Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38342e302f32332d3234203d3e203631333137.roa
File: 37372e3234332e38342e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: 1HKhp4MhKxDl6eSQ7T8UrWswMTe4A5kFVLWX50eWezA=
Subject key identifier: 93:80:45:F0:3F:54:51:6C:C9:32:B4:5C:44:E1:88:D4:C0:0E:DE:20
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 06935689CAFD81EABAA48F4F0C732208A3B74BAD
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38342e302f32332d3234203d3e203631333137.roa
Signing time: Fri 27 Nov 2020 15:10:19 +0000
ROA not before: Fri 27 Nov 2020 15:05:19 +0000
ROA not after: Fri 26 Nov 2021 15:10:19 +0000
asID: 61317
IP address blocks: 77.243.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:93:56:89:ca:fd:81:ea:ba:a4:8f:4f:0c:73:22:08:a3:b7:4b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Nov 27 15:05:19 2020 GMT
Not After : Nov 26 15:10:19 2021 GMT
Subject: CN=3082010A02820101009646BD857624A5F9948069BA8A54CC2BE7536DDC96A6CBD6956A166732F257A72DFF7EE25CE761E4324531EBDBB5A52115556EB48D4C48711E7991D5BA170FB353679EBBF6459208C9352DDFA6690DEFC6FA6136EA537AE762B3611E7E80363B8178A2D7FB98F4E9C3449625CFE1448BD6FC712E05B6C5DC81044F9C1AF366DD7A95FAB8FA4B1638E4DECDCB05FDEB153ACB5750223DA70AB3556A692693CDDBB8C1C3857425D68D4B42BCD96BFAEAF4F8B57E5F2BEF6733DDD386A0AC11D846E4534322766211EE8DCB60C1E4166F93F1AB3E8EB88FD2E037F742150426EAB5FE02654763F65C667E8DB49A27857D1D5315AA806525EF6E44BB52D124F1BF270203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:bd:85:76:24:a5:f9:94:80:69:ba:8a:54:
cc:2b:e7:53:6d:dc:96:a6:cb:d6:95:6a:16:67:32:
f2:57:a7:2d:ff:7e:e2:5c:e7:61:e4:32:45:31:eb:
db:b5:a5:21:15:55:6e:b4:8d:4c:48:71:1e:79:91:
d5:ba:17:0f:b3:53:67:9e:bb:f6:45:92:08:c9:35:
2d:df:a6:69:0d:ef:c6:fa:61:36:ea:53:7a:e7:62:
b3:61:1e:7e:80:36:3b:81:78:a2:d7:fb:98:f4:e9:
c3:44:96:25:cf:e1:44:8b:d6:fc:71:2e:05:b6:c5:
dc:81:04:4f:9c:1a:f3:66:dd:7a:95:fa:b8:fa:4b:
16:38:e4:de:cd:cb:05:fd:eb:15:3a:cb:57:50:22:
3d:a7:0a:b3:55:6a:69:26:93:cd:db:b8:c1:c3:85:
74:25:d6:8d:4b:42:bc:d9:6b:fa:ea:f4:f8:b5:7e:
5f:2b:ef:67:33:dd:d3:86:a0:ac:11:d8:46:e4:53:
43:22:76:62:11:ee:8d:cb:60:c1:e4:16:6f:93:f1:
ab:3e:8e:b8:8f:d2:e0:37:f7:42:15:04:26:ea:b5:
fe:02:65:47:63:f6:5c:66:7e:8d:b4:9a:27:85:7d:
1d:53:15:aa:80:65:25:ef:6e:44:bb:52:d1:24:f1:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:80:45:F0:3F:54:51:6C:C9:32:B4:5C:44:E1:88:D4:C0:0E:DE:20
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38342e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.84.0/23
Signature Algorithm: sha256WithRSAEncryption
61:5d:89:9f:d8:d6:06:fc:88:8f:38:c5:64:19:f6:2b:43:5d:
e6:60:1c:d3:e6:e6:4e:43:07:bb:5d:a5:3d:76:97:0f:1a:a6:
0a:67:51:6f:1a:5a:bb:31:ea:35:f6:28:76:f7:60:88:19:f1:
14:5c:db:c6:39:31:12:e8:00:a5:f6:f4:9d:f9:d8:ed:05:da:
7e:17:76:44:59:7e:67:0b:ed:5a:d3:54:2a:ee:fb:11:f8:60:
6f:3c:5f:3f:ae:6f:52:9f:a4:85:87:de:7f:ff:50:34:a7:18:
72:97:3d:40:98:d1:87:0d:de:51:58:97:30:fe:6e:68:6e:22:
2c:6c:39:b5:e3:1d:ee:3a:7f:85:e6:97:1a:81:79:1a:ab:d9:
dc:d1:a4:98:a8:17:12:55:a7:6f:83:25:fa:dc:0d:ab:cd:4e:
30:ae:23:45:02:0b:2a:7f:f9:2b:80:fe:37:0a:b9:f0:9e:b8:
9b:a9:ac:1e:a1:02:28:9f:92:eb:42:3d:c5:c1:f1:80:a6:91:
55:df:13:ea:0b:78:8c:8e:c4:f4:e0:f9:e1:5a:86:a0:13:4e:
5a:27:d9:92:4a:58:2f:ac:b3:fe:1c:8d:11:5f:77:14:b1:e2:
46:dd:b0:85:e2:94:6c:bf:a4:7f:57:2c:c7:b0:3b:34:d4:58:
0e:14:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net