Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e39302e3132302e302f32322d3234203d3e2030.roa
File: 34352e39302e3132302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: Kz+cXDjpsICzA1zv9pZ5cTcnkgSVyixFGG6DcGtB15s=
Subject key identifier: A9:33:19:F1:09:24:37:9D:F7:D1:8F:48:6B:27:82:C5:4A:05:0F:07
Certificate issuer: /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial: 4B20C80EF14FD25D24AF8A7BB3DD5600E50AD23F
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e39302e3132302e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:04:23 +0000
ROA not before: Fri 03 Mar 2023 15:59:23 +0000
ROA not after: Fri 01 Mar 2024 16:04:23 +0000
asID: 0
IP address blocks: 45.90.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:20:c8:0e:f1:4f:d2:5d:24:af:8a:7b:b3:dd:56:00:e5:0a:d2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
Validity
Not Before: Mar 3 15:59:23 2023 GMT
Not After : Mar 1 16:04:23 2024 GMT
Subject: CN=A93319F10924379DF7D18F486B2782C54A050F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:86:74:c3:7c:25:99:ec:2d:44:41:5a:46:ed:
7c:8d:6e:be:dd:a6:b2:b2:2f:de:52:2b:40:66:22:
8a:09:45:6c:91:b4:f7:04:cb:bb:f4:9e:21:f6:dd:
78:62:35:9a:56:9f:99:53:55:ac:ac:19:e8:1d:cc:
02:c0:48:c3:ca:43:4d:3d:50:7e:96:73:19:bc:30:
b8:2b:9f:4a:f1:aa:18:e5:2a:40:fc:da:21:e0:b3:
53:b7:4c:18:c2:c6:6a:80:a1:a9:bc:f1:43:6a:d7:
9f:e1:73:73:84:52:db:d1:73:1e:bb:a2:76:cd:5c:
ec:31:95:8e:ee:4d:04:fe:50:70:0e:da:06:6e:a7:
eb:f7:04:22:a9:88:ce:01:ce:7c:5e:a7:d9:2e:a5:
5c:ce:c6:0d:85:bc:53:db:aa:35:d0:c2:63:2a:c4:
73:fb:d0:02:dd:39:e1:98:2a:e8:d1:1d:57:8a:08:
28:7f:9d:24:35:c2:db:36:77:f2:19:41:4c:d0:35:
26:c7:b6:af:4e:e1:18:66:44:29:17:90:97:dc:b8:
80:d1:47:bd:a5:a7:f4:20:e6:ab:92:96:72:28:4a:
84:f1:24:2d:0a:a1:93:cb:2b:62:92:b0:34:eb:4b:
41:42:2a:bc:d2:63:6e:2c:c8:86:af:6c:00:b7:0f:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:33:19:F1:09:24:37:9D:F7:D1:8F:48:6B:27:82:C5:4A:05:0F:07
X509v3 Authority Key Identifier:
keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e39302e3132302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:e1:08:59:01:e1:6d:68:d2:fb:a9:55:3c:f5:f1:9f:ec:15:
80:92:41:6e:96:2b:0d:c9:6f:44:bd:2e:b8:39:95:94:4c:19:
8a:12:25:5d:9b:3f:f6:de:63:13:78:53:1e:fb:30:18:0d:d5:
48:03:e1:e3:fb:72:0b:81:d5:9c:a2:2b:cb:26:af:f2:7d:2f:
2c:a8:8a:3b:b9:38:99:3e:77:13:9f:96:2f:15:3a:65:1c:b1:
34:b7:95:fd:4d:60:c3:b5:cb:ce:2b:f9:77:1c:5b:2a:62:1a:
84:6b:f0:f0:40:0e:c0:28:cf:4f:f7:cb:95:78:29:21:40:e0:
08:32:12:2e:df:2a:bc:e7:61:f0:cf:46:8c:c0:aa:4a:18:e7:
5f:ec:ea:09:c0:b5:a7:14:73:b1:d0:00:14:69:80:db:9b:c4:
44:0c:cf:3a:e6:99:34:a4:ad:4a:5c:46:2b:06:01:68:1a:3a:
35:be:7f:c3:48:ad:98:9c:25:56:39:73:ae:29:cc:df:55:3c:
f6:d6:56:f9:6b:d3:c7:94:ba:c2:07:1c:50:b9:ea:ab:1a:e8:
0c:a0:21:1d:09:a8:bf:fc:a3:e1:21:99:a1:56:85:9e:4e:00:
1c:e0:40:b1:31:01:a3:b3:9e:b2:a0:ef:77:8f:c3:03:20:42:
05:86:de:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net