Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38352e302f32342d3234203d3e203439343334.roa
File: 37372e3234332e38352e302f32342d3234203d3e203439343334.roa (raw, json)
Hash identifier: QasVxOVblp2422HGYh0vDmx98Htxzum14FUVMilXW4U=
Subject key identifier: 25:0D:8E:10:E0:D6:AB:25:5B:3A:BA:C8:18:CD:C3:00:0C:ED:52:4B
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 498ACF6D57B01F4237688EC702935B959F50A92F
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38352e302f32342d3234203d3e203439343334.roa
Signing time: Sun 10 Jan 2021 11:47:40 +0000
ROA not before: Sun 10 Jan 2021 11:42:40 +0000
ROA not after: Sun 09 Jan 2022 11:47:40 +0000
asID: 49434
IP address blocks: 77.243.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8a:cf:6d:57:b0:1f:42:37:68:8e:c7:02:93:5b:95:9f:50:a9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Jan 10 11:42:40 2021 GMT
Not After : Jan 9 11:47:40 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:b1:38:a1:b8:ba:30:5d:56:55:65:28:83:
7b:9c:c0:e9:78:a1:11:1b:8c:1b:72:37:ec:87:78:
44:fa:f9:97:c4:98:26:e8:d9:4c:a1:10:dd:d7:a4:
21:c5:ee:f8:1d:30:5a:fc:98:46:63:93:18:8d:bb:
76:a1:c6:ce:15:2e:e8:1e:85:d7:e2:bf:3e:92:5c:
b5:23:2b:ff:a0:d3:aa:41:f9:9c:0b:4f:23:e9:1f:
41:9f:32:7a:d1:70:fe:6d:31:4e:b2:8f:28:5d:45:
fa:bf:15:d6:e6:94:f2:d1:53:a6:16:1b:32:b5:4b:
55:4b:75:7f:87:ec:f0:9d:99:fe:59:13:c5:e9:00:
28:c5:e9:79:52:68:f8:fd:16:5e:55:84:5d:c8:fe:
7c:3f:4c:9f:d8:15:65:d5:a5:8c:6c:e3:09:8f:ff:
bd:18:1d:f1:bd:80:48:66:7a:60:c6:1c:13:1c:1d:
ff:0d:22:a0:62:0c:3e:89:d4:82:65:23:d9:07:75:
be:b1:18:c8:fd:ad:e8:7c:df:66:4d:21:47:57:c4:
bb:87:62:a7:38:b0:3f:58:f4:e1:b9:15:02:06:5a:
b2:00:47:90:5e:d4:27:b5:c9:0a:62:cf:f7:93:e2:
58:a1:57:84:fe:e0:66:17:2c:55:43:8b:03:74:00:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:8E:10:E0:D6:AB:25:5B:3A:BA:C8:18:CD:C3:00:0C:ED:52:4B
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38352e302f32342d3234203d3e203439343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.85.0/24
Signature Algorithm: sha256WithRSAEncryption
97:47:ec:18:1d:04:83:ff:ef:bb:ea:3a:86:47:a3:77:16:ad:
d9:68:a9:16:b5:b8:ba:cd:c0:f8:83:eb:bc:ad:94:fb:a5:4a:
69:f5:ef:d6:70:e3:87:da:35:dc:c8:34:3f:cf:58:53:21:fe:
bd:c4:aa:21:45:c6:9e:3b:b2:3c:d5:ed:b1:ee:a6:46:a3:7b:
9a:ff:1d:ae:5b:90:88:76:95:4c:eb:b8:d1:da:4b:0d:9f:cc:
07:b2:c2:78:57:38:f4:a7:2f:d4:22:a8:83:96:a8:62:8f:35:
1f:0f:d2:53:00:80:bd:e7:73:be:2b:21:c7:bf:54:e1:c0:18:
13:b2:dc:9c:0c:63:80:a6:e6:c7:52:1d:ae:c1:be:be:5e:82:
c5:8f:7a:a7:24:e0:cf:44:e7:22:04:27:53:cf:2f:7a:38:e0:
f3:80:24:b1:49:cd:c4:3a:6d:de:85:53:39:57:f9:04:29:c4:
2d:45:92:9c:29:82:2f:dd:76:3d:35:d9:35:15:e1:6c:36:68:
a8:aa:4d:76:08:70:49:3d:ec:c0:72:8a:b1:a1:bf:c1:c3:15:
16:7e:96:f0:4d:46:74:b3:f8:01:3f:7e:c1:c9:46:3d:83:c3:
8b:47:db:b8:86:06:40:ac:f0:ac:b8:f5:03:3e:40:28:c6:8d:
70:93:b6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net