Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3138382e302f32332d3234203d3e203631333137.roa
File: 34352e38382e3138382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: EQNn1jYmpsS6u/trkJ3hknrv8cOz7g1lSMuqOJk24GA=
Subject key identifier: A0:C0:0D:CA:CC:09:93:1B:FA:7B:33:81:9C:5E:98:1E:29:6E:9B:FB
Certificate issuer: /CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
Certificate serial: 4C510E69413FCECA78F4EA64DC9AA305A0F260CD
Authority key identifier: 26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3138382e302f32332d3234203d3e203631333137.roa
Signing time: Mon 30 Nov 2020 19:12:05 +0000
ROA not before: Mon 30 Nov 2020 19:07:05 +0000
ROA not after: Mon 29 Nov 2021 19:12:05 +0000
asID: 61317
IP address blocks: 45.88.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:51:0e:69:41:3f:ce:ca:78:f4:ea:64:dc:9a:a3:05:a0:f2:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
Validity
Not Before: Nov 30 19:07:05 2020 GMT
Not After : Nov 29 19:12:05 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:4c:41:ed:f6:4f:ec:d2:51:9f:bf:f1:a0:
da:9c:3f:8c:3a:d5:db:80:53:8a:6c:e4:ad:3d:19:
f6:ef:a2:01:9f:8e:bc:8e:90:40:ff:bb:33:88:4e:
17:0e:aa:db:60:fd:32:a8:df:5d:0a:e9:49:1b:e3:
3d:50:17:b6:f7:2d:d8:98:4c:d9:f0:a9:c5:27:12:
be:a4:15:e2:9d:ce:04:89:73:0d:59:15:51:31:c1:
07:a1:3d:23:76:66:7f:c6:c9:33:8b:70:bc:bd:a4:
e6:e7:fa:1a:07:6e:ba:b9:4c:4b:a4:56:33:29:61:
c0:a3:19:d5:8f:bf:50:c3:d8:34:94:54:8f:c6:f0:
d2:cc:5b:3d:e9:d7:84:03:77:33:67:89:3e:8b:36:
97:e6:44:d5:0b:fc:a1:2b:d5:01:2d:39:e8:ea:32:
19:b8:e9:46:7d:d5:dd:6b:41:13:91:2d:4a:20:70:
be:21:43:a8:22:ee:be:f9:02:d1:c1:53:58:79:e7:
8a:e6:db:7c:ad:94:ff:ce:22:ac:e2:0a:76:d7:f5:
19:32:46:dc:ef:45:13:a6:8a:e2:a7:ba:5d:5d:99:
71:12:30:c8:6a:78:6e:b5:1a:58:7d:a3:cf:13:cb:
6b:78:d6:00:64:1f:df:9e:0a:44:7b:f4:1a:af:63:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C0:0D:CA:CC:09:93:1B:FA:7B:33:81:9C:5E:98:1E:29:6E:9B:FB
X509v3 Authority Key Identifier:
keyid:26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/26C157349BEEB72D0815CFBB33FCABC27FAD9FC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3138382e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.188.0/23
Signature Algorithm: sha256WithRSAEncryption
37:5a:99:34:14:ea:77:54:9d:ff:cf:25:b7:2a:45:99:1a:b3:
a8:2a:bb:ab:d3:8f:9e:9d:7f:c2:76:9f:66:2f:bd:c6:ed:ef:
8f:4a:7c:d6:12:d3:ed:ed:94:9e:6a:95:07:d1:16:15:36:08:
ed:ad:8e:67:64:8c:4a:15:e2:41:24:91:1f:1e:ad:1e:b0:76:
09:9b:58:98:73:bf:6b:d3:22:61:37:3a:25:15:e8:c7:b8:0d:
6c:fa:07:1d:36:f5:28:15:0c:81:31:b7:af:5b:b1:1d:ae:aa:
8c:1e:d6:91:a9:44:15:0b:34:18:54:36:01:12:0f:4e:9d:8c:
7e:f1:4c:b7:c2:19:1f:80:a4:be:55:0c:37:5d:b6:0a:44:9c:
7b:24:6b:59:af:44:42:ca:8d:c2:ae:2f:08:34:fb:3e:b5:bf:
e2:f8:6d:91:c2:83:3f:3c:05:ba:cf:37:df:46:40:0b:52:8e:
3f:84:cb:24:ca:12:40:fc:3a:83:38:99:c0:62:b4:9a:93:62:
aa:3d:15:7b:b9:d5:a4:01:06:e1:bd:42:92:30:fb:af:b4:b1:
4b:93:17:59:45:2e:ad:e3:0f:8f:5c:2c:85:ad:7e:19:f0:89:
75:53:80:92:ca:cb:26:5d:c9:85:bc:d4:ef:54:26:95:c6:f9:
11:91:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net