Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34352e302f32342d3234203d3e203138343530.roa
File: 34352e3135322e34352e302f32342d3234203d3e203138343530.roa (raw, json)
Hash identifier: eClT8ghC1sFKfvZaS4CXD/dlXMi7nv3uxT5N0u+P00I=
Subject key identifier: 52:35:C1:10:10:8C:E2:9F:8F:6D:74:73:9C:CB:CD:AC:12:3E:F0:8C
Certificate issuer: /CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Certificate serial: 0A57E40E3859D4100144B7FEEDB1B88C6245171E
Authority key identifier: 4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34352e302f32342d3234203d3e203138343530.roa
Signing time: Tue 05 Jan 2021 14:09:09 +0000
ROA not before: Tue 05 Jan 2021 14:04:09 +0000
ROA not after: Tue 04 Jan 2022 14:09:09 +0000
asID: 18450
IP address blocks: 45.152.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:57:e4:0e:38:59:d4:10:01:44:b7:fe:ed:b1:b8:8c:62:45:17:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Validity
Not Before: Jan 5 14:04:09 2021 GMT
Not After : Jan 4 14:09:09 2022 GMT
Subject: CN=3082010A0282010100CB4B256729ADC528A0792D1FD24D2BD5199527984EC6592057270E45996048992B28A153589103E1C048CCD4C6154615F0E3B5FF7E8658ACD6C25FD05C52BAF230F88AA9B0855592948B839D91930AC22D07A539615B6689E5149C2EF16A01C1BF5DB4F268316534AA29610EE3C7E82C488DB340F692DA0C3ADB4155485D3FDE626CF1A612BC3D92327895EBCB9AB5B4AB7623E84743384FEE2202F93612BEF797E5957A673FFA43EFE348221C415C1B83706427B4FF2A93590C7D9A64B1B7130D04D746320E0868B00BF8D266C3DEE893007D5C1CC5344CAC193FB05666394C595148CEAA47E4001DBA724C6B80F3105993C907B81568829944D68831BFD0630203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:25:67:29:ad:c5:28:a0:79:2d:1f:d2:4d:
2b:d5:19:95:27:98:4e:c6:59:20:57:27:0e:45:99:
60:48:99:2b:28:a1:53:58:91:03:e1:c0:48:cc:d4:
c6:15:46:15:f0:e3:b5:ff:7e:86:58:ac:d6:c2:5f:
d0:5c:52:ba:f2:30:f8:8a:a9:b0:85:55:92:94:8b:
83:9d:91:93:0a:c2:2d:07:a5:39:61:5b:66:89:e5:
14:9c:2e:f1:6a:01:c1:bf:5d:b4:f2:68:31:65:34:
aa:29:61:0e:e3:c7:e8:2c:48:8d:b3:40:f6:92:da:
0c:3a:db:41:55:48:5d:3f:de:62:6c:f1:a6:12:bc:
3d:92:32:78:95:eb:cb:9a:b5:b4:ab:76:23:e8:47:
43:38:4f:ee:22:02:f9:36:12:be:f7:97:e5:95:7a:
67:3f:fa:43:ef:e3:48:22:1c:41:5c:1b:83:70:64:
27:b4:ff:2a:93:59:0c:7d:9a:64:b1:b7:13:0d:04:
d7:46:32:0e:08:68:b0:0b:f8:d2:66:c3:de:e8:93:
00:7d:5c:1c:c5:34:4c:ac:19:3f:b0:56:66:39:4c:
59:51:48:ce:aa:47:e4:00:1d:ba:72:4c:6b:80:f3:
10:59:93:c9:07:b8:15:68:82:99:44:d6:88:31:bf:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:35:C1:10:10:8C:E2:9F:8F:6D:74:73:9C:CB:CD:AC:12:3E:F0:8C
X509v3 Authority Key Identifier:
keyid:4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34352e302f32342d3234203d3e203138343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.45.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9c:b3:88:6d:17:c4:a9:59:b8:99:69:56:1f:67:93:66:28:
e4:26:d2:bc:52:64:b8:d0:fb:7d:43:4a:4c:60:f4:b6:5f:93:
e0:6f:da:8e:54:e1:54:49:34:44:ca:f0:41:4d:a8:f9:f4:57:
b5:53:ac:af:a3:17:f0:3b:1f:76:9b:c1:f0:9b:ff:79:13:c1:
bd:94:0c:a5:28:0e:11:5f:90:a4:66:ad:41:41:73:68:e2:b9:
83:d4:d1:dd:8e:af:f0:e6:4e:1b:2d:32:07:0a:eb:d0:7b:24:
81:1f:b1:fa:8d:fb:bd:ac:5e:b1:6f:af:b1:74:67:da:e8:e9:
95:11:c1:1b:98:dc:ad:c3:6b:7e:8e:e7:e1:d2:1d:b9:3d:90:
dd:8c:70:83:b2:1b:da:16:22:9e:9d:d1:a0:00:e3:dc:12:1c:
97:ee:3e:a2:e7:63:d7:b0:38:5f:91:6c:aa:45:8c:81:bf:2d:
47:53:5f:95:c9:c5:4b:9b:db:17:d1:74:3f:9c:79:a4:78:77:
26:0b:89:b6:0d:f9:12:3f:79:1b:3f:1a:b8:06:36:c8:c7:48:
f1:4e:77:4f:b0:8a:cc:03:8b:a5:2d:dd:62:af:24:c8:ec:5b:
56:14:33:78:cd:d1:de:3e:67:a8:74:a9:85:08:ab:d3:a5:38:
bc:2f:a4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net