Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323131383331.roa
File: 34352e38352e3134342e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier: CL1vYcmMJ4wwZdFX7uxFZcf4nnkb6QW5u4/8p2Ywhjo=
Subject key identifier: 20:86:EA:E6:4A:FB:EE:97:18:AA:FA:3C:6E:0C:E7:90:5A:2E:EB:41
Certificate issuer: /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial: 6704CD5C7F4EFB83879ED126D08BDF4FCB88E53F
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323131383331.roa
Signing time: Sat 13 Feb 2021 18:21:53 +0000
ROA not before: Sat 13 Feb 2021 18:16:53 +0000
ROA not after: Sat 12 Feb 2022 18:21:53 +0000
asID: 211831
IP address blocks: 45.85.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:04:cd:5c:7f:4e:fb:83:87:9e:d1:26:d0:8b:df:4f:cb:88:e5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Validity
Not Before: Feb 13 18:16:53 2021 GMT
Not After : Feb 12 18:21:53 2022 GMT
Subject: CN=3082010A0282010100EE9C007917A5640029907178F9F04CADEB1EFA25673D0E667E270A8B97A8C5E470811EF0D406D85D57A30C747C1B1F98C054340529BCEAB5CD5057A0C6483B61B6EF9DEE9D137059FB6242C968F9BE31420047D234E3F0595B26B820D3FE0F70DD0F2C9D5A41495E7514F2760137CD9ACD31BA56BD861ED1ED2B55F2264AF3A59D41C0EC18E1FD1CFF47AB5E030C0BC2866415BFCCF1528FA994984993C99ABF7CBD13801CF1198F302FBA1277C7302F7148676D801B3DD871751215781E1FAF3CD8BFFD79BF2B0A468DA6D4ED5F7C0985536161664723C87D90B5A3EDA2279A9F5FFAB5C697FD100C0B600CA17BA0C1ABD7EB91A44A89B4E447BCC4055687F70203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9c:00:79:17:a5:64:00:29:90:71:78:f9:f0:
4c:ad:eb:1e:fa:25:67:3d:0e:66:7e:27:0a:8b:97:
a8:c5:e4:70:81:1e:f0:d4:06:d8:5d:57:a3:0c:74:
7c:1b:1f:98:c0:54:34:05:29:bc:ea:b5:cd:50:57:
a0:c6:48:3b:61:b6:ef:9d:ee:9d:13:70:59:fb:62:
42:c9:68:f9:be:31:42:00:47:d2:34:e3:f0:59:5b:
26:b8:20:d3:fe:0f:70:dd:0f:2c:9d:5a:41:49:5e:
75:14:f2:76:01:37:cd:9a:cd:31:ba:56:bd:86:1e:
d1:ed:2b:55:f2:26:4a:f3:a5:9d:41:c0:ec:18:e1:
fd:1c:ff:47:ab:5e:03:0c:0b:c2:86:64:15:bf:cc:
f1:52:8f:a9:94:98:49:93:c9:9a:bf:7c:bd:13:80:
1c:f1:19:8f:30:2f:ba:12:77:c7:30:2f:71:48:67:
6d:80:1b:3d:d8:71:75:12:15:78:1e:1f:af:3c:d8:
bf:fd:79:bf:2b:0a:46:8d:a6:d4:ed:5f:7c:09:85:
53:61:61:66:47:23:c8:7d:90:b5:a3:ed:a2:27:9a:
9f:5f:fa:b5:c6:97:fd:10:0c:0b:60:0c:a1:7b:a0:
c1:ab:d7:eb:91:a4:4a:89:b4:e4:47:bc:c4:05:56:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:86:EA:E6:4A:FB:EE:97:18:AA:FA:3C:6E:0C:E7:90:5A:2E:EB:41
X509v3 Authority Key Identifier:
keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323131383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.144.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5d:07:ba:7d:27:6c:41:e2:fa:b4:d6:cf:78:eb:bf:28:dc:
c8:05:c4:3b:61:c0:40:0f:2d:59:a9:ed:e1:b6:82:4e:36:6c:
10:a2:7a:89:4d:5c:bb:43:71:61:3c:6f:2c:3a:28:01:3b:26:
55:ba:e7:9d:36:e1:41:45:65:8a:92:de:d7:33:fb:74:f7:70:
28:c4:24:f1:31:b4:3c:6a:64:87:0e:7e:1d:29:ec:97:2e:ce:
d2:a2:e8:ea:3f:ff:9e:a5:fb:c5:90:19:c2:c2:41:d7:1d:50:
09:e1:05:75:ec:d2:8e:84:ae:fd:de:b1:ff:d4:f5:52:d2:f8:
ec:ec:9a:e1:fd:8d:ce:82:ed:ed:3c:9b:37:b0:ad:86:20:27:
06:be:49:39:7f:27:b8:95:a3:17:32:cc:15:c8:e8:f1:4c:80:
e1:76:b5:47:c5:40:ff:7c:a4:50:ae:c2:0a:d4:60:03:fe:29:
2f:f0:54:de:e4:fa:b9:3a:b1:10:2e:11:7c:2d:35:2e:30:80:
c9:85:a0:cd:19:7a:fd:5e:ae:d5:1e:1d:d7:df:1e:de:c1:4b:
20:8d:74:8b:cf:92:f4:c9:0e:8d:3b:c6:ba:27:49:b0:81:e5:
f3:ba:a3:c2:d5:3e:89:b7:78:7d:7b:57:3f:8d:89:a0:e0:0d:
d2:b8:3d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net