Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/38352e3235352e38302e302f32322d3234203d3e203138353330.roa
File: 38352e3235352e38302e302f32322d3234203d3e203138353330.roa (raw, json)
Hash identifier: 7+V3redrd3ZQOIHcHqgDwzjbg+hnSG1NQoyqUd5Twv0=
Subject key identifier: CC:E8:61:71:9A:75:B0:85:CB:10:CB:C7:FC:7F:48:5D:0D:37:44:DE
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 065B39992A97BE0CDFEFAD73E14AFF7E86243114
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/38352e3235352e38302e302f32322d3234203d3e203138353330.roa
Signing time: Fri 27 Nov 2020 15:10:21 +0000
ROA not before: Fri 27 Nov 2020 15:05:21 +0000
ROA not after: Fri 26 Nov 2021 15:10:21 +0000
asID: 18530
IP address blocks: 85.255.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5b:39:99:2a:97:be:0c:df:ef:ad:73:e1:4a:ff:7e:86:24:31:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Nov 27 15:05:21 2020 GMT
Not After : Nov 26 15:10:21 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:bb:29:9e:ad:7d:86:b6:41:89:b3:ab:64:
a4:80:9b:5d:b1:ad:d4:a4:09:e5:1c:69:f1:d2:34:
81:a5:dd:c2:ca:c7:97:57:45:a3:e1:31:a9:7a:19:
69:7a:27:9a:8d:54:4e:0d:08:35:86:34:a7:46:2f:
c8:75:32:57:85:ec:b4:26:e7:67:21:61:7d:d2:25:
2d:70:c1:22:d5:83:c2:64:1f:2a:16:c9:71:34:ce:
fd:e4:be:86:fb:6e:f3:89:b0:7c:e5:48:54:f0:3e:
ef:da:26:f6:4d:70:96:13:3a:ff:f5:7f:de:5b:ea:
bd:3b:64:f8:f7:59:e1:02:46:3d:03:58:c5:18:0d:
79:be:28:70:1c:3f:cc:ce:fa:72:d2:08:94:d9:c5:
eb:6a:68:30:b7:ae:a0:24:d1:c4:bd:3c:d9:e3:b2:
57:23:e7:15:3c:e5:a7:b5:34:dc:25:35:dd:73:62:
f0:54:f7:35:5a:f6:bf:d3:2a:6a:2d:9a:3e:bf:34:
3b:b5:b7:8a:bd:a6:cc:97:1c:9b:f3:ce:5a:9e:6a:
16:e6:fd:71:df:05:c3:8c:c8:8f:bc:01:ed:04:6d:
fd:fd:27:55:9f:0a:15:7b:3c:4f:3a:5d:b8:3c:8c:
64:10:db:fe:00:cd:34:f7:18:b3:1d:02:84:e1:79:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E8:61:71:9A:75:B0:85:CB:10:CB:C7:FC:7F:48:5D:0D:37:44:DE
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/38352e3235352e38302e302f32322d3234203d3e203138353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.80.0/22
Signature Algorithm: sha256WithRSAEncryption
78:c4:4e:52:a1:4c:c0:1f:bb:4a:45:16:7d:30:f7:1e:32:ec:
4e:9e:34:11:28:15:f9:0a:c9:b5:2c:bd:95:d8:41:a2:98:7b:
fa:00:65:dd:96:06:02:11:97:18:99:51:f1:33:7e:21:85:16:
10:94:21:f0:2b:d0:01:26:44:d9:83:d5:53:a1:ce:28:99:8f:
9c:44:52:b3:dd:fe:09:e1:61:ea:1d:98:0a:ce:a3:f0:60:69:
84:26:dd:89:9b:e3:1a:cf:40:fb:a3:c5:33:0f:52:68:5c:52:
94:8d:ba:05:e6:cf:79:52:b5:4e:5d:9f:a3:a9:06:94:c5:5a:
c3:17:e0:54:81:7d:fc:2d:c8:04:f8:9a:f3:2f:44:9d:04:14:
94:fb:c0:56:29:45:aa:d4:e8:88:be:dd:72:60:b6:5c:8a:bf:
93:34:82:15:8b:aa:27:4a:b1:9a:72:e0:04:81:29:f8:96:b4:
8a:4a:7d:23:f8:b2:be:0e:1c:f0:31:84:59:75:dd:43:73:9d:
91:80:f4:11:ad:4a:b7:cf:40:19:19:d0:78:94:fd:d6:a1:06:
fc:73:b9:95:da:53:97:f2:03:03:d9:d4:03:e0:f4:a5:d6:70:
6a:25:39:b5:af:f1:88:f6:4b:a2:f7:0d:2e:2b:8d:03:69:93:
6c:8c:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net