Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323132323938.roa
File: 34352e38352e3134342e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier: nh8wqSk38I5J/HZ52hmv2BgZ4hpViHKo+I5wYvaEPYM=
Subject key identifier: C7:C9:8F:33:AE:3B:13:51:36:AF:85:91:2A:F5:DD:C7:CE:50:9B:96
Certificate issuer: /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial: 2EA08F061FEB8A31403FDE3218AB063E8E4A91EA
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323132323938.roa
Signing time: Mon 07 Dec 2020 19:12:41 +0000
ROA not before: Mon 07 Dec 2020 19:07:41 +0000
ROA not after: Mon 06 Dec 2021 19:12:41 +0000
asID: 212298
IP address blocks: 45.85.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a0:8f:06:1f:eb:8a:31:40:3f:de:32:18:ab:06:3e:8e:4a:91:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Validity
Not Before: Dec 7 19:07:41 2020 GMT
Not After : Dec 6 19:12:41 2021 GMT
Subject: CN=3082010A0282010100D7B5B8A2CA517C00CE4BC11AE3F4947A0B1AC33F4A8C5DB6E0ED28D1AC545911A3743C4812445213C779F7B349BB0C3EF88F27A74D944F95B741F06CA433EFE3668C81D43D5F78AFDF77F120D8A4102549BBBCD08D9A1680DEDCD79C2F94D0BE643251156D88C9455BA9D205AE971635DC7FF9690DA9D1E66BCADF3D17CCF8E594F1FBD6F053B0E7649046C663574FC1712E48748F9828CB0089B19CBEF703BED562A9A620FA19B3340993F36A12F11EB2A0F787074AF52D1629A7A86F6953CD5F06144B4FC2BD1E2D9CEA9C9415DB959D93D7BA7AA6420F5A8D7401710341D0C012300AF082FFCB58B7F0A4E575A37A9F28957E5D31C0BEA6917C69E26E69430203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:b8:a2:ca:51:7c:00:ce:4b:c1:1a:e3:f4:
94:7a:0b:1a:c3:3f:4a:8c:5d:b6:e0:ed:28:d1:ac:
54:59:11:a3:74:3c:48:12:44:52:13:c7:79:f7:b3:
49:bb:0c:3e:f8:8f:27:a7:4d:94:4f:95:b7:41:f0:
6c:a4:33:ef:e3:66:8c:81:d4:3d:5f:78:af:df:77:
f1:20:d8:a4:10:25:49:bb:bc:d0:8d:9a:16:80:de:
dc:d7:9c:2f:94:d0:be:64:32:51:15:6d:88:c9:45:
5b:a9:d2:05:ae:97:16:35:dc:7f:f9:69:0d:a9:d1:
e6:6b:ca:df:3d:17:cc:f8:e5:94:f1:fb:d6:f0:53:
b0:e7:64:90:46:c6:63:57:4f:c1:71:2e:48:74:8f:
98:28:cb:00:89:b1:9c:be:f7:03:be:d5:62:a9:a6:
20:fa:19:b3:34:09:93:f3:6a:12:f1:1e:b2:a0:f7:
87:07:4a:f5:2d:16:29:a7:a8:6f:69:53:cd:5f:06:
14:4b:4f:c2:bd:1e:2d:9c:ea:9c:94:15:db:95:9d:
93:d7:ba:7a:a6:42:0f:5a:8d:74:01:71:03:41:d0:
c0:12:30:0a:f0:82:ff:cb:58:b7:f0:a4:e5:75:a3:
7a:9f:28:95:7e:5d:31:c0:be:a6:91:7c:69:e2:6e:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:8F:33:AE:3B:13:51:36:AF:85:91:2A:F5:DD:C7:CE:50:9B:96
X509v3 Authority Key Identifier:
keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323132323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.144.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e0:d9:a9:04:9f:c4:9a:80:92:31:92:2e:84:7d:bb:b6:b6:
78:e9:ab:8d:2d:fb:43:25:c4:c8:9b:3c:89:1a:fa:1e:80:aa:
6b:ec:0e:36:d4:2d:01:f1:ab:7f:3c:7a:e9:0e:59:40:be:8b:
e6:38:cc:15:64:40:2a:d5:35:57:7d:31:fd:17:19:3b:c0:32:
90:b2:21:51:b6:e8:0d:4c:d5:7c:b0:59:d0:e1:12:6d:ca:6e:
0e:a1:21:52:ea:db:5a:ba:25:29:07:6b:4f:98:1f:74:48:77:
3b:0e:06:be:d8:1a:c3:84:2f:35:c6:1c:5e:8d:98:83:fc:be:
56:93:67:f5:9c:40:de:4a:0d:e3:16:0f:f7:c9:26:c7:09:b1:
f7:fd:7b:2c:5e:df:f2:68:82:b0:03:34:fc:60:34:fe:87:27:
ca:f4:09:7f:66:91:77:88:bb:30:f5:44:03:9c:42:05:52:b7:
18:f3:15:3f:39:b5:cc:f7:6e:6c:7d:68:53:ef:89:b5:80:de:
b3:77:13:b9:38:f3:62:28:d7:47:58:48:1a:3b:f1:a9:fc:1c:
2d:4b:c9:da:d4:54:63:a1:23:89:b3:45:ac:36:97:63:e9:d5:
69:70:2c:ee:04:3e:2c:84:05:41:eb:3a:35:06:81:d4:9d:4e:
c4:9d:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net