Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32302e302f32342d3234203d3e20323130343339.roa
File: 34352e3134312e32302e302f32342d3234203d3e20323130343339.roa (raw, json)
Hash identifier: +03CNJXnsuaUhGMHGhanaXA0vU4mpZnl/5ho5Ot5pJo=
Subject key identifier: E5:30:6C:F0:CD:D7:B4:08:8F:C7:CF:50:06:7B:96:73:C3:F1:A5:6C
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 1FA23264B7C6059BFA8EE63123745246E767923D
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32302e302f32342d3234203d3e20323130343339.roa
Signing time: Mon 16 Jan 2023 09:31:19 +0000
ROA not before: Mon 16 Jan 2023 09:26:19 +0000
ROA not after: Mon 15 Jan 2024 09:31:19 +0000
asID: 210439
IP address blocks: 45.141.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a2:32:64:b7:c6:05:9b:fa:8e:e6:31:23:74:52:46:e7:67:92:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Jan 16 09:26:19 2023 GMT
Not After : Jan 15 09:31:19 2024 GMT
Subject: CN=E5306CF0CDD7B4088FC7CF50067B9673C3F1A56C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:db:a2:01:c0:bc:5f:fe:bc:4c:47:c1:80:62:
23:11:61:18:a3:89:a8:11:08:34:92:88:0f:30:2b:
eb:bf:c7:ec:d5:ac:29:dc:4c:ed:f3:c4:77:5e:97:
aa:20:22:e0:63:a4:77:b1:8a:93:74:7b:01:17:32:
b2:b5:15:12:0f:f9:f6:3c:4c:15:9d:9b:37:29:5e:
17:7b:cc:4e:5e:7a:70:d7:ae:4c:dd:3d:f6:31:03:
ef:10:dc:32:e7:5d:ed:48:87:56:0d:e3:10:b4:15:
fc:65:8f:43:98:a8:d1:89:93:e4:a1:99:36:f6:dc:
64:3c:8e:71:68:c6:76:d6:e4:54:68:d8:c1:55:4a:
d4:13:2c:a8:f9:c0:b6:08:fc:aa:b1:69:9c:e7:92:
7c:6c:85:4b:05:22:d6:20:5b:35:46:06:b8:db:ca:
5c:69:db:b1:11:b6:59:ef:38:e9:25:01:da:34:9b:
52:02:01:53:5f:79:6a:ef:63:9e:f3:aa:4d:2d:a5:
3a:40:c6:46:18:f0:32:18:df:a5:5a:c7:a9:6d:9e:
e8:36:60:3c:ee:37:d1:a4:56:24:fe:4f:f5:6e:d6:
33:04:43:62:c4:25:a1:bf:4e:d5:b3:00:20:b4:5c:
2e:43:5f:6d:7b:a0:21:ee:79:55:41:a3:b6:c5:d3:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:30:6C:F0:CD:D7:B4:08:8F:C7:CF:50:06:7B:96:73:C3:F1:A5:6C
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32302e302f32342d3234203d3e20323130343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.20.0/24
Signature Algorithm: sha256WithRSAEncryption
72:42:41:2d:cc:b6:fc:5d:07:3e:8b:ed:17:1e:f5:8d:45:86:
fd:6a:0e:d9:ee:1a:f9:78:14:86:d5:11:d8:df:9b:1b:2c:fc:
d7:84:8c:a9:b8:49:c9:76:8a:42:7a:01:47:83:17:f7:7b:5e:
8f:00:61:df:e6:bc:8c:89:8b:b9:50:56:63:e5:61:ed:37:74:
36:5b:3f:47:db:89:b5:24:bf:ec:21:9c:26:79:c7:2c:f1:18:
02:f9:3a:bd:02:4c:52:5a:2d:26:ee:f3:a8:7e:da:49:83:53:
1b:5f:cd:10:dd:fd:dc:71:33:0a:64:6a:3b:a9:20:31:21:3f:
27:fa:73:20:a5:e1:3c:bd:8b:a5:da:c4:56:5b:1e:9c:d1:d7:
da:d9:d1:d6:bb:57:8d:79:e9:81:b0:1f:05:cc:1a:aa:6c:94:
01:0a:bb:c0:5c:38:c8:19:a5:8f:74:3b:28:2c:20:9f:cf:b3:
74:5d:0b:f3:75:d1:3c:38:f3:e3:26:03:56:84:76:64:b7:eb:
ee:95:b0:0f:2c:37:df:09:51:25:90:1c:45:b0:c3:ce:da:67:
a4:03:d0:9e:cd:bf:51:fe:da:45:73:27:a8:5a:7f:03:04:83:
d6:fa:9b:12:98:f6:e3:fa:e7:57:89:50:49:cf:ca:d6:e3:79:
eb:c3:1c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net