Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/153/34352e31302e3135342e302f32342d3234203d3e2037383431.roa
File: 34352e31302e3135342e302f32342d3234203d3e2037383431.roa (raw, json)
Hash identifier: LAT/pCXvKFh95zX4Z4zq8TKFevm4rTeyi33wz9EwJHM=
Subject key identifier: B4:0C:99:23:BA:5F:B7:FC:B2:FA:72:C9:07:45:25:8A:38:43:17:0A
Certificate issuer: /CN=2db99cc50935295f8e3427a0bb691b41507e3276
Certificate serial: 260916DB9260AD57EC79C1966DD3092B58B45C47
Authority key identifier: 2D:B9:9C:C5:09:35:29:5F:8E:34:27:A0:BB:69:1B:41:50:7E:32:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbmcxQk1KV-ONCegu2kbQVB-MnY.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/153/34352e31302e3135342e302f32342d3234203d3e2037383431.roa
Signing time: Tue 01 Dec 2020 23:29:06 +0000
ROA not before: Tue 01 Dec 2020 23:24:06 +0000
ROA not after: Tue 30 Nov 2021 23:29:06 +0000
asID: 7841
IP address blocks: 45.10.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:09:16:db:92:60:ad:57:ec:79:c1:96:6d:d3:09:2b:58:b4:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db99cc50935295f8e3427a0bb691b41507e3276
Validity
Not Before: Dec 1 23:24:06 2020 GMT
Not After : Nov 30 23:29:06 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:10:70:ea:1d:c1:72:4e:37:9a:c7:de:77:
c9:c2:d8:5c:56:13:7e:bb:22:e0:e4:1b:59:43:87:
87:d2:ff:b7:e2:6b:53:dc:0c:fa:a3:a2:f1:8e:e1:
59:ce:12:bc:a4:5a:41:be:31:ff:fc:f0:62:67:2c:
b8:ca:d6:ea:3e:74:e3:b9:ed:08:0b:4e:5f:11:94:
4e:07:f0:e7:7b:95:85:b5:56:24:3a:c5:e9:57:d6:
2a:73:c2:c9:85:40:f3:64:2f:77:0f:2e:b3:d9:1a:
a7:07:f1:05:a6:e4:e2:6e:de:3e:fe:21:3a:8b:64:
c7:30:c7:d9:30:9e:59:01:4f:54:ef:77:be:2c:64:
1a:62:cc:92:9e:54:af:cf:0c:a0:76:64:c5:0d:27:
3d:09:23:b8:18:4f:8e:74:f2:05:66:a2:9e:1d:5c:
18:ca:bb:52:db:f2:f2:8e:b2:e2:ed:9f:7b:d2:0e:
5a:fa:a6:36:2f:82:00:5c:23:eb:d1:36:eb:29:4f:
95:ce:e0:80:1d:d8:e5:27:41:7e:06:11:be:50:cc:
5a:03:79:48:7a:05:ed:33:91:79:cf:34:f1:c0:80:
5f:5b:20:35:b5:52:5d:40:68:8f:48:3d:12:e0:14:
42:0a:5b:f8:e1:b3:fc:c0:6a:83:e9:76:2f:bc:2e:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:99:23:BA:5F:B7:FC:B2:FA:72:C9:07:45:25:8A:38:43:17:0A
X509v3 Authority Key Identifier:
keyid:2D:B9:9C:C5:09:35:29:5F:8E:34:27:A0:BB:69:1B:41:50:7E:32:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/153/2DB99CC50935295F8E3427A0BB691B41507E3276.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbmcxQk1KV-ONCegu2kbQVB-MnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/153/34352e31302e3135342e302f32342d3234203d3e2037383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.154.0/24
Signature Algorithm: sha256WithRSAEncryption
63:48:03:a7:74:5a:62:15:95:63:e3:a7:eb:28:9e:7c:5c:f0:
74:6e:88:30:8a:9d:39:93:97:a2:76:21:46:26:ed:3d:bf:c5:
f0:a1:9c:66:13:bf:94:f8:87:c4:39:99:a8:02:a4:f3:f8:0e:
a9:06:37:49:d8:1b:51:6c:3a:66:35:61:15:1e:d9:84:63:19:
91:36:d8:01:ee:54:26:dd:99:57:e2:79:53:70:dd:5c:3d:a0:
28:7b:b5:2c:86:8a:6d:83:3b:3f:b6:a0:a2:92:7c:bb:60:d8:
6c:de:a4:69:5a:1c:6e:72:65:c8:be:4b:bf:07:dc:fc:d6:1a:
80:f9:71:29:5b:0e:7b:ec:ed:23:8d:2f:b5:4b:21:51:c6:6a:
f1:7b:90:46:f3:28:88:b7:6a:de:63:08:8b:57:9e:ab:4d:69:
b8:13:17:cd:47:ef:f1:6b:62:fe:e9:e8:29:f7:ed:aa:e1:0c:
b0:8a:e9:b2:84:03:ef:15:e0:0d:01:1a:4f:90:e1:9a:64:4b:
a4:fd:ce:b2:f4:48:19:75:94:11:85:e7:e2:5b:93:b8:da:65:
c9:0f:35:e2:3d:b2:13:f3:0c:c9:38:6a:05:15:61:3f:4e:15:
2b:53:27:23:82:53:b6:5f:2d:1a:83:42:0b:34:77:39:d9:75:
84:f0:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net