Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34342e302f32342d3234203d3e20333238333737.roa
File: 34352e3135322e34342e302f32342d3234203d3e20333238333737.roa (raw, json)
Hash identifier: lCiQNH0swhButzdO+ZCjzEkOE2nOdfuvMWhw4Auc6cY=
Subject key identifier: 94:29:35:24:7C:4A:58:40:2D:78:51:49:49:AA:A0:EC:C4:5D:2D:76
Certificate issuer: /CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Certificate serial: 4034D053CCFF1EB94238FCD06603E656C2FBDA8C
Authority key identifier: 4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34342e302f32342d3234203d3e20333238333737.roa
Signing time: Tue 01 Dec 2020 23:27:52 +0000
ROA not before: Tue 01 Dec 2020 23:22:52 +0000
ROA not after: Tue 30 Nov 2021 23:27:52 +0000
asID: 328377
IP address blocks: 45.152.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:34:d0:53:cc:ff:1e:b9:42:38:fc:d0:66:03:e6:56:c2:fb:da:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Validity
Not Before: Dec 1 23:22:52 2020 GMT
Not After : Nov 30 23:27:52 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:3f:da:1e:37:c0:54:68:68:58:0d:1a:37:
03:3d:e4:cd:24:0d:d9:c7:a4:d2:a4:c5:ba:8a:35:
79:ad:08:95:5c:58:b5:14:fa:4e:33:d3:b0:dc:ca:
df:c8:df:40:e9:1e:9a:0a:ab:c6:1b:be:9f:ef:bb:
9e:f2:87:56:6d:74:0e:03:3e:f3:f1:f1:e6:25:58:
34:c8:4a:60:05:9c:45:5d:7f:21:0a:63:9f:1f:01:
37:cc:20:c3:d7:3a:4e:fb:9b:ab:26:d0:08:70:f9:
4c:fd:c6:4c:ae:cd:45:12:f3:34:15:f1:d9:f4:23:
99:c3:96:38:4b:09:43:5d:ec:eb:59:17:8a:58:7a:
c5:e0:8c:26:03:8b:9f:27:8e:9d:68:75:53:39:89:
e1:eb:45:61:c8:79:b0:43:6c:3b:b1:f2:a7:d2:2a:
e3:27:6f:8b:06:87:c4:4f:a0:ba:59:eb:f6:dd:9b:
4b:6f:b5:3f:ad:35:17:9c:ad:77:fb:b7:91:89:00:
06:6d:fd:d2:f5:0b:ac:ff:a9:d0:3b:3d:c4:5e:0a:
93:a5:39:fa:b0:46:da:97:b3:8e:4d:96:76:d3:7d:
e7:56:b5:f0:88:36:ca:17:36:63:e2:a4:7e:0d:43:
5e:e0:fb:89:06:7b:7c:6b:f1:2c:c5:34:10:46:e4:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:35:24:7C:4A:58:40:2D:78:51:49:49:AA:A0:EC:C4:5D:2D:76
X509v3 Authority Key Identifier:
keyid:4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34342e302f32342d3234203d3e20333238333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.44.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:72:e7:43:3f:30:0b:ef:33:ba:34:47:96:08:52:42:cb:a7:
ba:89:1e:db:f3:37:17:c1:0e:6c:61:f7:09:5a:da:a3:fb:d1:
86:c9:30:95:5b:f4:bf:24:34:ce:ad:97:ec:23:d1:50:86:97:
4a:77:01:b2:a5:e9:b5:83:88:f7:bd:69:3c:05:fd:9e:b1:63:
a2:aa:ff:eb:d9:f6:04:32:04:c5:f1:9e:3c:32:82:9e:e2:89:
99:1f:63:36:9b:5f:41:50:e7:86:02:73:22:fe:08:13:e3:18:
fd:cb:34:9c:75:23:2f:78:46:39:e6:2c:02:2f:31:ff:d4:82:
23:ac:a0:fb:6e:a0:27:db:64:c9:f4:48:d4:ae:ef:2b:4a:8e:
fa:a8:56:d0:3c:a0:80:1d:3f:a9:b7:f3:23:74:2d:f5:05:3e:
4f:63:d5:11:14:69:5a:eb:60:10:b5:40:f7:97:17:05:f2:2d:
a5:06:a6:be:88:3a:57:a8:80:24:3e:71:fa:2c:fa:45:18:10:
8c:9f:c3:2c:63:57:bd:ad:ad:ec:46:4c:54:77:21:30:0e:a4:
ca:e0:92:a1:dc:5b:98:b3:92:18:e9:4e:36:6a:3b:07:bf:41:
59:4c:29:d9:9a:4f:aa:0c:63:69:50:e7:8a:cd:45:44:0d:d6:
88:7f:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net