Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3139302e302f32332d3233203d3e203439373033.roa
File: 34352e3135322e3139302e302f32332d3233203d3e203439373033.roa (raw, json)
Hash identifier: 5mMICmSvnU0wmLbTz54/AUapZjup7pbqbcSPIBvNhkM=
Subject key identifier: 60:23:9C:62:21:C1:50:B5:65:8A:79:79:42:B9:39:EE:35:ED:C9:B7
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 29EA36C839677257D69473CEE9200518288A2C71
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3139302e302f32332d3233203d3e203439373033.roa
Signing time: Wed 08 Mar 2023 08:34:02 +0000
ROA not before: Wed 08 Mar 2023 08:29:02 +0000
ROA not after: Wed 06 Mar 2024 08:34:02 +0000
asID: 49703
IP address blocks: 45.152.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ea:36:c8:39:67:72:57:d6:94:73:ce:e9:20:05:18:28:8a:2c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 8 08:29:02 2023 GMT
Not After : Mar 6 08:34:02 2024 GMT
Subject: CN=60239C6221C150B5658A797942B939EE35EDC9B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:a9:d9:0d:14:a4:48:8d:b4:9b:2e:2e:0c:
0c:71:a2:70:4b:3a:3f:c2:ea:ed:b8:fd:c4:1b:30:
d3:d6:c3:36:77:6c:ed:85:4e:a9:10:5a:2c:8a:bd:
99:14:66:4f:2d:b7:f2:14:ac:0f:cb:52:bc:bf:c3:
64:c6:1e:be:59:0c:ed:9c:09:a4:de:ab:f7:77:e6:
a6:09:16:28:1e:50:6d:af:bd:29:20:7a:a8:a2:91:
36:4a:83:55:4c:77:79:dc:c2:17:a8:10:c1:b0:25:
fd:8d:a5:8d:10:29:fc:0e:03:fa:37:13:32:e8:aa:
de:70:a0:02:9e:53:95:b9:7c:41:7c:55:29:39:62:
2c:1f:b2:3f:9b:c1:7f:20:a2:e0:47:92:d2:be:8f:
0c:00:c3:a6:c8:e2:cf:29:18:31:fc:d6:9d:0e:36:
64:73:c1:79:a1:4e:bd:b1:e1:7b:85:24:d5:9a:f0:
7d:b6:22:82:8b:2b:70:c4:23:c3:6f:e8:0a:5c:00:
f3:5b:3e:1b:af:84:2d:33:a0:8d:e8:7e:af:fb:8e:
42:55:e4:03:ff:51:91:16:ca:55:6f:c8:b2:10:39:
0f:ff:a7:4c:0c:35:0b:dd:f6:43:f8:91:4e:e4:df:
db:2e:70:0d:a2:22:4d:86:cd:92:90:d4:cb:87:7a:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:23:9C:62:21:C1:50:B5:65:8A:79:79:42:B9:39:EE:35:ED:C9:B7
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3139302e302f32332d3233203d3e203439373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.190.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:04:ac:13:b2:97:89:28:63:58:f7:00:72:1c:7d:5b:5c:af:
d5:3f:b5:ab:25:e7:a3:13:4f:51:82:08:53:60:fd:9d:b1:0b:
ad:7c:65:58:24:62:f3:5a:87:95:7b:e6:fd:c2:10:fd:fd:64:
05:39:06:c6:dc:71:26:16:25:1f:42:17:41:23:d9:72:9e:09:
99:8e:4a:7e:76:51:d5:39:13:d0:a3:ef:d5:37:fd:4a:ab:3f:
53:01:5d:86:c1:b1:dc:e9:2b:e4:15:c0:53:fe:71:36:12:43:
f9:81:5b:53:b1:5f:28:31:fa:a8:03:04:08:10:3e:a4:d9:65:
24:fd:d3:52:17:1b:dc:8d:ed:08:cd:79:e6:d1:7a:a2:13:16:
c2:2b:ea:f9:39:81:e5:41:cd:6b:40:76:85:ab:6e:9b:a2:b3:
b5:7f:9c:17:be:93:b4:8f:09:98:32:14:96:90:fe:53:27:2a:
5e:2d:4c:18:53:ea:f5:f6:7d:52:1e:d2:c0:b5:50:3f:1e:e6:
d2:4a:df:77:73:d3:34:cc:fb:8e:f7:cc:cf:92:ff:7d:53:81:
31:69:a1:03:ae:22:e0:14:15:4d:20:97:2f:b7:7f:e9:75:0a:
97:5c:4e:0e:dc:e8:f9:7e:50:aa:9a:7e:da:09:4f:35:55:5d:
b8:01:5f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net