Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3234392e302f32342d3234203d3e20323131353738.roa
File: 34352e38352e3234392e302f32342d3234203d3e20323131353738.roa (raw, json)
Hash identifier: g7XvuBVhuPOcZVTT/8OmeU2dSaRrNMV7t3BX8wviusM=
Subject key identifier: 1F:AE:5A:BF:B1:72:15:9F:C6:B6:3B:A4:87:F8:0A:FC:DB:4D:40:83
Certificate issuer: /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial: 60211618A3D51EE8BC731FDB380222E7C3DA1597
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3234392e302f32342d3234203d3e20323131353738.roa
Signing time: Tue 28 Jun 2022 04:41:20 +0000
ROA not before: Tue 28 Jun 2022 04:36:20 +0000
ROA not after: Tue 27 Jun 2023 04:41:20 +0000
asID: 211578
IP address blocks: 45.85.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:21:16:18:a3:d5:1e:e8:bc:73:1f:db:38:02:22:e7:c3:da:15:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Validity
Not Before: Jun 28 04:36:20 2022 GMT
Not After : Jun 27 04:41:20 2023 GMT
Subject: CN=1FAE5ABFB172159FC6B63BA487F80AFCDB4D4083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:fd:c6:90:5f:c1:65:93:6b:90:8f:60:45:62:
a5:93:46:26:e7:d1:02:6b:bd:b9:f3:00:c5:7f:95:
e5:54:3e:10:c3:e3:2a:e5:a0:95:f9:54:da:1a:bc:
c8:b0:62:9f:65:52:77:8c:d8:a5:ce:b4:38:40:a7:
a9:49:09:d0:29:32:25:68:af:d6:94:c0:04:ca:81:
a4:b1:a1:f3:fc:e6:19:34:a2:e1:9c:16:95:26:b9:
75:54:3b:3b:39:30:1e:13:2c:22:0d:e3:69:ed:50:
28:81:fb:57:05:6f:45:1b:6d:4d:50:8d:50:20:61:
20:e6:de:c6:87:cf:4a:7e:7f:bf:0c:ff:f4:2b:cf:
b7:66:cb:d3:94:92:b0:2d:05:87:a1:37:5e:1b:8b:
00:56:93:5d:aa:78:f4:59:8d:39:2a:e2:bf:ce:21:
d0:82:92:ae:93:40:0d:2a:d2:96:b5:aa:0f:8c:4d:
ab:a4:48:71:19:49:c0:8e:cc:8b:1d:d3:6f:5d:74:
e5:b5:82:5a:49:4e:d4:1c:40:2d:5d:f4:d3:85:9d:
ea:cc:6a:04:a0:b5:00:f6:32:71:5d:df:fe:38:8f:
91:7b:53:8f:f6:2c:cb:31:86:26:80:52:65:8b:25:
f2:ec:ba:4c:ca:d5:b4:5e:00:93:ce:b0:f3:98:15:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AE:5A:BF:B1:72:15:9F:C6:B6:3B:A4:87:F8:0A:FC:DB:4D:40:83
X509v3 Authority Key Identifier:
keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3234392e302f32342d3234203d3e20323131353738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.249.0/24
Signature Algorithm: sha256WithRSAEncryption
44:82:b3:f4:f3:23:fd:37:12:fe:81:54:d5:c8:0e:22:99:46:
c2:74:76:2b:33:7e:3e:0f:48:47:2a:41:6a:57:fc:6c:e6:de:
f1:79:4f:95:4b:9f:24:e1:d5:d1:15:d1:24:38:f4:6b:2a:64:
99:e2:47:e0:af:a8:e9:0a:28:01:2a:4f:40:18:10:13:ac:1b:
ba:2b:79:4c:00:3a:bd:5c:58:74:a0:d7:86:ce:53:28:11:4f:
f4:e6:8f:19:ca:c4:6d:a7:8d:78:b2:3c:fa:69:06:72:81:c0:
39:40:df:0a:b7:3d:7d:b4:60:73:9a:70:52:a3:d5:f1:a5:9c:
da:dc:df:2c:5c:e4:d8:02:96:d1:95:c8:38:7e:57:06:87:5d:
06:74:24:32:d4:bd:29:3e:8d:de:3a:b1:ad:d1:fa:e9:ca:5f:
ba:08:34:fa:74:c4:02:74:eb:da:70:d3:c5:37:8d:1b:68:cf:
bf:a8:27:0a:54:36:f9:e1:6a:97:99:3e:53:d2:00:d4:7c:9c:
be:8d:e4:28:7d:7e:ee:67:a4:73:ad:c8:59:70:cb:5c:28:81:
be:f8:d8:88:ad:d7:e6:21:37:ae:80:9c:7e:7c:b6:6d:b4:b9:
47:ba:fe:94:0e:92:af:11:32:da:c9:3a:51:3e:74:25:b8:eb:
f1:57:b2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net