Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35372e302f32342d3234203d3e203630373831.roa
File: 34352e31332e35372e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier: bPU93TP7UalU6hTox21coBgIMKCsk0ll6MCPMfcQwuk=
Subject key identifier: 24:3B:C7:74:24:67:70:CD:EA:85:85:22:BE:16:45:B0:7D:DA:8A:93
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 4992EB7F9FC3BED96707BBF55A662AA16D640651
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35372e302f32342d3234203d3e203630373831.roa
Signing time: Tue 23 Nov 2021 10:16:42 +0000
ROA not before: Tue 23 Nov 2021 10:11:42 +0000
ROA not after: Tue 22 Nov 2022 10:16:42 +0000
asID: 60781
IP address blocks: 45.13.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:92:eb:7f:9f:c3:be:d9:67:07:bb:f5:5a:66:2a:a1:6d:64:06:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Nov 23 10:11:42 2021 GMT
Not After : Nov 22 10:16:42 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:12:31:7d:51:ad:1c:48:f9:fd:24:53:f4:
6e:33:d4:99:1f:dc:4e:93:7c:d5:ae:47:da:50:bc:
a3:47:d5:92:63:14:e8:db:d6:a5:5c:ec:ea:1a:24:
59:f4:d5:6b:aa:86:ac:85:84:dc:da:d4:bd:02:16:
f9:c6:f7:3f:9d:39:6a:3a:b2:41:a1:bc:57:5b:d6:
85:b5:00:1c:30:dc:6b:e4:50:d6:d4:00:84:2d:57:
50:e5:e4:4f:21:35:54:04:c3:81:29:fd:5d:4d:00:
70:e7:87:b6:5a:76:80:c0:8c:d0:8d:01:a2:0b:73:
f1:53:a9:84:3b:e5:cc:d8:6d:ef:71:77:29:b4:a1:
16:cd:6c:09:30:88:db:20:f5:af:e5:55:10:57:ba:
6e:4d:90:40:78:f3:2c:58:a0:0d:67:5a:b7:f3:ce:
93:b6:59:04:2e:63:53:7c:a5:01:39:20:b4:79:7b:
c1:1b:22:9b:e5:c7:50:ef:23:ca:49:bf:a7:de:4a:
d2:b5:7f:70:03:7e:cf:09:c7:09:e8:2b:16:2e:53:
2e:68:e1:47:6a:da:00:fd:3b:54:67:24:2d:3c:2f:
86:d9:76:20:24:c7:89:d4:12:bb:3e:78:bb:2d:26:
ce:81:08:c4:70:53:81:6b:c5:2a:7a:e1:67:64:33:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3B:C7:74:24:67:70:CD:EA:85:85:22:BE:16:45:B0:7D:DA:8A:93
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35372e302f32342d3234203d3e203630373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.57.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c7:7a:87:d6:f0:e8:66:30:23:27:b6:71:fc:63:ba:b0:ca:
45:fb:a7:47:0f:24:11:b9:e6:b8:7b:4d:98:11:96:e4:ad:af:
24:25:88:9c:88:d1:ef:d9:88:53:76:1b:35:66:0a:24:37:a5:
24:ac:3d:b2:80:1d:fc:b8:34:58:e9:ba:72:24:15:7b:03:02:
42:2e:9b:4c:a8:51:00:dd:d7:9d:8f:45:61:1f:55:da:b6:f7:
34:eb:4c:75:6d:f1:79:1e:78:fe:5d:6e:05:8a:d7:36:ad:f3:
24:84:d4:db:dc:c1:86:7f:e7:51:44:9c:aa:0b:e6:0d:66:2c:
b5:3a:76:c2:0d:de:3d:55:f9:86:4b:05:ae:65:ce:49:d6:6b:
14:53:cc:61:f6:e6:10:07:fd:b8:01:cc:81:34:ad:92:67:ac:
2e:a1:33:52:40:da:56:54:7e:20:7d:88:ce:70:0e:69:c8:1b:
4f:57:fd:3d:ed:7f:61:1a:96:cd:1a:e4:6b:92:ab:c2:8e:08:
91:3c:21:65:0c:c9:dc:d3:eb:30:f9:af:bc:28:f1:f2:23:f4:
d5:8c:11:c0:86:c3:32:02:de:eb:92:d1:05:93:e3:f9:f6:a2:
bf:fb:d2:15:fe:ab:b2:e8:7e:54:68:4a:17:dd:52:28:10:48:
14:1c:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net