Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39312e302f32342d3234203d3e20333238333737.roa
File: 34352e31342e39312e302f32342d3234203d3e20333238333737.roa (raw, json)
Hash identifier: lSCbSyj7TGstiKULtu+ksNY32B4FIC8CTKrnXvepahc=
Subject key identifier: 43:60:77:4F:48:A6:BB:0C:49:CB:C5:69:34:97:FC:51:33:4D:81:03
Certificate issuer: /CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Certificate serial: 79B5BE27D34F802572490D0C57BACCB23D5B2775
Authority key identifier: 4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39312e302f32342d3234203d3e20333238333737.roa
Signing time: Tue 01 Dec 2020 23:27:20 +0000
ROA not before: Tue 01 Dec 2020 23:22:20 +0000
ROA not after: Tue 30 Nov 2021 23:27:20 +0000
asID: 328377
IP address blocks: 45.14.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b5:be:27:d3:4f:80:25:72:49:0d:0c:57:ba:cc:b2:3d:5b:27:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Validity
Not Before: Dec 1 23:22:20 2020 GMT
Not After : Nov 30 23:27:20 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:f7:1b:f4:06:c0:c5:50:ac:c5:2b:44:3a:
8e:03:6f:5f:05:32:de:fc:23:9f:66:ef:5c:36:7e:
77:23:69:14:41:f2:4b:f3:0b:21:bd:7b:44:a5:54:
17:a2:29:29:f2:4d:63:ab:ec:54:43:98:97:6d:16:
a7:ae:1c:82:36:a7:d7:98:34:12:e1:b5:d1:89:cc:
23:ec:da:e8:32:04:7e:cf:40:84:96:39:27:6b:42:
fb:58:95:74:fd:a2:ab:90:2d:da:bf:06:4b:01:87:
64:ee:18:53:b9:2f:89:bd:5f:20:8a:95:87:ba:87:
f6:3a:54:1e:f5:b6:b9:86:05:91:f5:55:27:bc:f6:
92:a0:87:77:1f:41:45:7d:4e:81:c3:a3:4c:13:90:
d4:3a:af:6c:83:3a:3b:34:e1:10:34:6d:1a:c3:23:
ad:2a:da:b0:65:7b:8d:a6:e7:89:9a:52:14:ad:05:
57:41:b0:89:d0:12:3e:00:f1:e9:2b:26:34:6c:2e:
57:d5:cc:bc:6a:d9:11:1b:a7:64:27:a5:20:5a:55:
77:82:fa:8c:be:66:62:18:97:84:fb:e3:51:e5:59:
66:50:7a:9a:51:30:2d:d1:1f:10:6a:c1:1c:ee:33:
88:cd:57:43:24:0a:d9:c9:96:93:7a:98:82:8c:01:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:60:77:4F:48:A6:BB:0C:49:CB:C5:69:34:97:FC:51:33:4D:81:03
X509v3 Authority Key Identifier:
keyid:4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39312e302f32342d3234203d3e20333238333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.91.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8b:bd:c0:08:3d:56:4c:c8:2f:ff:5b:5e:71:a2:ce:cb:c3:
b8:f1:23:b8:2d:46:5b:e3:02:40:93:29:6e:96:a5:ce:ca:a5:
a6:c1:ff:d3:0b:bb:cf:cb:07:f6:35:d2:05:70:1c:c7:3d:c9:
ff:c6:9c:74:90:89:88:1a:a6:bb:33:d6:4d:c0:1d:6a:27:24:
66:53:2d:52:f0:9a:ad:be:b1:75:3d:2d:97:4e:6a:ad:fb:75:
97:da:2d:4b:a8:08:ea:44:e7:6c:3f:a2:1c:2a:c6:34:b1:96:
ce:25:c2:21:79:8b:71:15:b5:02:c0:a7:cd:01:46:ee:ce:4b:
b1:a1:9d:25:2c:01:e8:56:4d:61:ab:3f:62:05:b9:9e:d0:50:
17:85:d0:ea:1b:fd:af:13:db:1c:75:2d:f2:6e:b1:1a:d5:96:
3e:10:de:67:f8:a0:c9:a4:ac:79:7f:08:bd:cb:a2:a5:39:9c:
88:75:65:3c:65:f0:91:02:26:0f:bd:cb:56:31:b0:64:b7:84:
27:22:d2:3a:77:14:02:6f:41:c3:a3:70:c3:4a:31:ad:4c:fc:
42:7c:9e:a7:c0:46:b3:6a:c5:2b:cf:9d:7b:9c:43:bf:fb:31:
3e:bb:ef:c2:72:2f:5b:1d:a7:12:9f:53:b9:73:50:5d:b5:9b:
07:5e:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net