Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e2037383431.roa
File: 34352e38352e3235302e302f32342d3234203d3e2037383431.roa (raw, json)
Hash identifier: P3YGbk7LTHRrctTo61AtL8kArRQKMgiD4m4Q3yNHnnY=
Subject key identifier: F3:58:4D:80:DE:8E:ED:5C:07:8E:4E:50:58:4B:47:E7:7A:D7:39:9C
Certificate issuer: /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial: 41C1C68815831C30BFA69BBC215A58CFDC1A15D6
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e2037383431.roa
Signing time: Tue 28 Jun 2022 04:41:20 +0000
ROA not before: Tue 28 Jun 2022 04:36:20 +0000
ROA not after: Tue 27 Jun 2023 04:41:20 +0000
asID: 7841
IP address blocks: 45.85.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c1:c6:88:15:83:1c:30:bf:a6:9b:bc:21:5a:58:cf:dc:1a:15:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Validity
Not Before: Jun 28 04:36:20 2022 GMT
Not After : Jun 27 04:41:20 2023 GMT
Subject: CN=F3584D80DE8EED5C078E4E50584B47E77AD7399C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:e5:d7:91:e7:c0:0d:c7:e7:d1:e7:13:3b:
2a:ec:f9:b0:0a:3f:36:82:21:28:6d:99:28:a5:24:
a6:0a:ce:0b:23:43:cd:7e:9d:82:15:de:28:c1:12:
e8:a0:ee:04:ac:2c:b8:d5:4c:fb:2f:0d:0e:e4:f1:
98:57:ad:03:75:8c:a9:00:aa:07:9b:84:80:02:63:
d9:7d:3f:e5:ea:5e:d6:64:7a:32:29:41:24:de:a2:
55:3c:93:8b:0e:ef:5f:19:92:f2:b6:e2:44:88:9b:
5a:75:8b:c9:db:81:70:97:ea:ab:b9:26:ec:4f:a5:
ae:5e:47:13:0f:e0:f0:19:16:74:e5:60:9c:7e:a6:
11:71:62:1a:05:99:48:e9:e2:51:e4:b3:46:77:5e:
02:23:aa:5d:80:84:ae:fb:81:b4:30:fc:28:ee:39:
0b:8f:52:59:82:da:b2:45:40:49:be:53:40:41:98:
4e:a3:e7:44:38:15:9f:31:fd:f0:2c:cc:70:8e:9d:
d5:37:03:25:9b:6d:2a:1a:c7:80:52:f5:30:69:b0:
7a:bf:d7:4c:35:f4:cd:48:52:56:18:39:fe:37:06:
d2:bc:4f:fb:f0:34:bc:95:51:cf:79:91:ca:80:01:
56:e2:fd:e5:32:63:28:ce:c0:ae:55:c4:c9:e6:8d:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:4D:80:DE:8E:ED:5C:07:8E:4E:50:58:4B:47:E7:7A:D7:39:9C
X509v3 Authority Key Identifier:
keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e2037383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.250.0/24
Signature Algorithm: sha256WithRSAEncryption
68:69:85:fd:7d:1b:32:25:80:f9:06:ec:58:7b:0b:61:62:66:
8f:01:c5:e2:ab:e6:bd:08:1b:a1:52:50:da:1b:77:50:8a:dc:
ac:f1:3e:4c:09:f5:e0:24:d4:42:02:b8:95:01:a0:82:70:80:
bd:9c:62:39:4e:45:3c:35:e6:1c:7d:fe:ac:4e:5f:60:35:cc:
93:1e:d6:60:51:71:d2:d6:33:cf:98:28:e8:a6:c3:b5:03:c0:
df:46:2e:18:1f:e1:44:b3:99:2d:04:f5:8b:45:db:74:1e:d3:
bd:cb:0b:b3:98:1d:06:5d:03:18:83:5f:61:ed:e7:f9:9a:d9:
cc:fb:10:53:ae:9e:39:d8:a3:dc:0a:6d:fa:e7:6c:19:f5:a4:
87:14:d4:01:71:1f:2d:b2:e1:a5:ad:6e:7d:fa:6f:80:13:79:
e0:46:74:41:9d:de:35:5d:dd:8e:5e:a6:7e:93:94:7d:89:80:
dd:47:0c:6e:b6:33:8e:d4:f1:d8:03:99:59:34:af:f1:15:8b:
78:de:fa:df:36:4f:7d:26:19:d7:50:70:69:a8:3b:a2:82:e8:
a2:41:a8:36:cf:6a:07:ed:ae:f7:82:f4:a9:0c:4f:fa:fb:e3:
6a:fd:f6:1f:e3:6f:f5:71:b1:01:b3:f5:7c:5c:29:e3:da:72:
8d:96:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net