Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e34372e302f32342d3234203d3e20333238333737.roa
File: 34352e3135322e34372e302f32342d3234203d3e20333238333737.roa (raw, json)
Hash identifier: bvudM4aIO072Zm786brBNkpEdxTprnanTqVqQtSFUPI=
Subject key identifier: AC:67:D4:88:6D:1A:35:6D:A5:5F:A7:A6:90:48:93:75:34:8D:1B:AE
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 2C2438040AAF070581F0E66A646B6FFA28D7B210
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e34372e302f32342d3234203d3e20333238333737.roa
Signing time: Thu 26 Jan 2023 11:48:39 +0000
ROA not before: Thu 26 Jan 2023 11:43:39 +0000
ROA not after: Thu 25 Jan 2024 11:48:39 +0000
asID: 328377
IP address blocks: 45.152.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:24:38:04:0a:af:07:05:81:f0:e6:6a:64:6b:6f:fa:28:d7:b2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Jan 26 11:43:39 2023 GMT
Not After : Jan 25 11:48:39 2024 GMT
Subject: CN=AC67D4886D1A356DA55FA7A690489375348D1BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:cf:41:19:d4:86:18:1c:b1:5f:6b:b0:0d:
ea:17:bb:6a:f4:8d:34:67:29:06:77:17:35:5f:3b:
88:14:27:9b:e6:7b:cd:cb:0e:a3:03:ae:58:34:58:
13:a4:02:14:5d:3b:e4:b8:15:af:24:2a:67:fe:6d:
03:ff:ee:c3:9c:c3:f0:e3:6a:5f:29:11:21:06:1b:
f6:ab:c1:04:82:19:72:11:12:b9:06:e5:7d:72:21:
d6:23:60:14:46:64:9a:97:1d:96:bd:88:47:a3:22:
a9:1e:ca:28:e8:77:a3:8c:91:73:ee:3a:27:da:75:
f1:90:1e:a1:2b:40:d5:dd:08:d6:50:7f:e7:58:bb:
16:44:85:97:09:d3:23:81:00:68:40:a7:f9:30:ac:
39:bb:ab:8e:6e:a1:94:bd:68:59:c7:e1:d9:5b:e8:
fe:76:c0:21:aa:e3:6e:d6:05:34:39:08:c5:62:71:
87:67:15:67:c4:04:11:d7:6b:ae:4d:b1:54:c4:44:
bd:47:81:fe:d5:37:af:46:16:81:94:5e:b1:d3:e2:
22:1c:6f:08:ec:d4:65:9c:0c:61:cd:d4:21:a7:ff:
19:af:fb:71:bc:83:6c:1f:25:11:9d:4e:76:f4:63:
e0:85:a2:da:69:a9:15:42:ab:e1:44:44:f3:65:67:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:D4:88:6D:1A:35:6D:A5:5F:A7:A6:90:48:93:75:34:8D:1B:AE
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e34372e302f32342d3234203d3e20333238333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.47.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e4:b2:67:01:90:d6:31:ad:e3:6a:b5:0b:89:1b:cc:c4:83:
be:8c:b9:c6:5a:ba:f5:41:80:1f:79:3b:74:a1:3b:7d:39:fe:
55:54:e1:33:f0:36:10:b5:a8:ff:0c:ca:ec:05:e2:9f:5d:d6:
47:83:41:51:6e:e0:bc:ba:b9:a7:07:a6:c1:49:fe:ea:f7:46:
2c:8a:5d:48:72:73:00:9f:7b:91:b1:24:eb:b5:37:db:b0:e9:
c1:6c:82:ea:ef:e3:f5:b2:c0:24:f7:14:a5:25:47:9d:e6:46:
60:95:e2:0d:73:1a:18:20:ac:38:f9:6d:23:f7:6f:17:49:0d:
85:b0:36:4f:a8:f7:de:0f:47:eb:3d:16:e3:ab:13:a1:84:3b:
3c:4d:c1:67:4b:ed:75:1f:5d:ae:9b:0d:bb:bc:84:18:40:d0:
e5:31:a9:9b:28:fe:9d:1d:4c:4f:44:7f:3a:f2:8c:75:3d:2b:
df:2d:71:54:cb:43:60:2a:1a:2c:ec:5b:cd:6c:e0:03:53:54:
ff:b2:e7:62:10:ce:c0:22:e4:3d:6d:5e:14:48:10:d8:7e:ef:
bc:ac:0c:7b:51:07:3f:12:38:2f:55:09:9e:01:fd:b7:08:28:
12:94:ad:f1:32:e5:2d:65:40:8f:9b:4b:91:f7:e5:cb:af:65:
0b:09:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net