Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232302e302f32342d3234203d3e203531353539.roa
File: 34352e39302e3232302e302f32342d3234203d3e203531353539.roa (raw, json)
Hash identifier: ekNL0N2P0Vomd9o+4OaXn7mFEbeLnwIGF2NH7fg3zck=
Subject key identifier: 74:68:69:E4:AF:A7:7C:FD:AA:FC:24:D2:10:5F:E1:F2:6F:B2:95:FD
Certificate issuer: /CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
Certificate serial: 46C34CED6D303A4F0C346759740BB942C5372002
Authority key identifier: 67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232302e302f32342d3234203d3e203531353539.roa
Signing time: Mon 30 Nov 2020 19:12:27 +0000
ROA not before: Mon 30 Nov 2020 19:07:27 +0000
ROA not after: Mon 29 Nov 2021 19:12:27 +0000
asID: 51559
IP address blocks: 45.90.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c3:4c:ed:6d:30:3a:4f:0c:34:67:59:74:0b:b9:42:c5:37:20:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
Validity
Not Before: Nov 30 19:07:27 2020 GMT
Not After : Nov 29 19:12:27 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:12:f8:db:27:a5:0c:16:37:c2:8a:79:59:
3c:1f:37:6a:91:26:c6:48:45:8c:53:50:10:4c:79:
c2:30:01:0d:e8:bd:2c:84:1f:cf:a8:44:ce:1d:7f:
4d:25:1c:36:f1:07:86:19:31:8e:d4:1c:93:ab:91:
be:ef:48:25:8f:1b:e2:92:19:49:84:9d:de:2f:25:
f2:7f:49:97:fe:d8:e0:2d:40:68:41:0d:88:61:f2:
8c:2d:48:a3:10:7c:cd:1d:24:f7:ea:35:38:14:fd:
86:fa:25:13:98:9f:7d:05:24:aa:55:2e:69:40:5d:
9a:bd:d6:f8:ae:ad:f4:d3:22:85:2d:93:5d:a2:64:
37:29:3c:56:b8:4e:88:00:b4:dd:eb:36:dd:95:b3:
23:72:04:d1:69:31:2c:20:e5:9d:42:4a:69:42:ee:
7c:88:38:6a:f0:6e:86:92:9c:d6:0d:69:a7:d2:68:
2a:78:54:99:b5:9e:d8:f2:a2:81:27:ba:86:44:28:
b7:d5:a7:93:59:20:74:f5:6e:73:75:b8:8c:15:a0:
c8:68:7f:d6:76:cb:cf:c4:c7:0b:15:e4:3f:f6:ab:
ae:0e:82:ae:c5:36:d3:5b:79:dd:87:4d:f1:cf:8a:
e4:41:55:5a:ab:73:c9:95:70:a1:a1:22:13:b9:52:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:69:E4:AF:A7:7C:FD:AA:FC:24:D2:10:5F:E1:F2:6F:B2:95:FD
X509v3 Authority Key Identifier:
keyid:67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/67596B6A4CD6BFE459E1A9C589B881FF37ABDA27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232302e302f32342d3234203d3e203531353539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.220.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7d:04:f6:a5:d9:21:e7:c6:96:be:23:eb:c1:4b:8e:38:79:
8a:46:18:c4:b7:62:e8:62:de:d4:0c:4e:64:42:99:52:53:83:
c9:fe:cb:5e:f5:4f:76:d3:6e:0a:25:19:d7:ab:1f:ff:3e:4c:
d3:67:00:c1:98:3c:d4:d2:5c:85:7d:f1:91:58:79:b1:b3:dc:
45:dd:05:8c:a0:c5:be:4a:d7:23:b3:64:77:b4:d4:30:30:cd:
af:8c:91:b2:a9:05:af:a1:a8:4a:6a:3b:b5:e0:5e:18:34:de:
c2:c8:f2:d4:dd:64:f6:46:f0:43:51:95:38:a1:16:59:2d:d6:
19:71:74:57:5b:c3:26:09:07:7c:07:5b:70:d2:7d:3d:c3:da:
aa:cc:c7:87:62:0e:d0:02:26:be:4b:7e:da:cb:ed:18:3e:f7:
0e:78:ca:5f:16:e2:ca:25:d2:b0:78:1a:11:24:26:d4:c0:c0:
35:55:44:5e:82:02:b0:7e:f5:d8:64:c0:72:e0:e6:ae:79:50:
27:b9:61:5e:35:b4:33:36:b8:a4:1f:f3:86:43:ed:3b:44:da:
4d:d0:1d:20:8f:ff:ca:5b:37:e3:74:49:2a:94:c7:e8:12:ce:
b8:9c:a4:3c:d3:8e:04:f1:25:f4:86:78:f7:3d:a5:f8:02:ee:
8d:66:eb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net