Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
File: 34352e3132382e3136302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: reIfOvazsFOjt0i1PFuBZNFAXuc4zNMbviSRUKCtvf4=
Subject key identifier: D1:F5:D7:6E:A6:47:1C:58:FE:A9:5F:45:8D:A6:AE:FA:9E:83:95:81
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 2098D75792AAE6CE07C4056F2F03FA8432BD3923
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:34:02 +0000
ROA not before: Sat 22 Oct 2022 04:29:02 +0000
ROA not after: Sat 21 Oct 2023 04:34:02 +0000
asID: 47583
IP address blocks: 45.128.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:98:d7:57:92:aa:e6:ce:07:c4:05:6f:2f:03:fa:84:32:bd:39:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Oct 22 04:29:02 2022 GMT
Not After : Oct 21 04:34:02 2023 GMT
Subject: CN=D1F5D76EA6471C58FEA95F458DA6AEFA9E839581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:93:94:e0:71:3d:e7:1c:ce:93:90:1c:b3:
ac:d3:d3:47:2b:6b:1f:44:ee:ee:b8:15:27:a8:1e:
cc:bb:71:af:f5:d5:3d:5f:1c:53:32:79:66:bf:57:
b7:ad:fa:96:9c:1b:79:92:b4:41:b8:a9:89:8c:df:
06:75:76:81:b8:9c:ba:76:f5:0d:57:51:7e:b1:20:
c5:8a:08:17:08:15:46:b2:63:ce:73:50:7b:87:80:
bd:8a:1f:a6:2c:d1:ee:9c:94:5e:bd:65:d2:93:ce:
3b:5f:da:8b:b0:fa:c0:55:f6:19:fa:7e:c8:4c:a8:
f8:7c:04:1a:d7:e7:6f:8f:bb:3a:95:9e:9c:47:44:
94:c1:13:49:84:6a:b4:44:b5:1e:34:76:0f:9d:40:
e4:9b:84:89:37:2e:ef:b2:ba:f9:93:b4:db:51:dc:
78:eb:17:9b:43:3d:b7:3a:16:f9:fd:d1:bc:94:7a:
72:4c:19:53:54:8d:a3:ad:e7:a9:73:52:a9:92:d6:
97:ef:ae:f1:7b:41:ff:4a:43:66:ea:f6:a8:21:9c:
03:d3:17:f1:e4:ee:02:65:94:5e:6f:d5:65:6d:8f:
51:1a:b0:b8:63:50:e2:20:26:a3:e4:e6:52:e4:3a:
67:e9:dc:76:71:f6:f0:1f:77:83:73:f7:e7:45:6d:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F5:D7:6E:A6:47:1C:58:FE:A9:5F:45:8D:A6:AE:FA:9E:83:95:81
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.160.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:4b:e9:ba:6e:ad:9e:4e:27:11:40:19:87:92:d0:54:6b:d7:
1c:50:83:73:59:3f:b8:57:ac:29:06:b6:5e:a7:0c:9e:9e:bf:
0d:89:53:0a:d7:ee:eb:7e:ea:8c:84:60:4a:3c:20:f8:d8:d1:
9b:e3:87:ac:c6:c9:c0:9a:f3:08:fd:0b:d0:a4:f3:67:6f:1d:
38:4c:48:bc:29:18:60:0b:ab:d9:c5:fc:91:3d:d7:f8:8f:9e:
1f:80:7f:23:00:5c:df:99:2b:d6:df:5f:f7:87:64:21:5a:76:
ff:5f:e0:a7:c3:38:34:cc:5e:5b:6a:ac:cd:20:f6:08:97:1f:
56:18:3b:e9:16:ca:68:04:a3:2f:1b:6d:21:7c:f8:bc:f2:44:
c9:e1:72:54:a0:a4:e4:22:dc:f8:8d:4a:1e:c1:53:d5:42:14:
60:6c:94:c2:b6:d0:ea:51:c0:fe:11:ec:34:ab:07:6e:9f:b7:
94:81:d2:b8:32:20:0e:23:e0:f6:ed:f2:7c:5e:bd:99:2f:e1:
74:d3:97:06:94:37:df:6d:b9:56:87:66:c1:b7:4c:1c:48:b1:
90:14:fe:50:86:09:1b:22:60:e5:de:ee:0e:f9:70:15:65:f0:
89:ca:5b:60:e4:8e:7e:55:b9:f5:96:07:69:39:27:4c:94:fe:
b3:4e:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net