Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e36342e302f32322d3232203d3e20323031333431.roa
File: 34352e39342e36342e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: E+bnk27QREI8X237DE8CfMpkqkqDBiob8bDmj9njjKg=
Subject key identifier: 3E:E7:20:54:1F:96:12:DF:C6:BE:98:95:ED:05:59:42:75:C9:BE:E1
Certificate issuer: /CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
Certificate serial: 4D4CE1AF6ECBCD1AE35CB38F5AFA4BE3E75073C9
Authority key identifier: E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e36342e302f32322d3232203d3e20323031333431.roa
Signing time: Sat 22 Oct 2022 04:34:38 +0000
ROA not before: Sat 22 Oct 2022 04:29:38 +0000
ROA not after: Sat 21 Oct 2023 04:34:38 +0000
asID: 201341
IP address blocks: 45.94.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:4c:e1:af:6e:cb:cd:1a:e3:5c:b3:8f:5a:fa:4b:e3:e7:50:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
Validity
Not Before: Oct 22 04:29:38 2022 GMT
Not After : Oct 21 04:34:38 2023 GMT
Subject: CN=3EE720541F9612DFC6BE9895ED05594275C9BEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:f1:9a:42:c9:6d:72:fb:38:f6:5c:82:78:
f2:60:68:4a:c0:6b:56:82:11:a9:9f:a5:9b:67:6d:
9e:78:91:eb:f2:52:b6:28:51:64:f8:88:3d:81:bc:
8c:67:b3:78:ca:23:50:35:fc:7d:93:d0:9c:fc:c0:
11:1d:11:6f:b3:46:66:34:2f:8b:37:19:98:38:43:
94:34:3e:99:38:05:13:4d:6d:ef:5e:b9:29:b1:68:
9c:86:a0:da:8d:7a:a8:cb:f4:d5:db:98:74:82:ee:
98:74:f3:6e:6b:1b:b5:0f:5c:9d:05:b5:25:66:e3:
c8:83:1e:da:c1:c6:3b:b5:e3:7a:de:22:9c:71:7a:
37:b8:f1:19:18:5b:01:ed:9d:1a:2c:91:d6:b3:12:
52:80:1d:97:3a:c1:e4:4f:83:70:9c:67:67:30:19:
39:2c:62:52:f5:be:82:23:88:78:6a:91:34:38:d8:
f3:1d:dc:7b:d6:18:4e:f1:5d:c8:0c:9a:eb:1a:3e:
75:1d:e1:91:62:31:69:59:03:1c:51:9f:28:c8:ec:
b1:bb:8d:53:e5:4d:73:21:ef:7d:1e:c4:e2:4e:0b:
c8:91:9b:ec:7c:d4:09:29:88:5f:62:5f:ee:5c:3e:
a5:25:b7:73:ea:c1:92:75:92:e8:ed:46:48:ff:58:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:20:54:1F:96:12:DF:C6:BE:98:95:ED:05:59:42:75:C9:BE:E1
X509v3 Authority Key Identifier:
keyid:E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e36342e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.64.0/22
Signature Algorithm: sha256WithRSAEncryption
47:b0:fe:14:90:32:9b:39:94:54:1e:34:e6:7e:f8:37:0a:e9:
03:1e:cb:0d:1a:11:59:45:5c:15:d6:e6:87:a3:2a:97:6d:36:
4f:90:1b:ac:f1:e9:b2:80:ed:71:54:c7:56:33:33:18:85:69:
60:ad:3b:18:0b:d7:0f:00:74:fe:9f:32:12:7d:7e:8f:33:94:
da:bd:f5:b2:50:8d:90:c5:de:79:c8:e8:22:72:b1:6d:bb:c2:
78:ae:03:22:cc:8c:1e:09:84:b6:78:11:b9:7f:42:c4:4e:07:
a4:30:51:ca:76:ff:f6:79:25:44:39:4e:6f:76:bb:c9:53:95:
3b:48:89:a4:f4:67:14:83:f7:1c:66:21:c7:30:21:d8:0b:90:
10:49:c7:e9:4d:2f:ae:51:33:0f:4c:07:09:0d:18:a8:fd:01:
82:c6:c7:9e:63:33:ad:ca:8a:8e:85:1e:3f:34:94:f8:47:a9:
6f:14:0b:ab:b1:d6:ff:2d:66:83:aa:d3:d8:0b:99:9b:79:79:
e4:9b:76:25:d5:6f:0f:5c:8c:a2:ad:43:73:ca:cf:b2:4f:ec:
5a:c4:24:69:7a:41:5a:f4:cf:5d:fc:68:d2:a7:9b:6e:e7:9d:
41:a7:15:da:81:4b:44:98:d5:bd:06:b1:2b:7b:7e:0d:73:04:
6b:e7:08:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net