Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/352e3138322e31372e302f32342d3332203d3e203531313637.roa
File: 352e3138322e31372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: SmYLVSmEY59ZC68i7nmNnVrDVWRAYDs04AYDO7qFviY=
Subject key identifier: 64:3F:64:6D:58:D8:C9:71:6B:9F:CD:7B:3C:9B:3B:04:D1:49:A0:23
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 1D9ED5FD3AA9464865AC18A6E4074673A89D9601
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138322e31372e302f32342d3332203d3e203531313637.roa
Signing time: Sat 22 Oct 2022 04:33:29 +0000
ROA not before: Sat 22 Oct 2022 04:28:29 +0000
ROA not after: Sat 21 Oct 2023 04:33:29 +0000
asID: 51167
IP address blocks: 5.182.17.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9e:d5:fd:3a:a9:46:48:65:ac:18:a6:e4:07:46:73:a8:9d:96:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:29 2022 GMT
Not After : Oct 21 04:33:29 2023 GMT
Subject: CN=643F646D58D8C9716B9FCD7B3C9B3B04D149A023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:a1:8a:fc:0b:bb:b1:02:88:94:4a:13:d3:
22:06:f5:73:c1:d3:d4:eb:f3:8c:8e:65:41:61:2e:
79:1d:6e:68:ae:10:3f:45:80:be:f6:d5:1a:7b:89:
f4:57:cc:3a:9c:7f:ee:fc:0d:67:66:ad:29:2f:57:
01:32:db:33:66:27:bf:74:ae:e7:4d:95:2a:ba:16:
06:56:61:03:12:a9:1f:d9:3d:d9:86:00:95:fd:b4:
7c:13:0d:93:6f:9a:f7:41:75:f0:3c:1c:f2:f6:56:
d4:e5:35:3f:be:d1:5c:29:27:3a:06:52:f6:9e:86:
15:9e:77:9f:3e:fc:1c:ba:f5:09:02:09:73:f0:e1:
81:98:7b:45:a0:5e:14:89:df:11:36:31:1b:15:05:
82:07:83:7f:29:9d:14:5e:83:b6:cd:3e:62:04:3d:
0c:50:8a:4a:18:fd:54:ae:e7:7d:ba:05:8f:2a:04:
a2:37:fb:08:7f:b3:c2:e0:eb:a0:f3:4f:70:5c:34:
9d:37:c8:04:58:c0:b1:b7:11:d0:c8:09:d7:94:93:
5a:54:03:ba:4a:a5:a6:90:1a:ad:b7:53:9a:41:3e:
97:67:b3:19:23:7d:d9:e3:64:cc:a8:a0:b8:2f:62:
1d:ca:5f:fc:c3:61:ea:0a:d3:88:f3:bd:af:6a:c0:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3F:64:6D:58:D8:C9:71:6B:9F:CD:7B:3C:9B:3B:04:D1:49:A0:23
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138322e31372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.17.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1c:4a:73:82:e6:ee:e3:a7:ca:35:ec:38:23:a8:8e:fe:3c:
35:1b:21:73:e0:e6:72:87:e3:0d:56:68:58:ac:91:07:96:6f:
59:c9:df:1e:20:42:28:d6:47:d3:2d:56:fb:e0:71:c4:73:2b:
4c:6b:6f:bc:46:cd:4e:a5:fa:c8:da:76:68:95:c9:2b:3e:7c:
e7:bf:65:b9:a4:d7:f7:cb:81:d9:aa:ad:b4:3f:f5:c3:a2:9b:
32:fa:b4:e4:32:f8:cf:68:c7:78:a8:ee:af:2f:b2:f5:45:ff:
16:87:ca:51:94:02:0f:9a:8a:39:8c:8b:3f:90:34:e3:9b:96:
61:32:a7:67:5a:d2:d0:6b:45:3c:f6:fc:94:10:f1:50:ec:8a:
82:4c:1e:8a:68:45:4f:e9:8d:9c:9b:bb:54:d9:d6:41:e1:12:
97:fd:f6:f1:cf:41:2b:e9:37:72:13:01:3d:79:b6:61:2b:e4:
ee:09:59:12:41:73:af:08:81:62:fb:47:a1:44:e9:11:a2:c3:
cf:a4:28:be:ee:fa:54:f3:8e:5f:bd:52:f1:4b:55:cc:1b:00:
00:bb:87:0d:aa:27:d0:59:fe:61:b2:ac:e1:61:22:93:99:46:
ef:23:4d:cd:ca:68:3b:9b:cb:fc:1a:72:10:bc:b6:59:92:95:
f6:a2:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net