Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38312e342e302f32322d3234203d3e2030.roa
File: 34352e38312e342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: QzWiGq+ZcwL+QCOw+lX0HZlq6ZHyONWNUL2TmiOKlso=
Subject key identifier: A2:E0:A1:06:1D:CE:0D:D2:91:FD:E0:CB:06:10:5B:16:D8:FC:82:D0
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 2DCC2AFEA35CF7D50527D162C1E115EEFC251305
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38312e342e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:52:59 +0000
ROA not before: Fri 03 Mar 2023 15:47:59 +0000
ROA not after: Fri 01 Mar 2024 15:52:59 +0000
asID: 0
IP address blocks: 45.81.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:cc:2a:fe:a3:5c:f7:d5:05:27:d1:62:c1:e1:15:ee:fc:25:13:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:47:59 2023 GMT
Not After : Mar 1 15:52:59 2024 GMT
Subject: CN=A2E0A1061DCE0DD291FDE0CB06105B16D8FC82D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:cf:c8:a9:a6:ff:96:d9:a0:f0:11:07:10:
be:b4:b2:b7:1d:c0:3d:ed:b9:32:6f:91:73:d1:ac:
1b:2c:ea:8e:a4:e6:54:cf:28:9f:35:49:ff:11:11:
86:4a:48:e1:64:3e:2d:be:c4:0f:15:9f:b1:02:90:
8d:26:ae:d4:ff:4e:7f:65:52:17:61:35:64:53:ff:
e0:73:57:c5:5f:96:50:0f:b2:2e:48:7a:4a:4c:2a:
6c:2a:35:e1:3a:a7:21:7e:0f:b4:c6:f2:e2:35:6f:
ca:3b:38:11:9a:6d:63:61:a9:b0:1d:bf:56:3b:15:
fe:cc:53:f7:9a:50:ba:9b:7b:d2:7c:d5:63:67:69:
41:c0:68:fd:94:96:8d:3e:3e:8b:69:0a:0f:71:13:
07:89:2e:35:4a:e4:4a:f5:11:64:4c:ef:9b:94:3f:
28:a7:96:45:96:14:7d:8b:d7:47:6d:ad:07:7f:74:
1e:64:f2:0f:a1:50:c8:5b:5d:0d:d2:34:9e:d0:c6:
36:af:2f:02:52:17:f4:f8:56:49:7e:cd:93:bf:b5:
69:0c:33:2d:24:1a:89:d2:87:2a:34:46:80:3b:9b:
70:2f:4d:89:69:db:4b:02:53:26:5d:a6:bf:c3:6d:
e5:c4:26:4b:c3:b5:ce:e2:83:83:63:77:51:68:36:
01:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:A1:06:1D:CE:0D:D2:91:FD:E0:CB:06:10:5B:16:D8:FC:82:D0
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38312e342e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:13:aa:57:6d:5e:5f:d6:f3:39:cf:79:18:42:de:87:64:51:
5b:31:ef:a7:87:64:f4:78:af:7a:b7:5b:8a:bc:53:8b:7f:02:
cd:7d:a8:33:cd:a7:80:1e:28:81:a8:f5:68:0e:61:b7:0a:d3:
44:9d:fa:51:b5:fa:10:fb:4a:1f:8f:ac:2e:d7:a3:ad:20:c7:
29:e9:12:b4:30:59:4b:7c:3d:d9:77:8a:90:39:72:e0:6d:1b:
8b:cc:ed:99:6b:f5:56:b2:d6:a4:ed:4a:1e:90:59:6e:8d:74:
1e:e7:39:4d:87:6b:92:b1:6c:28:d1:ce:b8:71:51:74:7b:d3:
85:bc:63:3f:84:ff:2f:41:7e:22:4e:27:e7:91:93:04:87:2e:
e4:bb:65:fc:07:66:df:e9:22:33:b2:ac:0f:34:41:8d:bb:8c:
01:19:a1:bd:dc:d4:48:a8:bb:2c:12:49:2e:2c:9b:c0:25:70:
52:5a:c9:a7:12:b3:df:cb:3f:07:6b:50:2c:9f:e0:58:b3:96:
90:10:67:dd:f9:d3:14:45:4c:a6:d7:27:16:d8:75:85:75:85:
b0:0e:23:c2:de:01:14:79:1b:93:10:af:4e:ea:13:1f:cf:d4:
cc:2c:02:79:b0:ee:e3:74:ba:41:40:54:9c:bc:f9:e3:63:ee:
f9:d8:21:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net