Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232312e302f32342d3234203d3e203235303938.roa
File: 34352e39302e3232312e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier: 61hAyfW/rR1E6+w9gyEVzWAX94gMTXnDDLitNyzKPkk=
Subject key identifier: 93:AC:16:A4:50:F0:C9:99:64:85:E3:E6:5C:34:E4:00:75:A5:CB:2B
Certificate issuer: /CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
Certificate serial: 5A9A9D10833BD9BDEF13D026E8E648D371FE975C
Authority key identifier: 67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232312e302f32342d3234203d3e203235303938.roa
Signing time: Mon 30 Nov 2020 19:12:27 +0000
ROA not before: Mon 30 Nov 2020 19:07:27 +0000
ROA not after: Mon 29 Nov 2021 19:12:27 +0000
asID: 25098
IP address blocks: 45.90.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9a:9d:10:83:3b:d9:bd:ef:13:d0:26:e8:e6:48:d3:71:fe:97:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
Validity
Not Before: Nov 30 19:07:27 2020 GMT
Not After : Nov 29 19:12:27 2021 GMT
Subject: CN=3082010A0282010100B6B135CCB591041A78267EABC8B3A9C447EB665F3C67BCDF5CCEF2FEE817BDCECD6AB98DC1F59060C7A64385B1A192950532F164624A1C7FBBC6DFE4395EE34E9DD47B32FC4C5E0C1707E6759FD31B7579426BEA4E55353EE495AD22BB0A65146CA1EFE965E812A7ED55E7396D1DB3A1FB857CCEAC8899EB312A1274D9C07B8FEEECBBCC17E67F8E018C428E10246014E30BFDFC30C7EAE18F29ED332F47DACC83A2879C3F1B6DF6E653D33F88E06C436BD05562FD0CEC0C30458808BF3907D2A7F0B5F38081598FC13CDB0D9BC5C85AB12558C2893DC2E3812670477189520A038D760FC77051F9C6A458C8D20BF8A60271E9726E3D4CBABA004351CDDA0F310203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:35:cc:b5:91:04:1a:78:26:7e:ab:c8:b3:
a9:c4:47:eb:66:5f:3c:67:bc:df:5c:ce:f2:fe:e8:
17:bd:ce:cd:6a:b9:8d:c1:f5:90:60:c7:a6:43:85:
b1:a1:92:95:05:32:f1:64:62:4a:1c:7f:bb:c6:df:
e4:39:5e:e3:4e:9d:d4:7b:32:fc:4c:5e:0c:17:07:
e6:75:9f:d3:1b:75:79:42:6b:ea:4e:55:35:3e:e4:
95:ad:22:bb:0a:65:14:6c:a1:ef:e9:65:e8:12:a7:
ed:55:e7:39:6d:1d:b3:a1:fb:85:7c:ce:ac:88:99:
eb:31:2a:12:74:d9:c0:7b:8f:ee:ec:bb:cc:17:e6:
7f:8e:01:8c:42:8e:10:24:60:14:e3:0b:fd:fc:30:
c7:ea:e1:8f:29:ed:33:2f:47:da:cc:83:a2:87:9c:
3f:1b:6d:f6:e6:53:d3:3f:88:e0:6c:43:6b:d0:55:
62:fd:0c:ec:0c:30:45:88:08:bf:39:07:d2:a7:f0:
b5:f3:80:81:59:8f:c1:3c:db:0d:9b:c5:c8:5a:b1:
25:58:c2:89:3d:c2:e3:81:26:70:47:71:89:52:0a:
03:8d:76:0f:c7:70:51:f9:c6:a4:58:c8:d2:0b:f8:
a6:02:71:e9:72:6e:3d:4c:ba:ba:00:43:51:cd:da:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AC:16:A4:50:F0:C9:99:64:85:E3:E6:5C:34:E4:00:75:A5:CB:2B
X509v3 Authority Key Identifier:
keyid:67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/67596B6A4CD6BFE459E1A9C589B881FF37ABDA27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232312e302f32342d3234203d3e203235303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.221.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d4:86:35:73:30:76:e4:25:3b:38:0d:4d:ad:70:fb:96:fa:
c7:03:f1:4d:23:50:cb:e6:35:52:a2:7b:a7:0f:17:a8:65:08:
da:e3:16:c3:5a:a7:ed:90:c1:0e:78:ec:af:e7:1a:8f:b9:48:
3f:62:ab:53:d2:e1:44:66:34:c7:62:aa:fc:31:be:27:01:fb:
46:0f:62:e7:2f:15:93:08:4e:1f:6e:d9:8a:34:86:68:b3:26:
09:72:23:1e:b0:66:d4:31:91:0b:49:96:ac:4a:0c:a0:c6:ae:
e3:7b:53:d2:d7:ff:34:83:e3:0f:45:31:da:96:b1:d2:c7:98:
b2:55:19:d4:50:4d:46:bd:49:9c:20:7b:c8:7e:6d:2d:21:a5:
18:1a:db:b6:41:0c:32:fb:01:e0:bf:67:fa:6a:79:5b:62:51:
c9:cc:d0:d1:2f:48:13:77:ab:90:2e:4c:bd:ff:d4:31:d2:51:
07:81:f0:06:df:d8:eb:1e:fa:4e:d2:80:66:1f:20:60:f6:cb:
ec:d4:a5:07:98:45:87:9f:dd:e4:12:3a:5a:02:c5:5f:0b:92:
8e:0a:36:98:9e:df:03:4f:98:b1:a4:e3:ae:ed:16:2d:94:2f:
d1:de:03:83:99:dd:4a:e5:fe:ba:90:4c:1c:aa:ff:53:2b:ee:
5e:91:89:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net