Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323132303837.roa
File: 34352e36372e3232302e302f32342d3234203d3e20323132303837.roa (raw, json)
Hash identifier: aWaRqpJCICooDja7OpFu5WarBQtYP6E4lrzjm0Azzn8=
Subject key identifier: A2:74:87:17:BF:D4:D1:3F:2A:83:B1:AA:1D:7B:07:69:61:C9:01:04
Certificate issuer: /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial: 4C5BF02DF08A062C5C15554206DD1F5F0DA6F697
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323132303837.roa
Signing time: Mon 04 Jan 2021 17:56:14 +0000
ROA not before: Mon 04 Jan 2021 17:51:14 +0000
ROA not after: Mon 03 Jan 2022 17:56:14 +0000
asID: 212087
IP address blocks: 45.67.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:5b:f0:2d:f0:8a:06:2c:5c:15:55:42:06:dd:1f:5f:0d:a6:f6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Validity
Not Before: Jan 4 17:51:14 2021 GMT
Not After : Jan 3 17:56:14 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:1c:be:34:4c:d9:86:2d:1e:5c:0e:24:09:
94:d9:96:22:82:88:7b:86:5e:e0:1e:4b:3a:d7:65:
9c:bb:b9:7f:6a:25:df:a0:1e:14:c1:38:7b:f9:cf:
bf:01:0b:b6:a9:c7:10:22:5e:81:32:00:62:9f:aa:
2a:fd:7b:d5:45:69:7e:19:78:93:c3:b0:b9:0a:c4:
b9:5d:18:96:47:3a:79:56:15:8c:7f:bd:de:2a:a4:
e4:b9:9c:4b:bb:9e:c7:0d:47:81:12:38:64:dc:de:
76:12:2d:4d:88:fb:38:2e:ba:c6:35:d2:ee:08:3c:
56:5f:72:a3:9a:fb:05:e6:dd:09:2a:64:cb:59:e3:
ed:5e:d0:7e:2a:59:3e:e7:8d:77:21:2b:a7:23:c5:
43:cf:50:89:fe:d2:80:cb:66:b2:b4:a2:32:5e:f3:
07:5b:ab:f8:53:5d:b2:5f:22:d8:70:c0:07:81:7c:
66:48:a5:f6:92:2e:b9:7c:42:82:62:0d:8d:2f:b3:
07:04:35:7f:c0:6f:b7:31:ce:75:6b:68:56:02:c9:
9c:f9:65:cb:65:e7:05:43:d7:d4:fb:0a:70:48:8f:
45:c9:09:77:5b:f8:fe:79:a5:df:2e:ec:06:b2:cb:
a4:06:0f:9f:14:4c:28:fe:97:f9:a6:13:6e:4c:98:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:87:17:BF:D4:D1:3F:2A:83:B1:AA:1D:7B:07:69:61:C9:01:04
X509v3 Authority Key Identifier:
keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323132303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:23:42:46:3f:dd:3a:70:b0:06:07:6c:db:0e:03:29:4b:fe:
7e:d1:b5:93:d2:5e:04:0e:f2:4d:be:bf:60:9c:62:ff:93:03:
92:f5:f8:3b:bb:df:0d:e4:88:bd:fb:26:f3:3d:cd:86:9d:07:
d2:d7:02:20:1a:86:d9:bb:55:72:dc:29:43:ed:54:fc:99:a6:
ac:62:a3:98:4c:9e:0b:af:c0:95:e9:b0:32:c7:d5:98:f5:8c:
71:67:5e:d4:54:cd:36:ad:3a:45:57:16:b1:03:26:8e:d9:18:
b9:97:ab:71:04:3d:dd:ad:66:1f:2f:73:6f:aa:c0:0b:91:6a:
d7:12:3b:f8:f9:dc:0d:64:7e:99:a4:58:d1:e3:cb:5c:51:38:
6d:64:bc:25:57:bd:8b:1d:60:0b:44:7c:5e:eb:73:25:49:e5:
47:2e:22:08:42:ad:89:35:c9:1c:35:74:6c:8a:61:72:29:3f:
ac:af:6e:4d:93:e1:af:d0:ac:58:f1:94:d7:b7:45:b5:24:c7:
5b:db:cb:fb:af:eb:d3:f9:0d:2b:2a:f0:78:39:8a:d1:cc:19:
4b:77:37:49:ca:cd:24:14:71:84:e2:d2:f4:ad:3e:f8:0f:ce:
66:8c:89:50:53:1c:90:63:1b:91:d4:68:2e:c5:bb:f4:96:30:
58:00:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net