Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31392e302f32342d3234203d3e203235303938.roa
File: 34352e3133362e31392e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier: VedCpUiMGRIFCoYfjSxK2C2kjGgH0hz+iCfiYQG2ZvI=
Subject key identifier: 5C:E4:65:BA:A4:B2:1E:5E:71:96:C0:A8:EB:F4:10:4B:4F:F0:AE:1D
Certificate issuer: /CN=3e980f91cc95086fb049172616de25c8f6353255
Certificate serial: 75213D8D808994AD3BC4CAEDAB14DD34CA0B8448
Authority key identifier: 3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31392e302f32342d3234203d3e203235303938.roa
Signing time: Tue 01 Dec 2020 23:27:36 +0000
ROA not before: Tue 01 Dec 2020 23:22:36 +0000
ROA not after: Tue 30 Nov 2021 23:27:36 +0000
asID: 25098
IP address blocks: 45.136.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:21:3d:8d:80:89:94:ad:3b:c4:ca:ed:ab:14:dd:34:ca:0b:84:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e980f91cc95086fb049172616de25c8f6353255
Validity
Not Before: Dec 1 23:22:36 2020 GMT
Not After : Nov 30 23:27:36 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:e6:70:a4:c3:84:03:a8:50:59:38:f3:88:
0c:06:6a:e8:3b:29:d1:10:e6:8f:3f:01:51:fa:30:
d8:34:9d:e3:a8:c0:77:45:7b:2c:ba:28:e9:61:1d:
2a:e5:fc:06:00:3b:de:a9:da:59:c7:1c:32:65:91:
ed:b5:55:8b:ab:9e:bc:d8:8f:07:eb:37:96:4b:6d:
aa:09:24:8f:6b:c1:62:e3:9b:21:c3:6a:e2:f8:63:
5c:81:e1:f8:19:59:db:40:d6:bf:73:f4:6f:00:f1:
79:73:f4:9e:7c:1b:bc:3f:5b:43:42:89:5c:af:eb:
c5:5e:be:72:dc:49:3d:6c:9d:7a:bd:c8:d7:bc:9a:
40:54:8f:59:c0:f6:ea:b6:a7:f4:fa:ee:38:6b:91:
2c:6a:cb:76:72:ec:62:31:0c:93:d3:e8:db:89:c8:
60:78:ce:5e:e8:99:a6:51:fd:3d:be:dc:2b:41:83:
b0:9f:4f:bd:de:06:2d:c9:00:6c:ee:53:32:4d:e5:
c3:27:35:75:40:d6:4e:3a:0a:9d:e2:ec:ae:40:79:
0f:f2:94:0c:a6:ca:b9:04:2b:03:38:44:a9:f1:d5:
25:21:f7:05:a6:76:96:4d:98:e0:6e:0f:37:4d:e4:
7f:ed:2c:18:b9:36:c6:71:81:be:68:e9:a5:9d:e7:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E4:65:BA:A4:B2:1E:5E:71:96:C0:A8:EB:F4:10:4B:4F:F0:AE:1D
X509v3 Authority Key Identifier:
keyid:3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/3E980F91CC95086FB049172616DE25C8F6353255.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31392e302f32342d3234203d3e203235303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.19.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:08:2d:02:aa:4f:f8:81:f2:43:79:06:64:1d:ef:c6:f8:19:
46:76:23:83:8b:d9:6b:2b:5e:00:b2:1c:d7:86:21:ed:5b:0e:
c3:28:1c:1a:0b:bc:61:f2:c4:e7:a5:c1:67:03:79:5b:29:fd:
29:36:ea:db:34:bf:70:21:e2:2b:e8:27:12:46:71:ce:4e:ad:
e1:0d:68:11:7d:05:0f:00:88:a4:aa:7a:71:08:8c:9d:df:0d:
65:93:9f:40:e1:5a:ca:cd:4a:f5:ae:76:a0:8f:aa:87:c7:1d:
0d:36:bd:9e:90:18:e5:29:73:54:10:34:34:93:e7:82:f2:44:
e7:f7:5c:88:30:40:b3:4f:27:13:b0:81:40:51:ce:be:a6:ed:
92:00:ae:2b:32:3f:b5:f2:81:0f:a3:fa:49:e5:d5:91:60:ba:
6e:43:80:e1:3f:7f:33:c6:e1:fd:be:50:34:82:b0:b7:4a:47:
3b:2d:00:3f:a1:a0:77:df:54:07:6b:62:73:cc:0d:08:f6:9b:
85:a1:d8:b0:00:d7:34:ff:06:7a:89:a7:e5:8c:b5:de:bc:8b:
a9:f0:46:f8:c3:bb:53:7b:cb:e5:02:89:46:5c:39:05:df:9a:
f4:1e:6c:1a:b1:46:f3:c0:54:84:da:08:95:99:65:03:a8:59:
ad:e0:e4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net