Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33332e302f32342d3234203d3e20323036383034.roa
File: 34352e3132392e33332e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: xWMiAzBT1PTnaB1QDD1KO4TNSPtcxQM0vEeb7B/z4EM=
Subject key identifier: 4C:7C:CF:30:51:AE:2A:AA:68:87:6E:3A:17:C8:7F:6C:83:F5:BD:C5
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 0590084B60BE173783E7ED1A78900030926D7DFF
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33332e302f32342d3234203d3e20323036383034.roa
Signing time: Sat 22 Oct 2022 04:33:36 +0000
ROA not before: Sat 22 Oct 2022 04:28:36 +0000
ROA not after: Sat 21 Oct 2023 04:33:36 +0000
asID: 206804
IP address blocks: 45.129.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:90:08:4b:60:be:17:37:83:e7:ed:1a:78:90:00:30:92:6d:7d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:36 2022 GMT
Not After : Oct 21 04:33:36 2023 GMT
Subject: CN=4C7CCF3051AE2AAA68876E3A17C87F6C83F5BDC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:a6:2f:a8:8c:3e:5c:e7:f8:5f:07:cd:56:
47:0c:fb:8a:18:e1:96:8d:89:91:16:e0:de:86:a5:
69:2a:f9:b0:d8:f1:a7:c4:72:0c:d7:b0:0f:31:ac:
fc:c3:63:0c:cf:34:c4:21:b8:c8:5c:9c:28:ff:04:
bf:f4:6f:c6:74:23:1b:8e:43:fa:14:23:28:52:30:
65:f4:28:76:1d:aa:6d:72:32:1b:6f:6f:9d:5a:98:
e4:6d:a5:84:20:cd:96:86:8c:ba:b2:73:3b:ef:f0:
0f:e8:b2:e0:14:a4:ba:71:b3:c4:33:b3:96:f9:09:
a6:48:63:8c:20:63:0f:0f:c9:57:bf:0d:72:26:a7:
28:45:8d:55:fc:a2:dc:96:6f:14:7b:2a:79:76:bc:
62:80:92:9a:71:0c:ff:e7:21:cd:dd:9e:0a:e9:e9:
bd:74:ae:47:b5:10:a4:0c:ca:10:db:25:c0:b2:b9:
75:23:01:82:6d:91:b0:a2:a6:20:c2:7f:d3:4b:36:
a5:11:11:b6:6a:d8:4a:4f:8a:2b:a7:24:9f:0c:94:
82:49:6e:60:51:ce:e2:42:f5:a9:39:f8:1b:3b:a5:
b1:ce:87:f2:38:01:ca:93:09:3f:fe:b5:11:6b:ef:
2e:f6:62:07:c1:d3:1b:ef:a6:92:fd:e5:11:d7:6e:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7C:CF:30:51:AE:2A:AA:68:87:6E:3A:17:C8:7F:6C:83:F5:BD:C5
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33332e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.33.0/24
Signature Algorithm: sha256WithRSAEncryption
44:32:fd:54:e7:31:a2:9f:28:1e:8c:d6:3c:e5:4c:4e:75:49:
f5:9a:56:95:1d:05:63:b4:e8:a3:6a:72:8f:6a:0d:d2:d7:07:
1f:0f:66:c2:08:2f:1b:44:7d:16:13:db:7a:83:05:03:bf:4c:
51:63:98:f1:90:15:80:a6:e2:f4:c1:df:a1:c9:61:7d:90:8b:
c3:56:b3:d4:e9:0e:45:6a:a6:a3:33:f9:31:fc:df:67:9e:c7:
7d:ec:fd:55:0a:fd:fb:88:ba:f7:5c:94:f3:ab:b8:14:e9:82:
80:03:b8:ba:4a:f4:30:c4:10:02:da:17:cf:9c:d0:dc:11:cf:
44:56:c3:62:e0:a2:c0:cb:a8:f8:ab:09:24:b3:d5:01:80:cd:
46:3c:14:59:76:8b:4a:a1:a7:89:a3:be:df:7a:c6:e7:7e:f8:
20:bf:a1:ca:a4:77:b2:dc:34:3f:5c:02:ab:b1:79:dc:59:22:
a1:bb:64:1d:2e:62:ac:04:8c:ec:08:bf:f0:49:d5:b8:b8:1f:
bc:b1:0d:7c:ff:1f:59:73:92:df:43:58:a9:5d:f2:b6:95:8d:
a5:81:b8:3a:6d:14:a8:7c:05:64:19:2d:30:77:1b:6a:0b:8c:
b8:f1:2e:98:f4:e4:25:83:89:5a:1e:62:70:c4:6a:5d:04:ea:
80:64:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net