Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e31342e39302e302f32332d3234203d3e203631333137.roa
File: 34352e31342e39302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: VdQcgiyUoxQZ5Sn9BYsSFNOrETOud8PRR+melC8MjsM=
Subject key identifier: A8:D5:05:CF:BF:86:D0:F8:B3:14:9B:8B:26:A8:08:1E:82:C6:8D:A2
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 25FD078B556C960DCF89495DAD530EF6EBE421BC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e31342e39302e302f32332d3234203d3e203631333137.roa
Signing time: Thu 26 Jan 2023 11:48:41 +0000
ROA not before: Thu 26 Jan 2023 11:43:41 +0000
ROA not after: Thu 25 Jan 2024 11:48:41 +0000
asID: 61317
IP address blocks: 45.14.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:fd:07:8b:55:6c:96:0d:cf:89:49:5d:ad:53:0e:f6:eb:e4:21:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Jan 26 11:43:41 2023 GMT
Not After : Jan 25 11:48:41 2024 GMT
Subject: CN=A8D505CFBF86D0F8B3149B8B26A8081E82C68DA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:84:47:e7:bd:5e:fd:3f:a2:87:0b:c5:07:
cd:5f:90:a9:9b:2d:16:70:8c:63:0a:d7:c8:16:7e:
07:cc:7e:23:7f:12:54:8e:64:d7:40:83:43:6c:25:
f7:40:05:bf:fd:f6:8c:d2:c8:f7:0d:77:2f:64:fa:
aa:48:43:e0:c4:16:f3:15:1d:10:cf:a1:19:6c:3a:
db:80:77:f3:47:52:ff:f5:df:af:3a:c9:bc:d9:37:
59:bf:84:ed:17:53:f3:e6:d7:78:2c:e8:3c:36:8d:
f5:17:03:7f:40:76:1e:f5:91:b5:73:31:2a:4a:e3:
d5:9d:09:be:49:e1:d4:66:d2:c7:41:a9:80:db:97:
49:de:36:35:cd:70:f6:41:e8:b5:4c:54:96:4d:22:
24:eb:69:6b:a6:75:e4:2f:42:c5:90:84:ae:0b:8b:
26:d8:39:25:cf:2d:c4:b7:3b:23:86:15:c2:18:4c:
ca:5c:71:7f:69:58:bc:f5:c1:4b:6e:f5:ef:45:dc:
ad:f5:da:50:5f:ef:99:2b:b7:6a:7e:35:19:2a:97:
fe:48:16:ca:9e:0a:b9:a4:28:00:29:63:d7:6f:57:
e0:2e:dd:b2:67:bc:40:20:27:b4:3b:2f:0c:59:64:
d1:e7:9f:78:2e:58:8e:50:27:ac:bc:a5:ea:7f:23:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:05:CF:BF:86:D0:F8:B3:14:9B:8B:26:A8:08:1E:82:C6:8D:A2
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e31342e39302e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.90.0/23
Signature Algorithm: sha256WithRSAEncryption
59:8b:d3:32:eb:49:0e:a3:52:66:ff:52:e6:c5:09:04:c2:99:
55:5b:71:4a:8b:8a:17:db:fc:f3:5c:4b:64:6f:0d:2a:35:fd:
f1:ff:18:85:bb:fd:be:b4:01:6a:02:ac:27:2b:4a:78:b8:49:
84:97:ec:2d:a1:3d:44:a2:05:95:fe:00:40:a9:61:58:04:e0:
ab:b2:73:81:97:9d:ae:c3:1c:76:71:96:10:e8:e5:99:21:63:
1a:b2:15:ec:2d:5c:ae:fb:b3:23:79:56:16:93:f8:92:10:1d:
47:37:0e:fb:fd:a0:14:4d:f2:62:8d:bb:81:94:f9:dd:09:78:
5a:a4:e9:97:ee:27:79:6e:66:c0:20:19:da:36:9a:36:30:95:
95:d2:09:27:2d:53:54:ce:e5:83:05:61:70:f7:98:a2:0a:2d:
cf:3b:04:70:b8:75:5d:72:eb:d6:b7:98:a3:2a:98:13:d4:21:
24:69:12:9e:72:31:27:93:90:f7:42:c6:d5:c7:66:6e:37:1f:
47:0a:a6:5d:6a:81:bc:c9:4f:ca:52:e2:56:c9:22:38:72:1b:
d3:f8:bf:c3:e9:e8:ac:b1:9d:6a:47:21:3f:08:af:1d:63:20:
27:7c:3d:b0:61:d1:50:58:4a:d3:b5:28:f5:cc:fa:3c:4e:93:
bb:72:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net