Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e3132382e34342e302f32322d3234203d3e20323033303631.roa
File: 34352e3132382e34342e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier: iqLVrhd03iI9iX+MCKnI2M1jozGgGepkEpRQNBdgDWE=
Subject key identifier: 0C:A9:4C:42:2E:C6:89:20:17:17:81:E3:DB:79:FD:C6:D5:76:9B:D5
Certificate issuer: /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial: 163AC9D644B4D2C06266C7695240C6355DBDC9DC
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3132382e34342e302f32322d3234203d3e20323033303631.roa
Signing time: Sat 22 Oct 2022 04:33:56 +0000
ROA not before: Sat 22 Oct 2022 04:28:56 +0000
ROA not after: Sat 21 Oct 2023 04:33:56 +0000
asID: 203061
IP address blocks: 45.128.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3a:c9:d6:44:b4:d2:c0:62:66:c7:69:52:40:c6:35:5d:bd:c9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
Validity
Not Before: Oct 22 04:28:56 2022 GMT
Not After : Oct 21 04:33:56 2023 GMT
Subject: CN=0CA94C422EC68920171781E3DB79FDC6D5769BD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:bf:5e:41:8c:de:42:81:d2:b1:8b:49:01:
2e:ac:e5:50:ea:08:f4:eb:7b:d6:b8:d6:d8:69:b9:
5c:ec:0c:68:98:03:cc:7e:11:74:38:18:60:75:5c:
fc:76:53:78:e2:cf:39:b7:62:8c:34:8a:e9:60:49:
0c:bf:54:ff:1f:e7:58:47:da:b5:6b:9d:5e:ff:b8:
74:83:1c:48:11:62:94:e1:b9:df:75:c4:e1:12:c6:
42:cd:d8:bc:24:00:02:73:55:b7:3a:ab:11:c3:66:
b4:fb:1c:ae:12:42:a1:8e:5e:71:83:65:f4:cd:6c:
78:0f:3b:1e:b1:a9:23:f1:b7:16:a3:1a:31:27:76:
50:d9:e5:80:e5:2d:00:93:5c:93:73:5d:34:80:ea:
dc:e7:23:87:bc:7f:d7:63:b4:18:1d:96:5f:17:33:
36:f9:29:3c:d4:66:3c:ef:bd:bf:3a:73:96:90:6a:
de:ba:5c:d4:db:0e:a4:a7:a4:72:d5:50:cc:9b:35:
ea:c3:48:ea:cf:81:b9:2b:11:d9:af:6d:e2:dc:6d:
19:c6:6b:bc:8a:82:e1:07:54:72:f4:d7:81:40:ee:
f6:3d:20:dc:f6:0b:01:35:aa:6a:19:69:dc:1d:61:
81:45:9c:04:53:90:77:07:14:90:dd:9a:05:41:ec:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A9:4C:42:2E:C6:89:20:17:17:81:E3:DB:79:FD:C6:D5:76:9B:D5
X509v3 Authority Key Identifier:
keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3132382e34342e302f32322d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.44.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:1c:22:79:05:fb:3b:8e:cc:86:12:1a:07:9f:9b:d1:f0:1a:
2d:56:d5:d9:a5:5e:ff:59:36:e2:f7:3d:3c:48:20:ba:f8:d7:
b2:da:8b:e4:52:e4:b0:d9:38:04:83:b8:68:55:3b:8d:ef:ac:
6a:de:83:7f:cd:19:3d:92:11:cb:25:60:ee:35:bc:ef:98:88:
60:2b:2c:ec:0a:72:00:34:ca:aa:64:f6:91:52:ad:81:ef:c8:
57:84:f0:24:bb:ff:5a:f6:65:c4:a0:6e:78:6a:0b:65:82:5c:
22:d8:8e:4f:66:b4:57:e2:d9:50:00:c1:b0:e9:b8:83:5a:4c:
ce:28:4e:05:d6:a4:d4:9d:1f:14:c9:6f:e3:7e:1f:98:6c:cf:
88:b4:2c:b5:2b:fd:de:27:f4:a1:13:2e:33:7e:e3:bf:ff:30:
7b:24:cc:6c:7e:6c:d5:67:aa:c6:8d:ac:0a:fd:13:69:e0:5b:
09:2f:11:04:8f:43:b7:d1:f1:d4:5b:c5:04:1f:3a:fc:1b:b8:
54:a0:7e:1d:4d:31:97:b8:c4:f6:6f:69:d2:28:eb:44:e3:b6:
d1:00:be:2e:35:b8:d9:f6:a6:d6:cf:72:46:e7:36:44:0c:1f:
38:74:3e:5b:07:a1:13:6b:70:20:74:07:31:e4:fa:de:1f:1a:
aa:bd:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net