Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32332d3234203d3e20323132383738.roa
File: 34352e38352e3134342e302f32332d3234203d3e20323132383738.roa (raw, json)
Hash identifier: EUcay1kNMJhc1ENxaDsgAwmISFk8w5XRUTIzerabMMs=
Subject key identifier: DC:FB:56:0C:7F:78:91:6B:19:80:AE:CD:54:82:B8:4E:29:2C:D0:CC
Certificate issuer: /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial: 7C8D2B4B9B04C0DFE2DC42B9D5A6B4D216C68579
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32332d3234203d3e20323132383738.roa
Signing time: Fri 27 Nov 2020 15:10:08 +0000
ROA not before: Fri 27 Nov 2020 15:05:08 +0000
ROA not after: Fri 26 Nov 2021 15:10:08 +0000
asID: 212878
IP address blocks: 45.85.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8d:2b:4b:9b:04:c0:df:e2:dc:42:b9:d5:a6:b4:d2:16:c6:85:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Validity
Not Before: Nov 27 15:05:08 2020 GMT
Not After : Nov 26 15:10:08 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:f6:58:23:6c:c9:18:cf:2e:ab:79:5b:74:
b6:1c:48:b4:f8:bc:96:20:d7:9c:f5:98:82:a3:8b:
87:c1:42:c5:e8:bf:04:27:ec:e4:1c:fb:24:ca:ef:
2f:b3:f2:b8:1d:1a:ee:14:7d:87:0a:4a:44:4d:6c:
1b:b2:d2:90:e4:43:0e:5f:f3:86:73:2c:33:39:1b:
a5:a7:90:f7:a7:b7:a7:ea:e6:c0:f2:6b:85:f5:56:
62:04:9d:33:fc:d1:f0:80:89:06:34:7b:e8:ed:9a:
5c:83:7e:cc:6f:11:ea:c3:f0:75:98:f4:e1:9d:fc:
a3:19:7c:4d:7f:6c:c8:02:4b:87:1c:0b:e8:6a:3b:
76:42:c4:f2:c9:2b:49:64:17:a5:6e:5f:83:01:54:
d1:7e:82:8c:bd:ab:a3:34:3e:f7:2f:a0:36:e6:df:
c7:55:a9:43:a8:ec:5d:9c:1b:b4:3a:c5:4f:6b:b0:
e7:22:cd:5d:91:d0:ef:f0:48:8c:ca:09:76:31:93:
c1:21:7b:75:17:f0:85:f3:26:61:11:c1:18:50:e9:
34:a7:1c:34:5b:7b:08:ea:59:63:15:ab:bc:a9:95:
61:fa:9b:03:d6:40:52:fd:35:c5:3c:95:d1:d2:a0:
1c:48:98:26:0b:a6:16:8f:2e:33:56:17:ea:f0:d7:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:56:0C:7F:78:91:6B:19:80:AE:CD:54:82:B8:4E:29:2C:D0:CC
X509v3 Authority Key Identifier:
keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32332d3234203d3e20323132383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.144.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:19:e7:95:74:05:85:d5:75:84:e1:4b:79:bd:8d:bc:8a:3b:
62:66:d2:91:c8:e2:95:f5:b9:7b:c0:53:e6:17:0c:08:d9:ac:
8a:d4:28:4a:4a:4b:65:57:e3:4a:49:12:b3:f5:99:d3:8e:c8:
e6:03:ce:6d:a9:45:e2:bd:6d:96:ed:bb:a3:c7:70:8b:09:6f:
86:7f:10:2d:5a:da:c8:7f:46:1e:fb:c9:59:92:0a:8c:fe:5a:
b9:b0:7e:3a:af:eb:75:7e:47:0f:ec:71:20:96:2b:28:65:fd:
68:d9:36:23:d0:ac:66:ad:a5:72:3b:f5:6f:e8:27:b0:81:7c:
eb:25:94:41:cc:f1:0d:83:1a:8f:e8:a6:6e:74:a4:8d:ff:0a:
38:d5:f2:21:0a:de:af:7c:ec:06:f5:e2:cb:72:42:4c:da:08:
18:f6:c2:69:23:27:49:71:92:d6:67:94:b9:7c:f8:1c:92:4b:
b3:6f:55:97:48:ab:3e:b8:f4:49:a0:a9:05:ed:88:08:28:bf:
36:db:11:d7:2f:f8:b4:a2:11:3b:9b:04:78:3c:6f:eb:71:fa:
34:1d:2c:82:fb:ab:68:46:9e:56:80:24:89:3a:11:14:1c:44:
13:6f:e0:68:ed:b4:b2:d4:8f:aa:4b:6d:a4:1e:32:89:b1:11:
4e:50:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net