Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135342e302f32342d3234203d3e203430363736.roa
File: 34352e31302e3135342e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: AQgwluErzMGyRD5t96jKJUf0rmEPgwGt4bVeRPztz94=
Subject key identifier: B0:BE:5D:AE:0B:0F:8B:D0:B3:3D:EF:D7:7D:10:57:70:0A:A6:16:57
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 73BBAA44B0E48EB819DA5FE9DDC0AD55A48B51B1
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135342e302f32342d3234203d3e203430363736.roa
Signing time: Tue 28 Jun 2022 04:41:03 +0000
ROA not before: Tue 28 Jun 2022 04:36:03 +0000
ROA not after: Tue 27 Jun 2023 04:41:03 +0000
asID: 40676
IP address blocks: 45.10.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:bb:aa:44:b0:e4:8e:b8:19:da:5f:e9:dd:c0:ad:55:a4:8b:51:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Jun 28 04:36:03 2022 GMT
Not After : Jun 27 04:41:03 2023 GMT
Subject: CN=B0BE5DAE0B0F8BD0B33DEFD77D1057700AA61657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:0a:39:28:dd:3a:a5:0c:10:a6:e2:de:48:
71:5e:86:2f:1d:70:13:c6:78:74:db:34:99:24:15:
51:43:22:d3:68:bd:9e:a5:e4:cd:ba:d2:b3:b2:a9:
e2:1d:e7:26:76:31:57:72:c4:d8:22:f8:e4:70:4b:
35:5b:05:0b:3f:30:fc:eb:81:dd:f9:82:c3:80:22:
e4:ed:37:85:33:73:5d:45:d8:25:d6:80:d0:7d:a4:
4d:66:6f:0d:5a:86:ac:75:89:d2:ca:da:aa:34:63:
2a:4c:fa:f0:ad:5b:8a:c0:66:25:48:a6:1f:b3:83:
9a:54:51:42:8a:c3:68:e1:bb:7f:0e:b6:4b:a4:c1:
e7:3e:dc:0c:f2:8b:25:85:fc:20:be:13:d2:ee:9e:
79:e7:48:72:fc:01:4b:19:97:c5:15:56:43:a2:14:
0d:38:c0:f9:c3:2e:54:ee:36:4e:5b:22:5d:fb:fb:
74:5c:21:c0:ce:62:46:d0:e1:ec:d0:45:b1:00:4f:
ee:b4:ec:6b:72:7b:99:b3:5c:a4:19:6b:9d:a6:38:
90:89:26:06:ca:8c:f5:f3:25:29:b8:9e:be:40:a6:
bb:20:39:75:42:95:38:ca:49:93:64:66:58:98:35:
d9:ea:52:04:1c:3b:ac:97:a3:62:11:4c:d5:d2:38:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BE:5D:AE:0B:0F:8B:D0:B3:3D:EF:D7:7D:10:57:70:0A:A6:16:57
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135342e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d2:2e:47:e9:cd:ba:46:64:ba:f5:32:6c:13:fe:04:33:00:
ac:da:4f:b5:75:91:18:c2:3d:e1:98:6e:79:e0:ca:49:aa:6f:
a1:88:28:f2:38:1e:52:f6:4f:7a:48:f2:f8:d7:09:94:92:aa:
33:52:c1:53:dc:5c:54:2a:88:2f:68:3d:6b:64:e5:74:f0:a9:
34:db:72:15:27:2f:8a:70:c3:34:a0:a4:93:cb:b1:02:80:d6:
ea:61:cb:68:bc:96:87:9a:44:c9:70:38:67:0e:be:88:89:69:
35:1f:71:c2:20:cd:0b:ef:16:95:da:bc:63:93:b0:65:0b:1f:
40:4f:3d:00:39:69:02:d7:dd:50:da:7a:ed:fe:56:c3:e5:33:
f7:6a:ce:e1:f8:01:36:c7:50:64:1e:3e:d2:2d:cf:e9:12:30:
95:61:d2:4b:fe:57:ae:49:cd:3b:06:81:90:02:8c:77:ff:04:
27:5f:ce:57:94:f9:71:4d:2e:c3:e6:8a:a4:f1:24:cf:8d:ab:
9e:a7:5a:e9:3c:df:b9:90:a2:5f:cd:05:49:b7:97:95:4f:23:
64:99:09:f8:f4:5f:e0:41:e6:2f:ba:51:78:68:a8:e0:7f:2f:
4f:2c:e4:a2:b2:7b:c5:45:f9:ae:dc:03:05:6f:cc:5b:49:ab:
9d:f3:c8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net