Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/55/352e3138302e36312e302f32342d3234203d3e20323133303335.roa
File: 352e3138302e36312e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier: 7uVaoWwiPMLAa3NLsJ6BLFOOKYKiNKxFFvw3PQbZbwo=
Subject key identifier: F6:A8:77:76:E4:88:3D:63:05:AF:FA:2B:67:51:47:AC:92:B7:C8:00
Certificate issuer: /CN=c9d78d8a48b0e6fa4d59727081d02afda59f8650
Certificate serial: 271E6F6A93A5AE4F72EDDD23F9A496BD38540CF4
Authority key identifier: C9:D7:8D:8A:48:B0:E6:FA:4D:59:72:70:81:D0:2A:FD:A5:9F:86:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydeNikiw5vpNWXJwgdAq_aWfhlA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/55/352e3138302e36312e302f32342d3234203d3e20323133303335.roa
Signing time: Tue 01 Dec 2020 23:25:47 +0000
ROA not before: Tue 01 Dec 2020 23:20:47 +0000
ROA not after: Tue 30 Nov 2021 23:25:47 +0000
asID: 213035
IP address blocks: 5.180.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:1e:6f:6a:93:a5:ae:4f:72:ed:dd:23:f9:a4:96:bd:38:54:0c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d78d8a48b0e6fa4d59727081d02afda59f8650
Validity
Not Before: Dec 1 23:20:47 2020 GMT
Not After : Nov 30 23:25:47 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:33:6f:47:e0:8c:05:2c:cf:9b:fc:63:ad:
47:b5:59:9e:05:8f:3f:82:ab:61:95:e2:0d:fb:3b:
ba:75:26:3b:03:69:2c:3b:ec:61:7c:4b:11:e4:55:
eb:83:be:58:49:5b:aa:9b:49:62:53:f5:5e:f1:68:
56:8b:8c:83:55:6a:c2:14:18:dc:5d:a1:7e:d3:ad:
85:d8:2c:5d:4e:45:fa:d4:ac:43:68:84:8a:e2:a1:
bc:6b:a0:7c:24:71:97:88:c2:0f:43:00:a2:c5:fb:
8a:fb:45:50:ef:b5:df:4a:e1:09:3f:50:82:c5:99:
9f:9c:99:4b:a8:e4:56:7a:cf:12:d5:4f:14:aa:68:
33:a5:de:39:4f:8b:09:97:fe:76:69:80:c4:49:fe:
f9:2b:32:62:dc:be:9d:26:8d:e5:20:b3:2f:1f:66:
ad:58:54:83:b1:23:a2:e1:13:33:79:ca:f9:fc:b8:
57:9c:96:97:35:41:8b:82:95:f8:2b:55:8a:25:06:
bb:72:60:36:2e:89:0a:89:d5:05:df:18:d9:0e:ef:
94:02:95:b6:2c:41:4c:a8:2d:4a:c1:4f:af:86:1a:
db:2c:38:62:c1:e7:3f:80:8c:15:0f:39:ab:9d:cc:
08:5a:7a:0c:93:63:fd:ca:c5:62:ed:f4:c4:40:8c:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A8:77:76:E4:88:3D:63:05:AF:FA:2B:67:51:47:AC:92:B7:C8:00
X509v3 Authority Key Identifier:
keyid:C9:D7:8D:8A:48:B0:E6:FA:4D:59:72:70:81:D0:2A:FD:A5:9F:86:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/55/C9D78D8A48B0E6FA4D59727081D02AFDA59F8650.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydeNikiw5vpNWXJwgdAq_aWfhlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/55/352e3138302e36312e302f32342d3234203d3e20323133303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.61.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:24:54:88:db:0d:ce:68:13:e4:56:35:85:af:ba:6e:3e:92:
ef:27:f7:a3:22:f2:1d:1b:d9:fb:d0:c9:22:f2:ff:66:1b:06:
24:2a:80:0e:ef:77:ac:99:68:a6:8c:4a:ff:93:a3:62:81:77:
73:ad:2c:c5:1d:80:fa:de:ef:70:eb:60:0b:93:18:59:e5:cb:
7e:57:86:c4:4f:f4:b2:b5:ca:7e:47:7a:29:a6:11:df:14:f7:
49:98:b1:f2:0f:68:bf:3c:98:dc:58:e6:47:3b:51:87:2e:9b:
21:9a:0b:04:f2:dd:6f:b8:3d:70:a5:6a:dc:6a:0a:bf:e8:d9:
91:99:40:6a:03:14:03:da:61:72:1f:c2:01:0e:48:46:27:03:
9a:91:51:57:c5:64:8b:46:9c:e7:da:5d:07:e9:67:f1:44:c8:
0a:29:1a:33:b0:46:b3:ca:95:28:88:ce:53:43:9b:c6:ef:1b:
53:9b:2b:20:e2:7b:2c:7b:2b:5a:ff:05:f4:c7:43:3d:e3:ac:
2e:21:ba:36:50:30:3c:de:0d:62:c9:e4:fa:bf:e0:32:1e:fd:
90:92:58:b9:48:e3:b9:42:6a:e8:8d:e2:0b:e1:5e:54:51:b0:
57:50:e0:f7:43:94:2a:13:ca:8f:8d:1b:f5:32:94:6e:9b:ab:
88:5c:d2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net