Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39302e302f32342d3234203d3e20323132303730.roa
File: 34352e31342e39302e302f32342d3234203d3e20323132303730.roa (raw, json)
Hash identifier: NWuKCCS1CH/o9O0Ul71ki8/TM27eGyQsWbAfIF8vHPg=
Subject key identifier: 8C:0A:1D:4F:64:04:53:ED:66:E1:9E:05:9F:48:5F:4B:C0:49:83:25
Certificate issuer: /CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Certificate serial: 035207A38A227F2C4C0789E23677B7CBE86B14A9
Authority key identifier: 4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39302e302f32342d3234203d3e20323132303730.roa
Signing time: Mon 04 Jan 2021 13:52:22 +0000
ROA not before: Mon 04 Jan 2021 13:47:22 +0000
ROA not after: Mon 03 Jan 2022 13:52:22 +0000
asID: 212070
IP address blocks: 45.14.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:52:07:a3:8a:22:7f:2c:4c:07:89:e2:36:77:b7:cb:e8:6b:14:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Validity
Not Before: Jan 4 13:47:22 2021 GMT
Not After : Jan 3 13:52:22 2022 GMT
Subject: CN=3082010A0282010100E13C9A51D6C338FCF5E0E13D54086752273B77BE4344DF6C5DFC3A98DCD7D59B2EB1C2BDAFCD7AAA088D52406FDA9592AD5B5E3A0E2FFC24213587634F2185862660DEA943CA6F71C351540E33891349443659EA44E7597162461E00856B2DBE005DDF1A7E76FF942FF65ADD541AA69329A1758BB8756BD2F9299FF1B200B87826D24C67F68B98F9138560F6BD02F80EED66D8AEF876150B184043C0854D1E9540D1946EC2A0350A484D8BCF0FFBA08C034265DE0F528845191D4432CDA555F9C527B01A985BE5BF0F1A0721F2D82BE4BEF75CC1E5D084C6024807454D36EA9A022A50F14C026EE73EC73F45D5F5A5C7FD4CFBB68656655EFDE0DEF224A99BCD0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:9a:51:d6:c3:38:fc:f5:e0:e1:3d:54:08:
67:52:27:3b:77:be:43:44:df:6c:5d:fc:3a:98:dc:
d7:d5:9b:2e:b1:c2:bd:af:cd:7a:aa:08:8d:52:40:
6f:da:95:92:ad:5b:5e:3a:0e:2f:fc:24:21:35:87:
63:4f:21:85:86:26:60:de:a9:43:ca:6f:71:c3:51:
54:0e:33:89:13:49:44:36:59:ea:44:e7:59:71:62:
46:1e:00:85:6b:2d:be:00:5d:df:1a:7e:76:ff:94:
2f:f6:5a:dd:54:1a:a6:93:29:a1:75:8b:b8:75:6b:
d2:f9:29:9f:f1:b2:00:b8:78:26:d2:4c:67:f6:8b:
98:f9:13:85:60:f6:bd:02:f8:0e:ed:66:d8:ae:f8:
76:15:0b:18:40:43:c0:85:4d:1e:95:40:d1:94:6e:
c2:a0:35:0a:48:4d:8b:cf:0f:fb:a0:8c:03:42:65:
de:0f:52:88:45:19:1d:44:32:cd:a5:55:f9:c5:27:
b0:1a:98:5b:e5:bf:0f:1a:07:21:f2:d8:2b:e4:be:
f7:5c:c1:e5:d0:84:c6:02:48:07:45:4d:36:ea:9a:
02:2a:50:f1:4c:02:6e:e7:3e:c7:3f:45:d5:f5:a5:
c7:fd:4c:fb:b6:86:56:65:5e:fd:e0:de:f2:24:a9:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:1D:4F:64:04:53:ED:66:E1:9E:05:9F:48:5F:4B:C0:49:83:25
X509v3 Authority Key Identifier:
keyid:4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39302e302f32342d3234203d3e20323132303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a8:15:65:d5:5d:89:5b:fe:cd:a1:69:fc:d5:5c:d6:13:50:
81:ba:5c:fb:09:ff:d1:db:89:a2:e6:f8:17:ee:10:85:6d:5b:
fa:07:de:d4:86:1a:c3:e5:0f:b5:93:cf:60:65:13:96:a3:a1:
ce:b7:dc:24:0d:1a:8f:ea:40:d0:0d:ef:77:47:a9:f8:85:d8:
61:4d:71:bf:1f:d5:a4:3b:3b:63:a2:1c:f9:9a:13:ac:c1:05:
03:0d:c9:6b:a7:fe:e6:46:bb:35:a2:45:f6:04:5d:70:46:61:
9e:96:b3:d6:34:3f:e1:ba:cd:fc:96:a3:c9:b0:69:e1:90:24:
cc:43:f4:e1:07:fb:ac:a4:91:d8:b5:ee:0c:12:ad:04:e6:2c:
33:a1:e9:a7:5a:d5:36:e7:ea:3b:df:c2:9e:99:fc:ed:f4:49:
73:93:4b:6a:7a:4d:e0:47:7d:3c:3e:96:3b:ea:a7:bc:0d:91:
fd:a0:ec:57:9c:c6:70:d8:df:f1:62:33:ff:9a:98:05:06:c5:
2b:b7:cf:ca:66:12:5c:60:32:cd:d5:bd:12:4a:70:24:a1:25:
d7:e4:88:9a:34:83:2b:cf:8b:be:f1:97:cb:88:e5:0d:ca:a3:
69:d1:52:bf:0b:ef:ee:01:d9:63:76:44:86:05:6f:33:c0:9c:
af:4c:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net