Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20313431303339.roa
File: 38352e3230322e38312e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: bRAcbW+tcq9ck/oavop1VjnNYy2ZA1ksB4khkhJIsoU=
Subject key identifier: 47:C6:6E:87:EE:CA:22:49:5B:E1:E9:51:2E:2C:28:EA:D7:40:77:7F
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 375496AED073208D1019408A787C9C58A2DC2C82
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20313431303339.roa
Signing time: Sat 22 Oct 2022 04:33:29 +0000
ROA not before: Sat 22 Oct 2022 04:28:29 +0000
ROA not after: Sat 21 Oct 2023 04:33:29 +0000
asID: 141039
IP address blocks: 85.202.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:54:96:ae:d0:73:20:8d:10:19:40:8a:78:7c:9c:58:a2:dc:2c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:29 2022 GMT
Not After : Oct 21 04:33:29 2023 GMT
Subject: CN=47C66E87EECA22495BE1E9512E2C28EAD740777F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e0:70:2c:12:c7:44:ad:ef:b8:94:0a:7d:9e:
24:2b:7b:0f:99:bd:dd:fa:71:b2:d2:9b:64:3a:3e:
32:c6:7b:38:38:c9:57:42:20:76:97:75:12:9d:e4:
3b:b2:e1:ae:e6:51:87:20:9a:ed:2a:a5:a9:d0:3d:
4a:eb:2b:07:eb:5e:e8:81:b8:b0:ce:c4:a9:ed:bf:
0b:67:cd:36:2d:6f:b6:38:81:aa:f9:63:ec:7e:a9:
40:3f:86:fc:8b:96:52:e8:ec:6f:39:8a:b4:01:ae:
55:47:e9:8e:73:15:d9:6a:03:f8:e9:8e:bf:87:6f:
13:e4:1e:12:0e:3e:cb:c1:37:7e:0d:77:97:aa:8b:
e0:6a:25:8e:89:31:0c:7a:20:52:ca:4f:78:a2:f3:
06:da:85:d4:10:7e:77:3d:73:48:03:66:7a:b8:73:
30:b6:f9:84:8a:c4:67:86:c1:21:d5:4c:a3:84:13:
5a:70:8e:5a:ec:0e:37:aa:8a:78:e2:fd:b0:8d:b2:
e2:4d:58:27:f8:4f:6b:45:33:37:4c:04:a1:10:b4:
2d:3e:80:cd:f3:ea:e0:c1:83:ad:bd:3a:e4:ee:9a:
4a:9d:c3:e5:8d:5d:4c:df:69:c7:f6:0e:21:5b:e6:
96:7e:59:0f:01:ff:20:25:af:d5:73:53:7b:45:c4:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:6E:87:EE:CA:22:49:5B:E1:E9:51:2E:2C:28:EA:D7:40:77:7F
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.81.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:62:db:e0:94:c7:29:8f:de:2c:a1:41:13:92:b7:fa:89:69:
b5:20:19:74:33:ac:4c:8f:51:6c:8d:46:72:31:76:28:03:4b:
fe:35:07:81:09:7a:a0:82:3d:43:46:d7:7e:70:41:35:34:85:
ac:3b:af:87:a3:be:61:e6:11:50:f8:97:20:8e:d7:d6:03:d3:
85:9b:55:f5:9f:2a:57:02:8a:90:7a:a2:5b:c6:87:2a:27:74:
80:85:1f:59:48:f4:f6:d5:d7:85:74:5b:46:47:8e:fc:e1:19:
98:be:7f:1f:e4:7e:4a:fb:96:7c:54:f7:7f:eb:a9:01:c5:43:
6a:74:1f:69:7f:8c:3e:a4:64:2b:f3:94:89:5c:a6:48:77:e5:
0f:3d:4e:5e:af:cc:05:a1:62:aa:d4:f1:f3:51:e6:69:97:a0:
f1:18:8e:cc:04:ec:e4:cd:67:66:bd:27:73:2a:26:af:5e:7d:
c1:06:2e:3b:e7:89:f9:0d:b4:4d:d1:7c:82:0f:9f:b3:d8:23:
3d:16:96:30:a9:aa:0f:54:2e:06:5a:02:04:ff:a8:5c:e0:bd:
43:77:5c:67:08:7b:ba:32:37:36:ae:15:4d:c2:cf:0b:0d:7c:
53:08:d9:10:da:63:28:75:2d:d3:0f:46:03:55:7e:2b:2e:f9:
ee:f3:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net