Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203134363138.roa
File: 34352e38352e3235302e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: E6WNr+nHLS3NSAlNhEcOtpYYK05MICUetEgY18//68s=
Subject key identifier: 19:91:9C:D9:61:4F:EC:2E:23:0A:B6:8B:AE:37:8E:A2:D0:49:3C:94
Certificate issuer: /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial: 2317C214B6CAE553782A036552BBF7274A277CC8
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203134363138.roa
Signing time: Tue 28 Jun 2022 04:41:20 +0000
ROA not before: Tue 28 Jun 2022 04:36:20 +0000
ROA not after: Tue 27 Jun 2023 04:41:20 +0000
asID: 14618
IP address blocks: 45.85.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:17:c2:14:b6:ca:e5:53:78:2a:03:65:52:bb:f7:27:4a:27:7c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Validity
Not Before: Jun 28 04:36:20 2022 GMT
Not After : Jun 27 04:41:20 2023 GMT
Subject: CN=19919CD9614FEC2E230AB68BAE378EA2D0493C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:6f:98:af:54:40:53:87:66:71:9a:00:70:
94:ce:a5:93:ea:bc:73:75:67:0b:e0:e6:3d:76:d6:
45:5d:eb:9d:fc:7d:a0:5f:3b:a8:ad:2f:a5:35:e2:
11:da:27:30:17:17:a7:5e:73:00:ad:be:7d:66:b3:
d7:55:3d:43:34:59:4a:42:e2:91:2a:f8:73:e6:d6:
fe:32:b5:4e:7a:93:58:28:55:e8:b4:4d:b6:50:e1:
53:8c:31:37:45:70:50:70:9f:be:84:40:78:e9:24:
28:92:3b:20:c1:70:06:13:2d:4e:63:12:94:6a:ff:
c1:4d:e6:4b:91:7a:0a:b5:ff:7b:ad:6a:0a:d6:98:
7d:d5:aa:60:d6:2b:53:a4:a1:00:c6:62:39:07:fb:
fd:e2:6e:00:e1:cf:f7:5b:eb:55:64:aa:c2:e9:2d:
1b:4d:e4:d4:fa:6c:d0:03:fd:95:0f:a5:f3:0d:fa:
82:95:f9:fd:c7:ba:07:1f:13:3f:e3:96:ae:a3:d9:
65:16:77:03:fa:40:a3:8b:e2:de:67:a9:03:64:b1:
47:42:cb:00:48:02:ae:e8:27:91:99:e0:6f:0a:9b:
b9:7b:d5:17:43:97:c9:d5:32:e3:17:2b:b4:0a:f3:
a4:54:4f:bf:73:d7:7c:df:32:14:3c:46:6f:b6:7b:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:9C:D9:61:4F:EC:2E:23:0A:B6:8B:AE:37:8E:A2:D0:49:3C:94
X509v3 Authority Key Identifier:
keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.250.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d0:f8:ad:5d:68:f7:db:37:d2:9c:1b:7d:6b:4a:b5:bd:7a:
62:34:10:06:9d:78:f3:7a:c9:2d:b1:fc:b9:fe:c7:3b:d8:13:
17:c7:81:2d:cc:1f:bb:b5:5f:4d:1c:2a:a3:60:fd:14:87:64:
07:46:f8:57:03:13:f6:f1:f5:a3:e8:5d:71:3b:de:b7:03:2b:
34:d3:58:7b:95:16:bb:da:38:4a:b3:bd:52:c3:87:5b:54:1e:
59:2a:7e:b8:7e:3c:e5:dd:55:8a:6f:23:4a:1c:64:cf:2f:3c:
8e:29:c5:f8:3a:e3:bd:6e:bc:52:fe:ee:dc:be:a1:58:ee:6d:
21:26:4f:5e:28:94:41:b5:54:05:8f:8f:7b:b1:a0:c3:1d:24:
2f:07:61:e1:91:69:eb:a8:0c:99:aa:e3:5c:45:47:f1:20:4c:
8b:6e:79:9f:ce:80:ba:c8:b1:64:17:99:00:e5:e9:22:4e:f7:
56:bd:f0:6c:1e:22:b4:50:eb:20:d5:60:d0:f7:9d:b7:ac:7b:
11:b0:4c:0d:13:a1:85:63:5d:be:11:5b:0f:8a:cc:d0:b1:cb:
a7:a0:74:9d:15:cf:b4:da:cd:ca:28:1f:8a:9a:97:91:4e:51:
75:dc:e2:96:1d:50:1c:88:5a:18:8b:f2:4b:15:f6:fc:01:2e:
0c:e0:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net