Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e20323132303737.roa
File: 34352e38352e3134352e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier: zlEjaYB3LZ7lunCl+3WZztaqkkodVU8BZBY37xt+eYI=
Subject key identifier: 23:67:89:5C:33:53:E7:3B:D7:D5:1C:B2:EA:74:2B:E5:EC:68:DD:47
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 7E8A8AC552924C396ABDD8E2F122192D1E25B7DF
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e20323132303737.roa
Signing time: Tue 28 Jun 2022 04:41:18 +0000
ROA not before: Tue 28 Jun 2022 04:36:18 +0000
ROA not after: Tue 27 Jun 2023 04:41:18 +0000
asID: 212077
IP address blocks: 45.85.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8a:8a:c5:52:92:4c:39:6a:bd:d8:e2:f1:22:19:2d:1e:25:b7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Jun 28 04:36:18 2022 GMT
Not After : Jun 27 04:41:18 2023 GMT
Subject: CN=2367895C3353E73BD7D51CB2EA742BE5EC68DD47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1b:73:a6:be:58:73:eb:c7:b6:f9:43:9a:ff:
f7:cd:ab:cc:49:63:24:44:66:17:5b:cb:54:0b:cb:
40:27:17:ec:cd:bb:70:55:9e:8f:59:64:72:79:18:
88:b8:05:9c:92:39:01:03:21:b7:f9:e9:6f:11:4e:
62:dc:68:47:75:4f:ef:c4:66:36:75:c2:e9:79:86:
4d:42:e5:d0:a1:f1:f5:cb:e3:44:94:ad:c1:f2:2e:
5f:f1:d0:b9:d7:b1:6b:77:08:e4:34:59:14:4f:2f:
66:7d:cc:2c:19:c5:68:8d:6b:e2:10:84:d4:9a:d4:
23:62:ba:d0:f6:37:91:d9:c8:b0:74:6d:b5:46:dd:
d5:7a:da:a7:13:86:e5:67:1f:88:1f:7d:22:a0:e1:
b7:77:a7:aa:3a:f0:6c:e6:1a:a4:ba:df:78:ad:c4:
8a:ae:a3:51:42:7b:cd:29:48:6b:8f:b0:a0:bf:1f:
36:1e:6f:4f:ac:35:0b:9c:c5:63:cc:da:66:8f:a9:
a1:32:9f:4b:a4:da:93:db:9e:32:b3:b9:f0:d8:e4:
58:84:c7:02:9b:00:68:2c:5b:ca:8f:df:d4:f7:5c:
c6:44:b7:88:0c:87:e6:bc:aa:83:0a:d6:40:65:c1:
79:f5:99:9f:c6:29:48:cd:97:7c:25:86:ae:d3:a0:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:67:89:5C:33:53:E7:3B:D7:D5:1C:B2:EA:74:2B:E5:EC:68:DD:47
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e20323132303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:39:94:ef:e1:1d:ba:67:f3:6c:8d:6c:09:3e:bf:14:a7:d1:
98:b3:6e:e6:60:88:5e:55:38:fc:e4:0b:c1:ae:4c:6f:82:d7:
fb:0a:df:a2:9b:c9:7d:42:38:ed:0e:d4:bf:b4:63:2d:e4:70:
ad:1f:17:32:88:72:a4:fe:dc:7f:cf:7d:72:e4:66:bf:71:ae:
32:7c:48:ac:fa:6e:f8:2f:ba:05:9d:19:0d:bb:53:2a:0f:74:
e5:11:75:48:c4:d2:f5:b2:c1:34:81:20:99:4d:89:08:de:a1:
21:5e:7b:cd:8c:da:9a:40:af:56:89:e2:e7:9e:b8:0a:cb:a7:
32:ab:f7:08:80:8b:87:04:78:f0:60:c7:43:af:48:f8:1c:e4:
d1:bf:8c:2b:54:d7:9a:8c:d9:e5:bf:4e:a6:b9:35:b4:be:13:
71:44:fb:16:8e:e3:b1:dd:c9:42:5a:8b:ee:ac:e3:5c:fe:52:
68:fc:22:d0:f0:23:32:13:df:55:14:a3:68:64:a5:40:ba:c4:
2d:0d:d0:cf:84:24:b2:39:2a:19:e5:e4:b6:14:d6:62:2f:1b:
6f:c8:4b:db:bf:6b:e7:73:99:6b:91:d5:c2:72:c7:a8:a9:e9:
22:79:40:24:13:af:45:d4:b2:69:6f:f0:2f:ae:2a:65:69:ef:
9a:c0:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net