Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133342e302f32342d3234203d3e20323037373837.roa
File: 34352e382e3133342e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier: aBl/4kN8hUkB3I+K9UeDHlWYd5gnawdEkZdR2V4rq0g=
Subject key identifier: 79:D8:1D:E4:77:B1:D2:9C:2C:DE:65:71:91:2E:8B:B0:C9:7A:A1:AA
Certificate issuer: /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial: 33149B7FC70873A1281A7401C49312F5FB769590
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133342e302f32342d3234203d3e20323037373837.roa
Signing time: Sat 22 Oct 2022 04:33:56 +0000
ROA not before: Sat 22 Oct 2022 04:28:56 +0000
ROA not after: Sat 21 Oct 2023 04:33:56 +0000
asID: 207787
IP address blocks: 45.8.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:14:9b:7f:c7:08:73:a1:28:1a:74:01:c4:93:12:f5:fb:76:95:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
Validity
Not Before: Oct 22 04:28:56 2022 GMT
Not After : Oct 21 04:33:56 2023 GMT
Subject: CN=79D81DE477B1D29C2CDE6571912E8BB0C97AA1AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:a5:9b:eb:a7:0b:c4:f7:18:67:c8:6b:35:
79:b3:81:52:54:1e:4b:7d:83:fe:a9:6e:6f:b2:3d:
c6:9b:48:c1:1f:a2:83:ef:bb:18:4d:14:99:ac:22:
04:53:0b:77:7a:1f:b4:3a:07:d0:bb:20:90:50:e0:
be:3c:60:48:1b:34:d8:bd:9c:45:12:71:7e:f8:29:
90:49:d1:1b:26:20:89:5d:1a:88:73:5c:9f:04:d1:
6d:f8:a4:07:7b:72:c2:2a:bd:da:30:3c:db:c3:21:
a6:f7:2e:9b:23:aa:02:80:a4:24:bf:6d:51:8b:cd:
3a:3a:fe:ca:f7:eb:94:71:4f:24:8b:6e:8e:33:1c:
e8:bd:17:3a:81:10:86:c2:a5:1b:ad:7a:37:bb:0e:
65:db:2e:66:71:d9:c4:75:57:1b:4d:df:b0:64:40:
24:78:4e:af:bf:bc:42:d8:2a:88:24:68:eb:b9:89:
84:c3:de:3c:c9:69:d9:d6:1e:e2:19:90:97:e9:7a:
9c:4b:79:d4:b4:12:f5:85:e7:0a:f3:bf:9e:56:6c:
57:d0:35:31:11:5d:10:3c:ca:ef:51:6a:cd:69:85:
46:02:c6:d9:c5:e1:e8:ba:8a:37:32:29:cc:67:18:
d3:a7:2c:e8:ba:72:a2:4a:d9:2b:d5:8f:9e:78:37:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:1D:E4:77:B1:D2:9C:2C:DE:65:71:91:2E:8B:B0:C9:7A:A1:AA
X509v3 Authority Key Identifier:
keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133342e302f32342d3234203d3e20323037373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:42:00:f9:8c:2a:50:74:97:39:a7:14:02:42:b0:92:4e:1c:
df:8c:c0:65:70:2c:ea:55:4e:b7:3e:14:42:bd:62:ee:21:33:
ac:7a:dc:e2:e9:d9:89:c3:1f:0e:38:f1:e0:f2:9c:38:56:da:
d8:93:28:88:d8:59:7e:2b:49:3f:e1:83:b6:24:8c:8f:59:ee:
e9:4a:c2:db:da:c9:18:e0:08:c3:9c:23:6c:1e:fa:53:9d:10:
73:7a:12:36:30:52:f9:00:42:a5:fd:06:75:2f:52:35:c9:32:
2c:7f:e3:ca:8e:72:51:fa:6f:79:fe:09:77:bb:19:6c:3e:c0:
3d:79:c1:aa:a8:51:96:c6:72:39:7e:3f:df:59:e8:25:3e:49:
98:62:3a:5b:64:55:be:12:ee:14:91:e5:1c:77:96:10:19:cb:
bc:d2:0f:1d:02:43:69:29:ae:c9:28:d6:53:48:a2:70:5e:12:
fa:9e:dd:75:c8:07:bb:9e:23:26:c6:35:b1:a7:ce:37:67:a6:
67:83:65:15:1d:94:ee:9e:e0:e7:0b:f0:ae:be:8e:5d:02:99:
26:60:4c:a5:90:de:c1:4e:4f:8d:b8:e9:50:07:a8:6c:5a:a2:
67:f4:c5:21:20:fb:e3:9c:2a:53:8e:7d:e0:01:fd:e5:5b:4a:
9e:29:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net