:c8:93:02:fe:93:11:11:d6:97:
c2:6e:1d:b6:74:92:b3:98:a4:3e:5b:ae:10:2b:a3:40:2b:29:
fd:b9:08:c8:ed:ea:db:71:2a:6f:f5:f7:32:18:7f:cd:93:5e:
53:01:ae:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net