Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31372e302f32342d3234203d3e20323132303837.roa
File: 352e3138322e31372e302f32342d3234203d3e20323132303837.roa (raw, json)
Hash identifier: UMtDW8aWZfPN0t4ZJNRae/1bWeVvbmyf85eVEMTjAKs=
Subject key identifier: 43:C6:E4:C4:3E:6D:71:C7:27:23:8A:A5:D6:E1:0D:E1:30:F3:26:EC
Certificate issuer: /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial: 7D9E5DA42D79D08A8F8EDC1A2DAFB235EBB2FCBA
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31372e302f32342d3234203d3e20323132303837.roa
Signing time: Mon 04 Jan 2021 17:56:24 +0000
ROA not before: Mon 04 Jan 2021 17:51:24 +0000
ROA not after: Mon 03 Jan 2022 17:56:24 +0000
asID: 212087
IP address blocks: 5.182.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:9e:5d:a4:2d:79:d0:8a:8f:8e:dc:1a:2d:af:b2:35:eb:b2:fc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Validity
Not Before: Jan 4 17:51:24 2021 GMT
Not After : Jan 3 17:56:24 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:30:db:ca:f4:2b:cc:01:8a:88:3d:d9:41:
1b:58:37:c8:ce:cd:dc:09:7b:53:87:e0:e9:9a:82:
7c:bd:4d:80:be:08:de:a8:df:c7:8d:dc:de:18:be:
be:f0:a3:f0:77:b1:d4:51:8e:88:7d:2d:31:f2:b6:
fa:05:03:0e:5d:71:f5:c0:e5:fa:3f:5e:f2:29:89:
3c:6c:b2:bf:5c:cd:b4:e1:4c:83:c5:17:4f:d9:b0:
f0:a1:06:f1:8c:78:77:23:6d:5d:c0:e1:f8:71:73:
7c:ad:e1:1f:0b:91:00:1b:ce:7b:02:77:f7:8f:0f:
36:4f:a7:19:9b:c7:b1:20:db:98:64:e1:d4:3c:09:
47:53:ce:89:14:2d:9e:0d:86:71:f0:f0:0d:ec:8f:
32:51:53:1e:b8:04:47:7a:f1:03:01:6e:9d:85:af:
74:5c:3f:ee:5a:61:4f:7c:e0:bb:e5:dd:8d:b4:13:
90:5e:3a:26:4c:5d:7d:48:d5:36:71:d4:41:88:23:
fb:57:76:70:f1:84:f4:04:44:11:21:10:45:87:93:
23:0a:7b:93:94:a2:0a:2e:3a:b0:93:d6:5c:e1:d6:
3a:d8:56:d4:50:d3:49:27:38:c8:89:99:e8:6d:c9:
b5:ff:a2:66:3f:4d:44:e1:e1:04:aa:c2:ce:f0:dd:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:E4:C4:3E:6D:71:C7:27:23:8A:A5:D6:E1:0D:E1:30:F3:26:EC
X509v3 Authority Key Identifier:
keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31372e302f32342d3234203d3e20323132303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.17.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e3:9f:b1:4a:58:de:aa:d1:a0:be:cc:76:c4:81:ed:5b:50:
f8:4a:2d:8e:41:f6:40:b4:92:bd:56:b5:ea:d9:53:73:16:70:
a4:d9:73:42:48:ac:3b:c0:c6:0f:4d:be:a8:ef:c9:0d:c8:5c:
9a:46:cc:38:50:45:b8:9f:b9:e0:c0:16:fd:68:89:88:ec:46:
f6:3b:a2:d2:d3:8d:ca:65:18:58:92:4a:ba:56:ac:35:c3:af:
99:1d:27:80:54:bd:06:f6:91:82:2b:2f:5b:cb:cf:3e:c4:17:
cf:3a:8b:4a:b4:ea:e0:3b:7d:b1:f3:de:c5:7f:f2:a4:4e:f3:
9d:16:b8:10:40:c6:c6:a7:fd:eb:c1:cb:bf:57:80:5f:17:4b:
5b:32:76:81:7b:b7:1b:f6:16:89:0f:f1:05:23:d3:8b:1b:eb:
3b:d8:d9:5f:ac:00:64:d4:3e:84:eb:ae:b7:eb:08:e4:fa:f4:
82:e1:a2:3a:65:8b:38:ad:f6:f7:e8:2e:72:61:b8:fc:cf:fc:
e4:4c:59:34:e2:b1:61:32:32:de:61:d5:05:af:a8:b3:54:c0:
42:db:a7:bc:2a:1a:95:d3:28:f4:18:b2:c1:4c:6b:2c:41:2f:
5d:c7:98:84:5f:40:5b:d2:1d:3b:20:35:3a:f1:32:20:73:94:
bc:75:57:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net