Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/352e3138312e33322e302f32322d3234203d3e20323031333431.roa
File: 352e3138312e33322e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: cdMJ6krLUpcnsN/WqPWY+08aNngMuPcQg7+aPo5i7sM=
Subject key identifier: BE:76:92:17:C4:F9:5D:82:A4:C2:B7:4F:20:6E:D7:45:83:0A:82:61
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 45D12474A49A85DE38F5340690CAD5156EDCDCA4
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/352e3138312e33322e302f32322d3234203d3e20323031333431.roa
Signing time: Sat 22 Oct 2022 04:34:05 +0000
ROA not before: Sat 22 Oct 2022 04:29:05 +0000
ROA not after: Sat 21 Oct 2023 04:34:05 +0000
asID: 201341
IP address blocks: 5.181.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d1:24:74:a4:9a:85:de:38:f5:34:06:90:ca:d5:15:6e:dc:dc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Oct 22 04:29:05 2022 GMT
Not After : Oct 21 04:34:05 2023 GMT
Subject: CN=BE769217C4F95D82A4C2B74F206ED745830A8261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:fc:c4:d3:de:c4:cf:14:cc:6e:95:4f:be:
8a:1c:33:3a:18:58:9b:b0:a5:98:52:89:44:96:e3:
c8:f8:de:38:b4:63:c6:d5:a3:05:1b:6d:5e:8f:5c:
bb:47:f5:08:26:df:52:5d:cb:7e:d4:c5:b7:a3:db:
6e:91:d1:f2:1c:18:55:08:02:7e:15:96:4f:1a:1d:
17:04:8d:a5:34:dd:95:b8:89:6c:be:55:7e:a4:00:
34:7c:4b:ed:ab:bd:4c:80:9c:cd:35:08:f5:ef:2f:
d7:52:cf:ab:c6:f7:da:e0:2d:d4:22:88:91:9d:ff:
96:e0:aa:7f:46:c9:fc:aa:5a:4e:88:e1:8f:6f:27:
5d:7f:33:7b:05:fe:a4:1e:5b:80:e5:7b:8f:00:b3:
27:34:14:60:3e:33:15:70:fa:00:45:15:81:eb:0b:
46:87:b2:fa:f8:c7:a0:58:64:68:88:59:0f:09:67:
a0:02:72:82:f9:35:d6:22:3c:78:31:b2:5e:39:29:
e3:87:64:b8:7f:d4:f8:ee:1b:9e:ed:52:21:43:78:
f6:76:49:b3:33:9c:f2:9e:b2:1b:ba:08:5a:7f:ed:
23:a7:92:2e:55:2d:6c:c9:52:42:6b:38:e8:28:72:
86:96:86:57:9e:05:70:c2:af:03:38:c6:c5:22:12:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:76:92:17:C4:F9:5D:82:A4:C2:B7:4F:20:6E:D7:45:83:0A:82:61
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/352e3138312e33322e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.32.0/22
Signature Algorithm: sha256WithRSAEncryption
45:53:82:87:32:f2:36:1e:c6:09:58:e6:fd:5b:95:6f:78:38:
51:63:fd:1f:30:b2:b9:bb:06:2b:a8:cd:b7:08:5e:58:cf:c4:
8c:19:a7:08:bf:36:1c:1c:07:73:b3:f7:84:f4:53:ea:ec:ea:
59:7f:81:dc:db:cf:fd:0e:9f:2f:04:9b:94:30:cb:f4:69:94:
a2:9f:9f:1c:c8:75:15:64:98:4d:8c:d3:8a:92:c8:77:77:25:
c5:d0:92:a4:c3:30:5e:5b:e5:d5:e2:df:b2:fa:e2:d3:00:72:
e1:d1:23:a1:40:b7:35:0e:f4:f6:7c:bf:57:c8:85:33:d8:4d:
ed:37:e9:1b:57:8b:6c:45:88:42:28:74:21:b9:d7:a3:89:06:
bf:ad:93:40:36:75:85:b5:b6:b0:8b:88:96:41:b2:86:96:54:
52:1f:98:d5:ee:55:a9:3a:ba:39:a5:63:c7:d0:16:c9:56:a8:
10:c1:b2:2e:56:f7:52:c2:64:f5:f2:0e:61:06:f8:b1:91:88:
87:de:3b:18:00:9d:c3:22:d5:e2:81:83:09:7e:be:c6:4f:ad:
d8:21:95:07:83:d4:79:3e:77:e9:c7:05:29:00:9f:13:fa:15:
24:1f:92:03:42:76:58:83:69:31:14:d8:0e:23:ce:a7:c6:30:
67:4b:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net