Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34362e302f32342d3234203d3e203630353438.roa
File: 34352e3135322e34362e302f32342d3234203d3e203630353438.roa (raw, json)
Hash identifier: KK+zjlEwsi7+wTzXZN3MdXKv5L4MfT/zq+TvfGqNchY=
Subject key identifier: 55:85:33:90:9B:EA:8B:A9:C2:E4:34:01:16:01:A3:52:97:B7:0C:A3
Certificate issuer: /CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Certificate serial: 20C89BD148AB5961580A6BF6D2F2015DB07EFBCC
Authority key identifier: 4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34362e302f32342d3234203d3e203630353438.roa
Signing time: Tue 01 Dec 2020 23:27:53 +0000
ROA not before: Tue 01 Dec 2020 23:22:53 +0000
ROA not after: Tue 30 Nov 2021 23:27:53 +0000
asID: 60548
IP address blocks: 45.152.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c8:9b:d1:48:ab:59:61:58:0a:6b:f6:d2:f2:01:5d:b0:7e:fb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Validity
Not Before: Dec 1 23:22:53 2020 GMT
Not After : Nov 30 23:27:53 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:52:22:b1:70:04:34:8b:6c:33:bd:12:fa:
57:28:83:31:aa:ba:62:70:02:d5:27:4b:13:83:8c:
f5:1e:c2:8b:cf:3f:12:b2:df:63:da:36:e0:35:44:
79:df:a8:97:55:24:83:e0:50:dd:87:fd:57:8d:99:
93:71:f6:94:a8:ad:38:e0:d3:da:84:7c:65:b2:f3:
c8:85:3f:d4:1c:d9:a6:49:e9:a9:ad:e8:07:1f:4e:
63:e6:2c:5e:52:8c:52:5b:33:90:b1:08:47:c7:e3:
ae:76:66:1a:5f:b7:20:5c:be:6d:ff:14:6b:ac:aa:
d7:ab:06:9e:39:44:60:42:db:a9:5a:bb:8b:33:14:
20:c8:d4:42:11:19:28:a7:ea:7a:21:cd:37:02:af:
a2:8b:c5:48:ff:25:c9:eb:bc:eb:2d:e4:f3:b2:3e:
06:33:65:73:38:d2:3b:b0:d3:2e:3e:f3:65:01:d4:
1c:92:53:51:10:c6:ad:4e:c6:c0:33:0b:9b:38:c3:
ea:94:ae:dd:20:8c:40:02:28:b0:18:ad:e6:83:0d:
83:2d:e4:3b:ed:7f:cd:09:56:fd:c4:18:8e:68:00:
6d:4f:b5:b3:d1:55:00:bf:f7:6d:54:ce:e2:ea:c1:
f3:68:53:3f:3e:df:a7:c9:84:6c:79:53:99:a4:fc:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:33:90:9B:EA:8B:A9:C2:E4:34:01:16:01:A3:52:97:B7:0C:A3
X509v3 Authority Key Identifier:
keyid:4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34362e302f32342d3234203d3e203630353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.46.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8e:ff:01:a6:6a:98:98:aa:55:20:b5:75:a1:39:4b:a0:e7:
67:da:cb:78:ac:ea:f5:40:7c:5f:6e:7d:8e:e5:81:70:bf:d3:
1f:52:13:42:a7:54:75:57:c1:ba:c3:de:33:4f:c7:97:ab:cd:
7d:1e:71:bf:0b:76:71:65:69:a7:e3:b1:dd:19:88:bf:dd:23:
ac:8f:f8:c7:4e:59:98:50:6d:c3:df:fa:04:11:b9:49:e3:14:
77:ed:23:f4:be:22:61:ac:c6:52:65:0d:21:86:79:b7:ce:0d:
32:55:d6:33:e4:7b:4b:35:e6:e1:b5:38:db:d5:a0:07:ab:3c:
fe:77:db:b5:f5:4f:22:4c:2e:24:0d:76:c0:c1:37:48:05:a6:
63:c7:83:07:7e:9c:22:03:8c:53:3c:f8:e5:bc:cc:46:4e:64:
f8:d1:02:f7:7d:e5:48:1d:33:10:f4:bb:00:6c:6c:18:be:60:
ec:d4:e9:f3:d9:f8:86:32:2e:aa:40:c3:6c:a2:bb:20:fb:30:
d8:2c:50:87:be:cc:60:d3:42:f9:7d:67:7c:10:07:2d:93:2d:
a1:25:24:79:b0:a5:a2:c2:70:8a:5c:da:0f:a0:c6:76:cc:98:
63:25:19:9a:e5:f1:a5:af:83:20:e0:21:d2:b3:13:2d:4a:3f:
0b:08:1e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net