Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33342e302f32342d3234203d3e203139343337.roa
File: 34352e3132392e33342e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: yhWrmorZqe3Hc7uDNcx4o5m2XTQPmMhF09UkqLAmGL8=
Subject key identifier: 5F:54:A7:AD:C0:3E:55:A7:DD:7D:12:C1:47:A6:96:B5:06:76:8C:0B
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 1D3DF70C863176DF28FAE7E83A6A91C5BB9E1869
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33342e302f32342d3234203d3e203139343337.roa
Signing time: Sat 22 Oct 2022 04:33:35 +0000
ROA not before: Sat 22 Oct 2022 04:28:35 +0000
ROA not after: Sat 21 Oct 2023 04:33:35 +0000
asID: 19437
IP address blocks: 45.129.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3d:f7:0c:86:31:76:df:28:fa:e7:e8:3a:6a:91:c5:bb:9e:18:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:35 2022 GMT
Not After : Oct 21 04:33:35 2023 GMT
Subject: CN=5F54A7ADC03E55A7DD7D12C147A696B506768C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:86:d3:b4:58:0f:86:f7:c4:1b:2e:0b:b9:
95:34:a5:08:a9:6e:51:73:78:e1:99:23:c7:a4:6d:
71:6a:05:fb:fa:57:20:4c:c4:35:e8:a9:65:2d:1f:
f7:f0:5c:fb:ce:b6:6c:88:8f:c2:95:5a:cc:fa:98:
fc:3f:19:fd:1e:22:19:f4:b5:31:d6:a5:da:4e:84:
d6:ec:d8:22:ec:f7:f2:e7:e8:68:b8:aa:2f:0d:af:
84:79:eb:f1:e1:e0:21:4f:2f:8e:7a:4c:bd:66:b9:
fa:30:c1:a5:9f:42:04:f0:a8:4b:37:a9:04:62:4c:
64:7f:b6:e4:de:c8:4c:7d:cd:ad:06:e3:ca:c5:73:
e3:2a:59:b5:06:6d:dc:de:27:7f:fb:67:45:fb:ef:
9b:ff:cd:f8:3b:a7:b2:d1:23:77:f1:6c:ef:b6:81:
84:51:f4:1b:b5:75:2d:34:52:d5:51:f1:ae:4f:f7:
5e:46:ea:d2:02:94:cf:2a:a3:5c:6c:97:c9:05:04:
c4:bf:64:9a:47:75:c8:b1:43:8e:0b:b5:d5:cc:5e:
de:9d:12:37:6e:1d:55:b4:1b:93:df:7f:26:8e:1a:
f2:2e:e4:48:b8:ca:ec:99:6e:41:a7:45:a3:37:c0:
44:c1:15:fb:78:18:49:05:07:29:65:5e:2a:9b:d9:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:54:A7:AD:C0:3E:55:A7:DD:7D:12:C1:47:A6:96:B5:06:76:8C:0B
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33342e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.34.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f7:96:7a:d4:f4:d8:b9:8f:b7:32:dd:a9:45:e7:fc:a9:25:
89:d9:bc:fa:8c:a7:8c:50:df:38:08:ef:c8:14:7d:69:af:22:
59:f3:d2:18:f4:e1:04:52:35:a7:e5:07:8b:4c:bc:4b:be:f5:
53:6b:53:33:6b:75:d3:30:01:e8:e1:d0:af:2d:d0:20:43:50:
5d:7f:10:03:ea:8a:2a:06:b3:6b:e5:31:34:3e:20:c9:1a:82:
0e:1b:12:6b:c4:50:31:63:84:35:76:3e:ee:bb:1d:0d:ec:97:
22:d6:16:c3:16:ad:39:4e:a4:80:c1:ab:c5:a7:6f:59:84:f2:
62:3b:77:0f:03:dc:63:b7:36:e3:6a:21:7f:ba:01:87:04:3b:
61:c6:a3:39:ea:d7:d0:12:d4:23:fd:38:54:32:5f:c3:00:7c:
7d:1e:9b:17:cf:5c:b9:a1:2b:dd:a9:05:e9:8c:9a:17:1f:cb:
5e:e0:94:20:03:58:ab:5c:70:a0:0d:35:63:a1:11:10:bb:bc:
b6:ca:52:73:13:b5:7e:6c:93:0b:40:34:c2:2a:18:b3:ba:fe:
b2:4e:95:08:d4:a1:45:a8:06:a0:02:b5:0d:10:53:03:a9:ff:
2f:32:18:9d:c2:9c:54:e2:ff:3f:ef:73:b3:95:ae:40:1c:47:
7e:13:4d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net