Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134362e302f32342d3234203d3e20323132353630.roa
File: 34352e38352e3134362e302f32342d3234203d3e20323132353630.roa (raw, json)
Hash identifier: 7DTCqi+k69suwep3QFNXNRtvOLIxq2F46bgKJe8YXKU=
Subject key identifier: 3D:7E:32:65:68:F4:1D:FF:9B:CF:F4:EB:E8:5D:5E:52:6F:71:04:7D
Certificate issuer: /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial: 612AB46FC24A7C645A2C552520D29EFE9134BEDD
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134362e302f32342d3234203d3e20323132353630.roa
Signing time: Fri 27 Nov 2020 15:10:08 +0000
ROA not before: Fri 27 Nov 2020 15:05:08 +0000
ROA not after: Fri 26 Nov 2021 15:10:08 +0000
asID: 212560
IP address blocks: 45.85.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2a:b4:6f:c2:4a:7c:64:5a:2c:55:25:20:d2:9e:fe:91:34:be:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Validity
Not Before: Nov 27 15:05:08 2020 GMT
Not After : Nov 26 15:10:08 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:4a:bb:30:2a:73:f7:7c:77:ab:66:f0:98:
a7:72:35:6d:0d:21:c3:7c:a1:c0:be:7e:70:82:88:
76:98:dc:ab:60:0b:28:68:74:0b:37:77:cc:6a:e0:
12:6d:b2:6a:22:58:8b:d4:23:1a:10:9f:cb:0b:7d:
e4:ef:82:03:ff:70:26:3c:23:00:a6:9d:29:de:21:
a4:00:67:8f:da:ee:71:8b:f7:19:f1:30:01:22:98:
b7:10:24:56:fe:75:8c:42:40:f5:cf:67:5c:9b:0a:
a7:4c:c3:89:f9:bf:10:97:69:26:72:86:a3:c7:d3:
31:e9:9b:bd:86:90:60:cd:e9:ad:4d:96:0e:cd:d6:
b7:67:22:9d:85:3c:37:e8:46:2e:5f:82:d1:5f:da:
a5:07:d0:13:f1:84:9a:8c:d5:22:8c:a7:8c:5b:02:
fc:90:e0:d9:1e:32:4a:a9:1e:4f:eb:6d:16:5f:6a:
8d:1a:d2:b6:cc:d3:03:0a:46:57:d6:4c:2a:ac:37:
d9:fd:bf:07:b3:5e:99:0c:55:28:ca:02:96:e3:ec:
63:33:b2:30:ed:93:66:98:aa:31:c4:c4:82:3e:e4:
6a:bd:29:d8:79:fd:2b:52:57:52:a2:6b:95:4f:e2:
cc:a6:a0:d7:2e:4c:b8:ec:15:89:fa:15:33:b5:2b:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7E:32:65:68:F4:1D:FF:9B:CF:F4:EB:E8:5D:5E:52:6F:71:04:7D
X509v3 Authority Key Identifier:
keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134362e302f32342d3234203d3e20323132353630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.146.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a4:09:35:54:fa:11:f0:a8:83:b4:ac:26:69:c4:54:1c:3c:
d8:a7:d5:19:8d:93:27:62:72:ae:27:e5:b9:20:09:ea:9f:7a:
07:b9:d2:5b:59:f9:40:4b:5c:75:0d:16:a8:58:02:eb:db:0b:
4d:d4:6c:5f:53:58:23:fc:ab:10:a9:f8:bb:71:ad:5a:8f:e0:
12:d2:1f:f5:88:87:cf:f8:b8:57:b8:8e:b9:02:fe:ce:3d:d3:
25:80:a1:65:83:aa:73:bd:57:bb:81:93:dd:86:37:0f:2c:91:
d6:b3:6a:03:3e:aa:94:d7:7b:46:e3:59:79:91:6f:1b:42:29:
05:76:f8:5e:c9:cc:ab:74:f5:69:d0:2c:6d:4a:bf:ba:ff:34:
e3:80:d8:6b:cc:e4:0f:b8:07:32:41:5f:50:6f:69:3b:89:7d:
27:61:08:32:01:82:7c:7f:4c:60:a6:f6:27:fc:ff:79:b5:46:
84:00:f1:59:4f:73:19:90:21:e1:17:55:f8:ad:fd:74:6d:b1:
4b:e2:d8:f7:04:dd:d1:37:fe:0e:4a:82:52:aa:12:12:60:9f:
6b:f9:43:4d:4b:8d:3d:3f:7e:99:3d:1a:f8:d2:6b:f4:e9:79:
4f:d4:8a:2d:b0:7a:36:88:95:f8:86:41:07:9f:d4:82:d9:a5:
98:41:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net