Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e3134392e3230342e302f32322d3234203d3e2030.roa
File: 34352e3134392e3230342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: 1N7Z0YZQ58/e7sgBRTsLCIIfqUR1Qy73KtlZfR5WfXs=
Subject key identifier: F4:9E:7E:13:F0:C7:05:4A:C4:C8:3F:0C:15:E3:20:3C:4B:1C:92:B3
Certificate issuer: /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial: 521365471BE89EA6CF0045233B5998FF46065D37
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3134392e3230342e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:05:15 +0000
ROA not before: Fri 03 Mar 2023 16:00:15 +0000
ROA not after: Fri 01 Mar 2024 16:05:15 +0000
asID: 0
IP address blocks: 45.149.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:13:65:47:1b:e8:9e:a6:cf:00:45:23:3b:59:98:ff:46:06:5d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
Validity
Not Before: Mar 3 16:00:15 2023 GMT
Not After : Mar 1 16:05:15 2024 GMT
Subject: CN=F49E7E13F0C7054AC4C83F0C15E3203C4B1C92B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:66:d7:ac:2a:61:83:2b:b4:4e:68:da:1f:
c3:3a:40:24:88:4b:93:45:f5:de:27:ae:7f:84:28:
1a:d7:2b:8f:d1:82:09:01:e3:f2:6b:f1:2b:9d:6b:
25:92:e2:0e:a3:25:83:5f:99:62:3c:2c:74:36:9f:
e7:92:11:62:fe:54:82:e5:7b:4b:21:50:33:1a:1f:
67:8e:e4:e9:82:80:b2:cc:c5:86:cd:d5:56:bf:c8:
15:da:a3:d7:fe:d8:dd:65:2f:d0:bc:c9:01:19:cf:
99:e2:66:95:c4:95:c6:f0:1b:86:07:05:d1:cb:2c:
d9:6b:09:1e:80:10:43:47:9d:00:4a:3b:90:5d:12:
7f:dd:1b:fb:97:24:4b:11:80:b5:25:59:57:f9:6f:
cb:12:d0:ea:62:04:d5:75:fc:c5:5c:1e:ac:ff:78:
b9:b3:41:6b:f6:a1:de:92:95:e4:41:b0:80:da:7a:
f4:b5:61:8b:56:f3:55:6b:0d:70:f1:b7:8d:f0:b4:
fd:e2:7a:6a:95:7f:de:f8:18:43:2d:34:24:14:a7:
f0:70:8d:49:0a:17:21:f6:c5:29:77:7a:20:6e:fb:
fa:5e:cb:b4:f6:cf:d1:0a:c0:45:ce:4e:ab:df:e2:
1a:3e:ee:5c:f8:16:ac:3e:4b:de:6d:30:5e:6a:bb:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9E:7E:13:F0:C7:05:4A:C4:C8:3F:0C:15:E3:20:3C:4B:1C:92:B3
X509v3 Authority Key Identifier:
keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3134392e3230342e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.204.0/22
Signature Algorithm: sha256WithRSAEncryption
42:51:08:9e:53:52:41:cb:bb:d1:2f:72:99:9e:3f:76:fc:4e:
75:9d:a8:53:44:ca:a1:b6:cb:ce:e7:46:d5:c7:fe:d3:8b:5f:
d3:ba:36:72:12:7c:a4:d9:42:67:97:ad:55:33:82:aa:1c:78:
4d:2e:46:25:f7:f4:49:17:c5:f7:4c:15:ba:c9:a1:11:4b:d9:
8f:8f:24:c2:01:79:ee:4c:09:6d:d0:c5:e5:2f:5a:68:53:9a:
c2:d3:03:02:e1:50:b5:e8:23:60:20:57:fb:58:c5:82:4b:8e:
25:be:af:71:e9:9e:3c:2a:2a:12:63:40:b9:91:84:00:bb:bf:
d1:ce:b7:d7:bf:64:ee:21:aa:20:9a:3c:b8:fa:01:ae:9e:e0:
31:db:8d:7a:d2:9c:55:92:35:55:93:e9:ac:a1:aa:85:ae:8c:
b3:ee:1e:3e:c6:47:98:e1:f0:75:bf:8b:a7:7d:5f:62:03:5c:
07:e6:4c:f9:39:b1:c3:07:69:0a:c5:14:15:0f:98:f6:77:26:
94:b5:fb:df:5d:42:b4:49:0f:b5:75:be:08:41:7a:ff:8e:8c:
da:bf:22:df:3f:97:de:33:a6:ae:29:99:b5:8d:21:61:40:c6:
7f:d3:35:91:df:3c:4a:92:01:8d:ff:a2:3c:b1:2c:92:3b:05:
9d:95:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net