Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/164/34352e31302e3231322e302f32322d3234203d3e20323031333431.roa
File: 34352e31302e3231322e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: GwqBBdWkYXdkFwG8quQXcjIpdQNFSXC8+/Fdj3+90UE=
Subject key identifier: 19:98:42:68:84:5E:27:05:0B:DE:13:07:D6:8A:C7:E5:0D:34:BA:D6
Certificate issuer: /CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Certificate serial: 09862F54CEDEF37E3433992E45C77AE0F878ADAF
Authority key identifier: 7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/164/34352e31302e3231322e302f32322d3234203d3e20323031333431.roa
Signing time: Sat 22 Oct 2022 04:33:10 +0000
ROA not before: Sat 22 Oct 2022 04:28:10 +0000
ROA not after: Sat 21 Oct 2023 04:33:10 +0000
asID: 201341
IP address blocks: 45.10.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:86:2f:54:ce:de:f3:7e:34:33:99:2e:45:c7:7a:e0:f8:78:ad:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Validity
Not Before: Oct 22 04:28:10 2022 GMT
Not After : Oct 21 04:33:10 2023 GMT
Subject: CN=19984268845E27050BDE1307D68AC7E50D34BAD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:32:be:a4:2c:8f:7b:76:cc:32:61:13:62:e4:
c9:ad:b6:6b:8d:8f:a5:87:b6:bd:fe:d0:0e:ad:46:
74:62:de:87:4c:b9:7e:2d:11:9b:0f:5f:99:b8:c1:
33:c0:56:8d:42:3e:78:6b:ed:39:5e:e0:fa:1f:6d:
62:e5:ad:37:15:5c:b4:64:a4:6c:22:f1:2a:ac:75:
43:48:1f:75:d8:85:5d:aa:96:b6:91:0a:4a:68:0a:
a0:ee:99:07:fb:c8:f7:84:de:bd:6b:d6:91:2f:9a:
5c:58:2d:e9:2f:43:5b:98:05:e5:c7:21:2d:26:08:
bf:46:6c:18:04:bf:68:29:0d:90:ae:5d:26:e6:d4:
f1:a8:1a:0b:4a:bd:62:b7:27:13:16:93:07:c2:de:
f4:77:24:f1:45:16:f4:cd:12:bd:2a:97:95:5b:4d:
88:b9:f4:0b:e6:fb:29:b3:5f:e5:a0:6e:94:f5:be:
b5:e9:63:28:e1:62:b8:7c:79:75:3a:b6:a0:1f:8b:
ff:5b:e1:87:6f:d9:e9:ab:25:f6:ff:d1:5e:5c:1d:
25:29:af:6f:4f:17:9a:54:6c:74:4c:ab:c1:d2:92:
dd:c0:9d:9c:66:02:4f:a4:9c:00:94:ff:a5:0d:a5:
19:dd:37:0f:73:12:3b:f9:01:68:41:d8:b0:0b:88:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:98:42:68:84:5E:27:05:0B:DE:13:07:D6:8A:C7:E5:0D:34:BA:D6
X509v3 Authority Key Identifier:
keyid:7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/7EBD1421D6EE46B714647FB7D198AE4601B63729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/34352e31302e3231322e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:9a:10:37:67:69:01:13:1a:da:b2:5f:aa:6c:0c:29:0a:3a:
8b:aa:57:94:82:b7:58:a6:53:1c:e3:49:a5:eb:9e:1b:6b:95:
7d:f3:90:c1:21:67:81:7e:3c:3d:77:70:5c:c7:2b:db:aa:b8:
44:b4:b0:c7:c2:19:41:4f:95:ea:f4:fd:8f:ae:3c:66:6e:a8:
4e:d1:0f:bd:06:7a:5b:7c:8e:d6:62:6c:8a:74:6d:f9:b5:d9:
8c:5a:3f:62:2e:17:0f:33:22:1a:79:37:5c:79:1f:5c:f4:f7:
f9:fd:43:85:e7:2d:8f:14:6b:62:87:49:cd:f7:9b:57:e2:6f:
3b:2d:36:98:4b:f3:1e:cb:c3:d6:c0:d1:7d:b0:5a:17:99:8f:
29:03:39:60:e0:5b:be:e6:76:6d:22:df:75:39:86:61:39:57:
e6:78:72:14:4f:39:92:77:e0:49:8f:ea:7b:1c:16:11:92:6c:
78:8c:a8:f8:95:be:1c:42:3d:3d:70:ae:95:ab:49:ea:34:20:
b4:82:85:1e:42:bd:8b:05:7b:bb:d5:c8:36:c6:46:b5:a7:6b:
cb:e2:7a:6e:49:a8:ad:0c:cb:3b:3a:b7:a0:32:42:5c:b7:81:
78:a5:f5:aa:72:64:e2:a5:05:23:54:53:86:42:a6:fc:0a:2f:
e1:2c:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net