Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134362e302f32342d3234203d3e20323132333134.roa
File: 34352e38352e3134362e302f32342d3234203d3e20323132333134.roa (raw, json)
Hash identifier: AwU42N6rXrrEyUyWCLXXNqry+25zEC/8tZDPHv5O3EY=
Subject key identifier: 83:86:04:83:46:4B:FB:12:4F:26:39:36:4E:46:7E:E3:B6:E5:9C:81
Certificate issuer: /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial: 924E2DA8E9FD49351EE83A8F1B19D556E3CF73
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134362e302f32342d3234203d3e20323132333134.roa
Signing time: Wed 09 Dec 2020 09:40:26 +0000
ROA not before: Wed 09 Dec 2020 09:35:26 +0000
ROA not after: Wed 08 Dec 2021 09:40:26 +0000
asID: 212314
IP address blocks: 45.85.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
92:4e:2d:a8:e9:fd:49:35:1e:e8:3a:8f:1b:19:d5:56:e3:cf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Validity
Not Before: Dec 9 09:35:26 2020 GMT
Not After : Dec 8 09:40:26 2021 GMT
Subject: CN=3082010A0282010100EA081DECC61C86E1635AE48295B92F66472CF2830FD439E5EF8CE378E78FCC505482228F339F75B7F8A20101C31E513550D5B5F91E152D46B9A5233771696EB8490DFD9E1F2C375DF2F0F6A012D6CAC5FC63F2A988464A0AA1DD3EACA52F4F9245932B4EF6629CF0E68D135D0666B7E8445E963C835CD3BE18084D351931AC0721BABAF088B4A388B73CBBEF82036D2576A8264FD6071308E5AE98A286F1B4D0AA4CB93A5AAB2278194942EF71D151882429E09BDF7CEC78F947923BE1E42BEBBCAD52A4BA9190CD106A5DD8FC1EF680EC24A3CE15E9B9973633044BE916ACBD278E8D1DEB693B6C62E82D75A7AEF9C68366DF2969D9DEF901849D91CC93FCEF0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:08:1d:ec:c6:1c:86:e1:63:5a:e4:82:95:b9:
2f:66:47:2c:f2:83:0f:d4:39:e5:ef:8c:e3:78:e7:
8f:cc:50:54:82:22:8f:33:9f:75:b7:f8:a2:01:01:
c3:1e:51:35:50:d5:b5:f9:1e:15:2d:46:b9:a5:23:
37:71:69:6e:b8:49:0d:fd:9e:1f:2c:37:5d:f2:f0:
f6:a0:12:d6:ca:c5:fc:63:f2:a9:88:46:4a:0a:a1:
dd:3e:ac:a5:2f:4f:92:45:93:2b:4e:f6:62:9c:f0:
e6:8d:13:5d:06:66:b7:e8:44:5e:96:3c:83:5c:d3:
be:18:08:4d:35:19:31:ac:07:21:ba:ba:f0:88:b4:
a3:88:b7:3c:bb:ef:82:03:6d:25:76:a8:26:4f:d6:
07:13:08:e5:ae:98:a2:86:f1:b4:d0:aa:4c:b9:3a:
5a:ab:22:78:19:49:42:ef:71:d1:51:88:24:29:e0:
9b:df:7c:ec:78:f9:47:92:3b:e1:e4:2b:eb:bc:ad:
52:a4:ba:91:90:cd:10:6a:5d:d8:fc:1e:f6:80:ec:
24:a3:ce:15:e9:b9:97:36:33:04:4b:e9:16:ac:bd:
27:8e:8d:1d:eb:69:3b:6c:62:e8:2d:75:a7:ae:f9:
c6:83:66:df:29:69:d9:de:f9:01:84:9d:91:cc:93:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:04:83:46:4B:FB:12:4F:26:39:36:4E:46:7E:E3:B6:E5:9C:81
X509v3 Authority Key Identifier:
keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134362e302f32342d3234203d3e20323132333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.146.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:58:03:a5:52:08:1d:f4:a3:11:8b:a5:3e:4b:08:e4:48:c0:
f8:46:84:9e:03:51:a3:2c:81:9c:c9:0a:59:2e:67:47:45:9d:
df:d3:a4:4b:bc:67:9d:44:66:b8:ea:9b:0f:18:02:f0:bf:c4:
83:dc:ef:15:46:01:f9:01:4b:b2:e6:e0:79:65:35:34:48:ff:
1e:1e:3e:a6:d3:13:ac:32:10:25:88:11:fd:ab:4f:15:fc:77:
86:5a:8b:22:d4:ec:88:56:11:97:87:a7:73:0c:4b:a9:6a:13:
ea:8e:77:85:ae:25:da:28:48:65:ea:b4:72:27:33:fd:83:c6:
c5:ed:e8:97:60:6e:2c:a3:aa:d5:bb:cc:7e:b3:e6:a3:ad:a3:
ab:92:c7:7c:29:b1:80:eb:03:55:9a:ae:b6:dd:b7:9f:55:ad:
1e:db:0f:bb:d8:bc:ce:ec:46:fc:f0:85:fc:9f:96:ac:ed:39:
dd:37:a8:41:b8:53:02:a2:c9:9a:a3:d1:05:57:aa:6d:6c:3a:
54:12:fd:73:04:d0:1f:cb:51:cb:31:f3:1a:09:0d:3c:14:12:
e6:88:4c:81:4f:66:84:27:b5:78:16:7d:00:82:1d:41:ed:36:
59:87:fa:42:5f:34:87:e4:d8:99:53:fb:84:6d:b1:15:df:1d:
2b:ac:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net