Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131302e39322e302f32322d3234203d3e203138353330.roa
File: 3139342e3131302e39322e302f32322d3234203d3e203138353330.roa (raw, json)
Hash identifier: Q5jio2tgwVAyxpx8rMAlilUJfSVMJg2wociXSAiEVbY=
Subject key identifier: F8:97:B9:D6:91:9C:ED:95:63:D6:73:94:AA:8D:2A:CE:CA:C2:B9:30
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 7C8F54786AE454D5A44CBB6AE6139861A7C77F01
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131302e39322e302f32322d3234203d3e203138353330.roa
Signing time: Fri 27 Nov 2020 15:10:21 +0000
ROA not before: Fri 27 Nov 2020 15:05:21 +0000
ROA not after: Fri 26 Nov 2021 15:10:21 +0000
asID: 18530
IP address blocks: 194.110.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8f:54:78:6a:e4:54:d5:a4:4c:bb:6a:e6:13:98:61:a7:c7:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Nov 27 15:05:21 2020 GMT
Not After : Nov 26 15:10:21 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:9c:fe:e1:f2:8f:fc:9b:d1:d8:c2:a5:ef:
db:3f:73:5f:c3:db:64:8d:ad:92:c3:45:85:85:27:
bb:8d:43:2d:17:3d:be:ba:31:56:2b:39:e2:83:7d:
c4:c4:82:43:23:66:67:c8:92:71:69:5d:ba:ca:87:
6d:22:fb:e0:4d:e6:0c:99:73:04:99:06:e8:fd:28:
57:1a:e6:1e:57:c1:ba:04:95:97:69:57:77:b3:bb:
c5:9e:7d:29:1e:7e:48:bf:96:b4:93:0f:f2:5e:2b:
bb:ff:fc:6e:02:31:41:f7:5a:f5:db:e1:89:41:b8:
6a:e3:a0:3e:1e:c0:af:42:73:6b:44:f5:9c:4d:be:
17:54:7f:22:4f:98:70:78:cc:92:62:79:2f:08:de:
94:5a:91:29:54:15:9b:ec:e8:11:ff:8e:28:94:e7:
ac:41:71:bb:51:af:49:37:87:8b:68:52:78:9f:2d:
c1:a0:0b:fa:38:01:71:75:f2:73:9e:c2:f9:37:a0:
0b:6e:32:77:dc:e7:e5:7c:1c:50:e3:c0:d0:81:ee:
ee:fa:f3:63:fc:21:24:ea:ef:23:70:8e:c3:ba:4f:
00:91:46:9a:a3:70:ec:75:75:ec:68:bb:8b:fb:8c:
3b:ec:a2:e3:ae:10:2f:67:c5:58:08:1e:c4:49:f2:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:B9:D6:91:9C:ED:95:63:D6:73:94:AA:8D:2A:CE:CA:C2:B9:30
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131302e39322e302f32322d3234203d3e203138353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.92.0/22
Signature Algorithm: sha256WithRSAEncryption
55:8e:1e:da:b2:1c:61:d0:18:25:20:45:89:85:ec:81:6b:a5:
65:28:ee:74:78:6b:fa:a3:f9:0c:05:23:77:8b:02:3e:eb:28:
0c:6d:ac:96:34:d7:72:96:37:89:c7:e7:04:9f:ea:a4:3e:1a:
0c:ce:a5:55:5a:90:9c:32:71:45:ff:78:6f:19:72:f4:cd:73:
27:85:ee:43:a7:6e:06:ac:03:98:6a:ef:95:90:ba:0a:2d:50:
0b:97:50:a8:ce:bb:b8:dc:ce:85:65:8d:46:6a:8b:93:0f:9e:
cb:d0:8a:c6:40:2e:e8:95:9e:61:80:07:56:11:dd:7c:47:77:
38:46:a4:d0:94:a1:f9:9a:72:d6:58:be:3c:be:6d:84:fd:6b:
ae:06:25:82:84:8e:31:34:ef:a5:6a:e8:d6:97:6e:4e:58:8e:
43:ac:f9:10:a9:9f:0a:37:43:1c:c3:1a:33:c1:4b:a8:23:5e:
62:55:42:a1:55:85:af:32:12:81:86:58:d5:da:44:29:c4:b5:
2c:3e:49:c2:82:d3:c5:db:fb:e5:a9:f1:a6:47:bb:b5:7b:3f:
d2:66:34:48:13:ee:47:a2:b3:b9:c3:03:66:a4:da:90:ee:a8:
d9:47:4a:3e:b4:a7:44:da:42:92:cd:a9:42:a1:e3:4c:0b:57:
75:58:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net