Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e20323132323938.roa
File: 34352e38352e3134352e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier: sYNVNckeINUPsz6er1VG5qv9Rhwzi0CSmkoP9iqttoc=
Subject key identifier: 67:5E:69:D3:07:3F:1C:2A:97:9D:19:E3:07:67:10:BD:F1:10:D9:6A
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 319C5902D0D3BB57906DB61EACB61BEA10B06F6F
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e20323132323938.roa
Signing time: Tue 28 Jun 2022 04:41:10 +0000
ROA not before: Tue 28 Jun 2022 04:36:10 +0000
ROA not after: Tue 27 Jun 2023 04:41:10 +0000
asID: 212298
IP address blocks: 45.85.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9c:59:02:d0:d3:bb:57:90:6d:b6:1e:ac:b6:1b:ea:10:b0:6f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Jun 28 04:36:10 2022 GMT
Not After : Jun 27 04:41:10 2023 GMT
Subject: CN=675E69D3073F1C2A979D19E3076710BDF110D96A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:96:ca:f1:a6:43:c0:d1:34:60:2b:00:3d:
c3:89:f5:d9:65:75:93:35:06:76:8f:39:47:9a:af:
96:b0:2f:44:c9:40:17:70:f6:d6:c9:26:ea:7a:f9:
d0:44:36:51:c9:8c:88:fc:d1:17:c7:65:0d:07:8c:
df:4f:46:86:4a:3e:38:dd:b6:c5:b4:41:08:fa:72:
d9:c3:a5:d2:fa:91:bb:82:59:29:39:84:cb:f6:f1:
85:af:83:31:20:49:ae:ad:2d:43:c5:f8:8b:ee:53:
4e:f8:ed:2e:96:d6:e1:32:fc:18:b0:37:33:62:dd:
66:54:9a:e5:ba:5a:51:0b:a1:de:46:fb:f8:aa:61:
49:f6:ea:c7:01:c3:33:a6:a0:63:44:c3:73:9b:42:
30:ac:e8:1d:06:12:63:8d:be:de:e1:d8:39:f7:7b:
64:ce:97:b4:ce:a0:9c:21:3a:e0:00:90:7e:a5:51:
e7:3b:8e:ca:9d:76:b5:9e:02:06:e3:79:3c:77:7b:
dd:e6:e1:2e:a4:e3:18:41:6e:4c:74:c0:6e:4e:b1:
de:5d:74:21:ac:01:73:83:38:e5:a7:a9:db:31:7e:
6d:04:73:71:2f:77:88:cd:06:ae:de:e5:98:72:a8:
c9:24:8e:09:5c:76:62:c8:cf:19:2f:70:70:0c:5f:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5E:69:D3:07:3F:1C:2A:97:9D:19:E3:07:67:10:BD:F1:10:D9:6A
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e20323132323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.145.0/24
Signature Algorithm: sha256WithRSAEncryption
66:77:ff:0b:fa:d3:ac:95:7a:81:b2:e1:30:67:34:00:62:d7:
59:4c:44:19:8a:f4:77:a8:ce:33:3a:3c:53:14:87:00:bc:72:
fc:27:d2:b5:57:cc:79:62:9b:9b:b7:f6:0c:dc:89:83:71:8a:
65:c7:7b:0d:30:a0:db:aa:c3:72:e5:a3:d7:7a:97:6c:ff:1e:
67:42:fd:47:40:7d:d2:2e:04:c1:16:cd:74:88:94:4e:8a:ce:
7a:9a:12:f4:b1:15:21:5e:a4:1f:61:92:90:7e:2e:0a:4e:61:
30:ef:0b:e1:ce:64:28:a8:36:19:75:50:b6:35:ed:8a:5d:02:
ef:46:19:74:a2:ac:e4:60:d3:64:c4:be:59:6a:f6:26:55:01:
4f:9e:07:94:41:53:f0:ac:b1:57:c1:7a:8b:8a:03:ac:10:d5:
14:10:38:a4:24:3d:4b:25:61:0a:92:86:46:98:8a:3b:7f:6b:
db:f4:18:09:c3:3f:9f:7b:35:e0:00:5d:e8:e1:13:88:34:cf:
4b:ac:84:2a:d2:e0:0d:88:06:1b:88:6e:f2:ab:db:55:31:7e:
ec:b5:c5:62:e7:e2:c9:ae:26:2b:5e:30:d8:45:77:57:62:75:
5b:ae:30:4b:18:da:c2:73:15:ce:1b:ca:77:9b:ba:2d:8e:e5:
92:a3:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net