Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235312e302f32342d3234203d3e2030.roa
File: 34352e38352e3235312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: F5sYuhXn0XTUGQVrq1jojxHNs9KnnIPFWJnzmCcuAAA=
Subject key identifier: 49:37:AC:37:BA:9B:DA:44:E7:78:88:BD:B5:B3:9A:72:4E:DE:F9:E3
Certificate issuer: /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial: 0E547CAC6ADCFA2B8924F2E0F8F281603EC2C47B
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235312e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:23:24 +0000
ROA not before: Fri 03 Mar 2023 16:18:24 +0000
ROA not after: Fri 01 Mar 2024 16:23:24 +0000
asID: 0
IP address blocks: 45.85.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:54:7c:ac:6a:dc:fa:2b:89:24:f2:e0:f8:f2:81:60:3e:c2:c4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Validity
Not Before: Mar 3 16:18:24 2023 GMT
Not After : Mar 1 16:23:24 2024 GMT
Subject: CN=4937AC37BA9BDA44E77888BDB5B39A724EDEF9E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:c2:bf:5a:e0:31:67:35:f5:07:69:27:a2:
0f:61:83:e7:12:2f:37:9a:3a:47:87:cc:e9:d0:c0:
07:7c:c1:e4:80:12:c6:77:90:dd:75:f6:86:26:fb:
99:51:57:3c:9c:02:9e:60:ce:ed:11:90:63:86:f0:
a6:5d:7a:6c:b0:1d:c5:05:e9:ba:16:7a:a4:1d:94:
10:ff:0a:79:14:a6:ca:ee:c4:2c:e4:cc:e2:29:cb:
e0:a3:af:67:ba:a8:e5:5c:ee:54:32:47:47:4e:8a:
18:58:2b:39:33:5c:a8:ba:17:51:3e:d2:14:22:ea:
27:7f:ac:18:62:f1:18:ca:f2:78:ee:ae:3c:9c:16:
94:22:ea:12:4d:94:02:89:c5:33:09:67:6e:f5:6b:
ce:10:3d:31:a6:af:61:96:a9:f4:7b:a5:73:78:d0:
ff:80:ee:94:69:75:b0:d0:56:0a:c9:c4:bf:27:29:
99:50:5b:22:75:87:6f:86:ea:15:3d:e7:59:a4:15:
2e:07:de:74:3d:28:c3:e5:5e:f4:92:15:f7:4a:65:
8b:86:2d:9b:5f:49:52:c8:59:32:25:c3:9a:ef:d4:
64:ea:55:47:c0:d7:b4:c1:dc:71:e1:2a:03:a1:ba:
a8:cf:24:50:91:84:c5:07:2d:31:4d:fb:20:4b:a6:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:37:AC:37:BA:9B:DA:44:E7:78:88:BD:B5:B3:9A:72:4E:DE:F9:E3
X509v3 Authority Key Identifier:
keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e8:20:ed:7c:4a:af:46:5e:dc:83:18:c5:82:b3:91:46:02:
92:35:76:8e:c0:ef:ca:1f:21:04:85:64:ad:15:dd:15:cc:e1:
f8:ba:37:2f:c1:f2:26:73:59:ff:2d:cd:56:69:7c:26:f4:ec:
4c:86:b2:a1:ef:88:34:e4:f7:52:0d:28:df:07:0b:09:28:df:
22:a7:c9:d0:89:b1:2b:63:9d:cb:e9:59:f0:be:71:e5:dd:d5:
76:29:10:a1:d4:fd:62:7f:86:c0:5c:fa:8e:ae:f1:ce:cf:6f:
85:49:72:1c:44:41:93:71:26:f4:4d:c6:ff:ee:fd:ae:d1:28:
89:48:de:30:e5:42:96:ad:17:38:03:77:7a:34:6c:56:56:26:
be:18:11:7d:96:80:eb:bf:99:58:64:2d:77:b2:11:51:ae:16:
c0:f7:33:d0:90:c4:ec:72:f4:dd:ba:f1:af:44:52:26:28:80:
64:6b:15:22:75:bd:1e:20:f3:2a:48:5f:36:29:bb:d2:cf:72:
62:16:34:cc:3c:e8:06:88:ba:df:72:c7:ec:6f:e9:74:59:fb:
9e:94:f9:40:58:5b:3f:e5:0b:a1:87:1f:0b:1c:4b:88:b5:5a:
80:82:6d:dc:fe:67:b5:96:32:b1:66:e8:88:8a:9f:f8:99:6b:
55:7c:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net