Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3135312e302f32342d3234203d3e203235303938.roa
File: 352e3138302e3135312e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier: YAF/vI70A56XBkTzaENGInU9+WVhS88gHqWhAeRfxLQ=
Subject key identifier: FB:1B:A4:20:34:57:7B:D4:21:0D:10:EE:F7:4D:13:8A:0B:44:FE:AF
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 0D43A1FC1FF3401798C9A141CB5D23CF5107720D
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3135312e302f32342d3234203d3e203235303938.roa
Signing time: Wed 11 May 2022 09:21:18 +0000
ROA not before: Wed 11 May 2022 09:16:18 +0000
ROA not after: Wed 10 May 2023 09:21:18 +0000
asID: 25098
IP address blocks: 5.180.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:43:a1:fc:1f:f3:40:17:98:c9:a1:41:cb:5d:23:cf:51:07:72:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: May 11 09:16:18 2022 GMT
Not After : May 10 09:21:18 2023 GMT
Subject: CN=FB1BA42034577BD4210D10EEF74D138A0B44FEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:f9:6c:36:77:d2:f7:c0:5a:43:71:3c:40:
4a:a8:b9:05:b4:e3:d9:b1:1b:b2:ce:5e:95:94:87:
0e:dc:7c:3e:13:da:f8:6e:6a:55:5a:d7:99:37:a0:
86:23:76:fe:33:58:9d:0b:41:59:3e:23:11:d9:1f:
a8:0c:32:55:a4:d4:ed:53:3d:50:d2:20:31:df:72:
73:a9:9e:bd:9f:f4:b7:04:11:b8:86:16:ae:19:fc:
b4:cd:83:8d:6a:b4:c7:f5:86:ea:a9:15:f4:b9:66:
3d:ed:c5:e0:08:09:69:be:1f:46:b2:af:54:a7:f4:
8c:6d:cb:2f:c6:85:f0:fb:14:9c:d3:4e:d0:e7:e1:
d9:4a:e7:da:01:f7:86:ff:a5:84:7c:6e:f6:6f:5f:
0f:e6:4d:29:1d:83:19:cf:87:a1:4e:a2:ef:c9:f7:
f6:bb:27:85:fc:f3:6c:6e:35:e7:9a:9c:c6:a4:e0:
07:e8:53:4f:e0:ee:64:38:d4:f9:64:62:21:9a:f6:
2a:f8:34:4b:2a:26:f8:b1:dd:55:79:1e:03:80:22:
71:13:70:9f:79:55:5e:7b:49:14:ea:b0:e3:ee:e3:
d5:ee:7a:d3:88:f7:ec:d0:da:08:2d:e4:a6:00:4a:
12:92:f7:14:cc:6d:77:18:2d:ee:bd:4a:ca:c9:d2:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:A4:20:34:57:7B:D4:21:0D:10:EE:F7:4D:13:8A:0B:44:FE:AF
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3135312e302f32342d3234203d3e203235303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.151.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5f:32:77:e4:8b:a1:0c:c5:30:dd:4c:40:40:65:19:8b:05:
af:e6:1f:c3:ea:a3:d0:2a:f7:6a:43:54:b5:d5:d9:df:51:e7:
94:86:03:5f:d6:c6:81:cb:99:cd:63:56:c2:8b:90:56:c4:df:
79:35:ae:e4:b5:35:4f:70:c9:85:19:90:62:71:81:d3:0a:68:
5a:8b:af:ad:5a:50:7f:46:2b:cf:32:9e:b9:b0:ef:a5:35:a5:
46:77:95:e0:92:b1:1d:19:0e:80:d7:f0:26:e0:6e:5a:dc:fc:
0b:d2:af:fc:1e:db:55:00:1c:16:4c:f3:ea:ac:b0:a5:45:a3:
83:ea:9c:45:be:c8:ed:d4:6e:52:e9:25:f0:90:3d:7e:4b:81:
03:ac:85:31:33:2e:cc:a0:2a:81:41:13:35:8d:13:54:26:cb:
b1:a4:95:32:b6:cc:51:25:a7:71:9b:32:b5:16:39:39:e3:b7:
6b:b0:ab:51:b5:7c:4a:77:da:73:79:cf:b8:c1:17:ab:ce:6e:
e4:9f:6c:d7:20:9f:4d:0f:c5:57:b5:8c:6e:4e:74:da:25:a0:
b9:13:a2:5d:bc:4c:ab:e9:69:c7:60:9e:19:c2:1c:8b:a3:8d:
05:fb:f9:fb:af:fb:dc:b9:a2:49:2e:86:e5:6b:4b:db:fc:65:
89:05:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net