Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e34372e302f32342d3234203d3e203534323532.roa
File: 34352e3135322e34372e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: H5+hF1+yaIjPdaQ9MdCNu06hLUX1xt0QbrR4gVNI3hg=
Subject key identifier: F9:0A:5B:BB:A0:B5:CE:C8:E5:75:10:FF:EA:4A:93:F1:59:7A:22:80
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0D8BFF504E4EC8A378BDD510E7D44384B329D273
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e34372e302f32342d3234203d3e203534323532.roa
Signing time: Thu 26 Jan 2023 11:48:43 +0000
ROA not before: Thu 26 Jan 2023 11:43:43 +0000
ROA not after: Thu 25 Jan 2024 11:48:43 +0000
asID: 54252
IP address blocks: 45.152.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8b:ff:50:4e:4e:c8:a3:78:bd:d5:10:e7:d4:43:84:b3:29:d2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Jan 26 11:43:43 2023 GMT
Not After : Jan 25 11:48:43 2024 GMT
Subject: CN=F90A5BBBA0B5CEC8E57510FFEA4A93F1597A2280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:02:b9:f6:dd:38:de:10:62:74:2a:1f:39:f7:
e4:0b:0b:aa:1a:c0:5c:b6:6f:77:56:b1:7a:ed:3a:
db:ce:3b:51:fa:76:52:9e:23:04:f8:59:c6:20:86:
97:d3:d4:87:a6:63:57:63:f7:d8:47:c5:bf:85:fe:
78:45:61:12:8b:92:df:3a:83:43:2c:f0:df:38:2f:
1d:a2:c8:ee:eb:6f:11:95:08:c5:bf:b5:47:61:c6:
6f:2d:09:b6:a5:15:03:57:f3:75:52:81:7f:6d:79:
8c:12:8a:9c:8c:2d:3e:05:aa:b2:86:45:f3:87:8b:
2d:1b:6c:a2:52:c3:5c:89:50:dd:5d:cd:f4:5b:d5:
84:81:53:6c:cf:5d:17:66:25:2d:a8:c4:85:c9:4b:
72:f9:31:29:b5:e7:3c:d7:4d:c2:81:6d:f7:c8:36:
45:a3:b8:31:65:05:5d:6c:f5:55:73:38:66:ab:8c:
5d:80:7a:e4:e0:c6:f9:b8:37:3d:d3:02:28:ae:ec:
8c:22:7e:1d:4c:37:bc:3e:d2:31:23:51:cc:04:be:
dd:e3:2a:5c:fc:43:65:6a:15:38:c3:63:42:ae:e5:
ff:af:74:3c:8f:6c:04:13:dc:8a:ef:ec:30:2e:05:
96:fc:7d:24:0e:b8:7b:25:47:58:24:f8:23:5a:67:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0A:5B:BB:A0:B5:CE:C8:E5:75:10:FF:EA:4A:93:F1:59:7A:22:80
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e34372e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.47.0/24
Signature Algorithm: sha256WithRSAEncryption
41:16:43:87:5a:46:23:f3:6d:97:f7:b3:57:af:2f:25:b0:3a:
b7:ad:3b:42:b8:06:f1:ec:6e:68:3e:7b:f6:23:c6:4e:3f:ed:
a1:85:39:ff:ec:07:53:70:78:56:d1:17:cf:89:cf:da:0f:85:
65:58:64:57:e0:d0:34:18:4b:9f:b7:94:ab:b5:d8:75:e0:93:
f2:c7:2b:7c:44:da:9c:17:d4:68:3b:af:1d:49:31:06:d5:a7:
5d:a6:69:56:44:de:19:14:7f:65:cb:d1:4b:7f:02:b7:66:4a:
bc:fd:9a:aa:1f:33:58:fb:a3:6e:8b:da:e1:55:11:f6:25:4b:
77:54:db:45:2a:9b:86:e8:7d:16:9f:61:ff:d4:d8:49:a0:a5:
fe:5b:d5:18:3b:7a:62:75:0f:aa:1c:58:a3:72:97:2b:a1:7e:
03:94:df:5a:95:a7:f7:66:e5:26:03:a7:3c:86:36:ae:8d:f2:
8b:50:2b:7c:98:25:20:54:cd:75:0a:30:2c:ab:8b:5a:1b:aa:
65:c1:7f:67:31:16:de:94:6e:6e:7c:ec:86:b7:cb:0a:ca:6f:
92:db:0a:b5:b2:47:6a:4e:dd:31:78:e1:53:91:bd:5f:65:2d:
5f:45:c5:42:19:65:1f:9a:9c:14:fb:87:ac:9f:ee:08:39:01:
b2:7a:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net