Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34372e302f32342d3234203d3e20333238333737.roa
File: 34352e3135322e34372e302f32342d3234203d3e20333238333737.roa (raw, json)
Hash identifier: 9idGpzo3o6Z129zkuNYOWO6mJUsA656PYrJKQlH3FvI=
Subject key identifier: F7:A7:FF:12:E1:0E:5D:29:AA:06:93:7F:D0:06:5E:94:64:AA:C5:AF
Certificate issuer: /CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Certificate serial: 22724777B8CBB057E2FB1FF11DAF6DD877ABA908
Authority key identifier: 4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34372e302f32342d3234203d3e20333238333737.roa
Signing time: Tue 01 Dec 2020 23:27:53 +0000
ROA not before: Tue 01 Dec 2020 23:22:53 +0000
ROA not after: Tue 30 Nov 2021 23:27:53 +0000
asID: 328377
IP address blocks: 45.152.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:72:47:77:b8:cb:b0:57:e2:fb:1f:f1:1d:af:6d:d8:77:ab:a9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Validity
Not Before: Dec 1 23:22:53 2020 GMT
Not After : Nov 30 23:27:53 2021 GMT
Subject: CN=3082010A0282010100B6ACA4EF06C3A9C900ADFA1519C683F3B96ADC764F00CBCB7B638EAB92E36D54697EFCDAA7A72D8A6E74049EB1DC147CB26ABF038DFBAEFCC72F9D15F76AEA8C0DEA49E305745C018577BEFDEBA919D6313AD184DD100385E75E62CDE7DFDEB408E346D981DEBBDA78A3CC7F530838E2EC58C0DD824DE0AA8BF4163FC31A5D76C3488C5D0CD871274B8E6382CDE01959A50A02174CB293A4B04BB242619D77EF527C75A46FC527515D15A5C52376C3200B7561011C4F8685EA8BC897A5AF4B86B52DB079CB6304F69E9710DB5BAC8DAF070F0ACC68F13EE100CF83E5416D7C3BB19052C34E651E0368DDFC080B6A43BECB28A542F505B776635F8E7ABC345D830203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:a4:ef:06:c3:a9:c9:00:ad:fa:15:19:c6:
83:f3:b9:6a:dc:76:4f:00:cb:cb:7b:63:8e:ab:92:
e3:6d:54:69:7e:fc:da:a7:a7:2d:8a:6e:74:04:9e:
b1:dc:14:7c:b2:6a:bf:03:8d:fb:ae:fc:c7:2f:9d:
15:f7:6a:ea:8c:0d:ea:49:e3:05:74:5c:01:85:77:
be:fd:eb:a9:19:d6:31:3a:d1:84:dd:10:03:85:e7:
5e:62:cd:e7:df:de:b4:08:e3:46:d9:81:de:bb:da:
78:a3:cc:7f:53:08:38:e2:ec:58:c0:dd:82:4d:e0:
aa:8b:f4:16:3f:c3:1a:5d:76:c3:48:8c:5d:0c:d8:
71:27:4b:8e:63:82:cd:e0:19:59:a5:0a:02:17:4c:
b2:93:a4:b0:4b:b2:42:61:9d:77:ef:52:7c:75:a4:
6f:c5:27:51:5d:15:a5:c5:23:76:c3:20:0b:75:61:
01:1c:4f:86:85:ea:8b:c8:97:a5:af:4b:86:b5:2d:
b0:79:cb:63:04:f6:9e:97:10:db:5b:ac:8d:af:07:
0f:0a:cc:68:f1:3e:e1:00:cf:83:e5:41:6d:7c:3b:
b1:90:52:c3:4e:65:1e:03:68:dd:fc:08:0b:6a:43:
be:cb:28:a5:42:f5:05:b7:76:63:5f:8e:7a:bc:34:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A7:FF:12:E1:0E:5D:29:AA:06:93:7F:D0:06:5E:94:64:AA:C5:AF
X509v3 Authority Key Identifier:
keyid:4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34372e302f32342d3234203d3e20333238333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:da:bc:16:b7:60:c5:69:4c:1d:f0:54:b9:10:65:a5:18:f5:
27:0b:c3:13:88:7b:37:b6:08:47:18:25:e2:16:95:7a:76:39:
6a:f9:35:5c:e8:70:a8:0d:45:f6:31:6e:3d:9c:87:0a:68:39:
12:fc:e4:c0:e3:fc:83:69:3e:ad:50:69:d3:de:3e:03:65:35:
47:2c:99:69:60:18:e8:64:ef:c5:94:4b:1e:bf:0a:a3:0a:ef:
07:b5:ec:65:a0:bb:88:25:cd:43:f8:c0:a2:13:7a:9e:21:3a:
f6:88:ab:f1:7e:0c:d1:77:4d:c0:b5:3b:cb:36:5f:d9:7b:11:
88:b0:f1:b6:f6:ef:9c:22:1d:63:04:d6:05:83:08:15:e6:cf:
32:dd:76:1b:f5:15:98:9f:8e:e6:0c:41:45:8b:18:9b:d6:9f:
0c:01:e0:cb:48:d6:cb:97:e9:9b:be:62:1e:1f:c6:c1:9b:38:
77:df:72:d6:5d:fc:30:07:a1:e3:fa:62:68:7d:f0:ac:67:7b:
c4:10:73:09:68:ff:cd:52:79:e3:8a:e7:d4:65:f7:88:43:4f:
d3:c8:e5:f8:99:3a:28:ce:5f:56:3c:ef:a3:0a:7f:cf:2c:13:
5a:ff:75:b3:93:ad:ca:93:9d:32:6b:82:fe:f2:37:b0:42:62:
37:9a:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net