Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38352e302f32342d3234203d3e20323132383532.roa
File: 37372e3234332e38352e302f32342d3234203d3e20323132383532.roa (raw, json)
Hash identifier: rRfP4NcGrR9I+8s1H60Nh3ZodrGJ/b025Gir3DmRMlE=
Subject key identifier: 2B:EA:96:EC:75:7A:8F:43:92:B0:BC:42:B4:BF:77:5D:47:94:80:BE
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 0A3C09D6321E7B510AB490B9058C9AEA63DF6A4C
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38352e302f32342d3234203d3e20323132383532.roa
Signing time: Fri 27 Nov 2020 15:10:18 +0000
ROA not before: Fri 27 Nov 2020 15:05:18 +0000
ROA not after: Fri 26 Nov 2021 15:10:18 +0000
asID: 212852
IP address blocks: 77.243.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3c:09:d6:32:1e:7b:51:0a:b4:90:b9:05:8c:9a:ea:63:df:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Nov 27 15:05:18 2020 GMT
Not After : Nov 26 15:10:18 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:df:3e:9c:e8:4f:d3:91:3d:2f:0f:4d:d0:
b5:d9:07:11:31:97:5d:a3:eb:17:7e:e1:ef:e4:f4:
d8:ff:e5:2e:2b:72:28:a2:50:16:ea:78:1f:ea:5e:
b3:35:ca:3d:59:25:3d:32:62:3e:63:da:d4:21:91:
44:17:85:b5:ea:72:1e:de:91:09:d4:db:dc:d4:5b:
77:5f:cb:f7:d2:7c:da:81:7b:67:37:09:78:74:23:
26:50:66:97:a1:0f:48:45:45:5d:c7:b8:bc:32:29:
9f:5b:70:8e:e8:b3:1e:20:39:dd:28:44:c1:01:10:
24:4e:ab:d2:9b:c5:6f:d9:7a:68:e0:37:dd:43:9f:
7b:0a:0d:97:01:a2:80:d9:50:cf:1f:48:e8:c2:2d:
b3:de:62:7a:ca:b4:74:92:fb:0a:c6:38:11:bc:30:
cf:9a:75:6b:61:7d:4f:75:f5:6c:11:35:d7:5f:2f:
9f:54:0c:c7:84:62:55:03:cd:f4:e3:bc:75:a1:3d:
8d:f7:30:17:ad:9c:d0:82:96:bd:d0:fc:57:42:f8:
03:8a:01:13:d9:c5:43:1b:d9:0b:4d:ab:25:fe:29:
c5:bd:d4:71:92:c2:8f:ba:bf:01:e1:f7:5a:80:28:
06:b9:3e:7d:02:26:df:05:f7:08:1c:66:c2:b4:9a:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EA:96:EC:75:7A:8F:43:92:B0:BC:42:B4:BF:77:5D:47:94:80:BE
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38352e302f32342d3234203d3e20323132383532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:15:12:01:83:4f:7f:37:1c:f6:49:b3:3f:07:56:72:80:aa:
ad:3b:52:5b:b5:16:0d:73:1d:96:a6:e2:2c:cf:20:2e:1b:84:
51:30:e1:f1:5e:af:1e:69:61:55:69:7c:ad:37:48:66:24:6c:
57:d5:a6:00:77:61:75:e6:36:e8:e2:9e:87:a9:92:63:7c:3d:
49:23:6d:8c:ed:2f:fa:fa:58:5e:bb:ac:de:40:00:bf:96:ec:
92:43:2e:40:d4:6e:07:d1:67:c9:c3:d7:b6:2c:40:13:68:d1:
63:79:3a:0d:89:17:cb:b7:cd:de:dc:56:ee:3d:df:ba:e9:f4:
da:9e:4b:13:63:8b:9b:75:91:92:26:c0:cf:ee:23:c7:84:89:
5a:a5:64:c7:4b:fd:7d:7e:d9:13:30:b6:52:d6:d0:3e:6c:fb:
fe:0c:79:9e:11:c1:5d:5b:68:51:70:3b:ac:0c:c8:7c:fb:ef:
7b:25:19:4f:fc:75:a1:d4:66:8d:b9:f2:a7:58:ee:45:22:d8:
8f:c4:92:40:02:c1:8a:0f:9f:b5:8a:d4:cf:b7:52:0c:a0:08:
19:bf:8d:ce:92:45:0c:93:8f:24:4b:eb:d1:b3:fb:df:0f:eb:
c9:c9:50:d4:3f:78:b4:ab:d7:61:82:37:9e:1d:d3:55:71:dc:
0d:1f:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net