Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32332d3234203d3e20313336373837.roa
File: 34352e382e3134382e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 94WKEsVcp1KXILyL8OV2CqSWE+vwyVYU032A1y+VXys=
Subject key identifier: 81:1A:98:24:49:90:A2:AA:43:07:73:C0:4A:CB:33:9E:92:64:03:E9
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 4875FAF53E5B029E3D6EC935171D80964338A38B
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32332d3234203d3e20313336373837.roa
Signing time: Sat 22 Oct 2022 04:33:29 +0000
ROA not before: Sat 22 Oct 2022 04:28:29 +0000
ROA not after: Sat 21 Oct 2023 04:33:29 +0000
asID: 136787
IP address blocks: 45.8.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:75:fa:f5:3e:5b:02:9e:3d:6e:c9:35:17:1d:80:96:43:38:a3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:29 2022 GMT
Not After : Oct 21 04:33:29 2023 GMT
Subject: CN=811A98244990A2AA430773C04ACB339E926403E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:26:bb:6f:0a:c2:40:34:66:d1:8a:0f:c5:
ec:89:94:ec:91:0c:18:92:8b:a6:74:17:af:2f:78:
42:a0:51:10:f4:5a:03:9e:da:95:30:51:38:36:07:
5f:15:8b:c2:83:d5:2c:c1:5f:06:9c:ad:2b:ab:fe:
57:c5:fb:13:1b:ce:72:4d:61:d8:1a:28:c3:96:a0:
26:73:6a:59:c7:bb:63:b7:12:7d:2a:36:d2:c6:c8:
6f:90:7f:a1:0c:7a:22:07:28:9a:8a:96:a2:86:aa:
0e:c3:b6:71:31:94:01:39:4b:5a:dc:8e:8a:83:d4:
04:94:af:1e:3c:54:7c:29:2d:b2:2d:cb:4a:27:36:
c9:76:97:bd:93:4c:f4:63:1e:45:8c:78:6b:26:66:
98:fd:f3:90:b4:60:ab:aa:80:ef:5e:bc:8e:73:3a:
be:56:29:89:db:67:ca:f0:e6:37:59:08:3f:9a:94:
fe:c5:54:26:84:1a:3d:17:b7:f4:a6:08:e0:bb:cb:
4b:60:db:a6:5e:81:2c:c7:ad:bc:26:bc:0c:00:74:
cf:7f:73:2f:dd:aa:c9:4c:53:5d:a4:88:e0:3d:69:
b4:af:ef:20:ee:f7:c8:ce:53:de:de:6f:b0:e3:ea:
e1:3e:a6:73:0f:fb:b5:ea:72:9f:a5:b2:3d:e0:41:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1A:98:24:49:90:A2:AA:43:07:73:C0:4A:CB:33:9E:92:64:03:E9
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.148.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:bc:bd:41:25:f6:66:9c:e2:6d:15:da:31:42:aa:ff:e1:ae:
27:09:b8:71:2e:28:b0:aa:db:f4:bb:79:d6:ad:72:06:c0:84:
c3:e5:cf:aa:d8:0d:0f:d0:45:43:2d:50:0d:ea:3c:b1:87:46:
c4:c0:d5:0e:7b:96:91:ef:57:7a:0e:fa:8f:84:f2:7b:0c:16:
a6:b2:1e:04:58:6f:0c:a0:b6:df:99:b5:0f:da:d8:d5:ed:86:
81:e8:1b:dc:95:5a:e0:ca:24:4f:00:01:80:76:33:58:a5:c2:
fa:45:1f:f4:6b:a8:04:f3:7f:be:f5:f3:43:68:7e:6c:a3:58:
5c:d3:02:5a:9c:a2:e2:7c:29:97:03:6e:5b:ee:9a:49:2c:67:
85:b5:f8:7a:99:45:6f:3e:be:8f:52:8a:c4:84:6c:80:e4:43:
df:49:d6:1a:38:58:d8:d4:80:af:42:6b:1c:df:40:25:6e:f0:
c1:c9:7a:bb:8e:85:a3:33:4e:d8:e9:9b:4d:0b:c7:a5:11:76:
e5:98:8c:8d:18:9e:0f:21:36:88:67:e7:15:87:a9:c0:a8:68:
ab:96:42:d9:41:6a:83:59:33:af:0e:49:f7:a1:1f:82:08:8d:
c4:30:f9:55:d7:aa:cc:41:d3:dc:f5:05:2a:97:f5:aa:53:43:
65:57:4e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net