Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135352e302f32342d3234203d3e2030.roa
File: 34352e31302e3135352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: eG895npd+DjWtysNEotIPQ5ske7zpicSSGvVnktdL84=
Subject key identifier: 33:DE:85:A7:5D:3F:A0:E8:44:D3:5B:88:C6:52:D0:2D:7E:D4:6C:E8
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 3677A328A73FD11B57DBE30282FF9F54CB9AA281
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135352e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:00:12 +0000
ROA not before: Fri 03 Mar 2023 15:55:12 +0000
ROA not after: Fri 01 Mar 2024 16:00:12 +0000
asID: 0
IP address blocks: 45.10.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:77:a3:28:a7:3f:d1:1b:57:db:e3:02:82:ff:9f:54:cb:9a:a2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:55:12 2023 GMT
Not After : Mar 1 16:00:12 2024 GMT
Subject: CN=33DE85A75D3FA0E844D35B88C652D02D7ED46CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:f0:f7:ef:88:5d:d6:9b:7a:cd:2b:00:6a:
0c:58:84:70:20:43:a2:cd:4e:46:cd:cd:73:58:75:
f2:4e:72:34:3d:66:42:66:6e:8e:38:ea:18:55:5a:
65:66:97:4d:32:3f:e0:c1:cb:0c:c4:a5:cc:f1:4e:
e8:fd:ac:e2:26:a2:f2:8a:2f:a3:f4:8c:c0:40:48:
6d:49:6c:5a:0f:0f:6f:02:5b:7f:3a:dd:bc:f9:25:
9b:fe:6e:64:4e:ab:60:8a:aa:bf:ec:72:0c:91:bd:
0e:fd:10:5c:5d:a7:07:bd:b3:31:f3:fc:30:e5:6e:
07:13:1a:2d:ba:9e:82:2d:21:cf:c5:92:e9:5a:58:
eb:6a:db:23:93:68:4c:5a:21:a0:33:5e:1c:a3:cc:
0a:22:34:61:38:4d:c4:38:92:83:5a:bb:25:0b:c6:
69:7c:f2:b5:ba:ea:5e:70:9d:41:d9:80:cb:19:bb:
88:6f:bf:7a:cb:4d:70:0b:36:6a:0e:4c:37:0e:eb:
33:94:c5:fc:f3:93:a0:04:04:93:0d:75:76:3d:38:
99:90:c8:b2:2d:d5:b5:90:5f:85:c2:d1:62:ac:7e:
49:a6:0c:a6:cb:4b:6a:81:e1:d9:c4:ef:05:c4:23:
00:97:5b:d4:23:08:91:98:1a:5b:bc:99:36:75:f0:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DE:85:A7:5D:3F:A0:E8:44:D3:5B:88:C6:52:D0:2D:7E:D4:6C:E8
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.155.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6d:43:ed:46:4d:4b:eb:ae:66:e6:c5:f2:67:0e:d4:cb:e6:
f8:11:30:ce:70:bb:52:ab:f6:a1:90:b1:a5:5e:04:5e:7f:b7:
0e:4c:1c:e5:bb:57:46:67:9e:71:29:83:36:8d:42:24:4e:eb:
85:c2:16:bd:06:41:d6:bf:46:4c:84:a4:07:d8:35:41:d2:67:
83:89:ad:25:68:1c:95:15:80:98:fe:d0:d6:b7:43:70:eb:da:
52:33:5a:33:0b:36:5b:a6:25:94:b4:0d:37:0e:db:09:08:b7:
dd:67:50:1c:42:c6:32:f4:f4:72:48:aa:f6:af:af:2c:68:6f:
8e:02:c2:9c:c9:c6:eb:88:ef:55:c7:af:e3:c2:30:c1:8b:ee:
7c:d5:5a:8a:f2:b8:a8:72:c7:0a:b1:ca:eb:86:7b:ea:ea:5e:
34:da:d3:51:c7:55:71:7f:d2:fb:2c:73:ed:55:91:79:1c:00:
e8:67:46:be:e0:aa:2f:d5:56:83:de:f3:01:17:55:ad:fc:97:
bc:59:23:a6:28:5c:f8:a4:f7:7e:d7:b9:92:77:92:c8:3f:fd:
05:1a:74:01:2a:19:d1:56:84:c7:56:86:9e:ae:e0:c1:1a:b9:
45:3b:5e:ae:8b:11:99:98:64:9a:09:f0:dc:12:85:72:30:7b:
c7:f8:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net