Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134372e302f32342d3234203d3e203236363336.roa
File: 34352e38352e3134372e302f32342d3234203d3e203236363336.roa (raw, json)
Hash identifier: 41JMFjTBZw9xW6c05VVzkNmkBGcYzDidtcHSJVouWM8=
Subject key identifier: B4:CF:EB:4F:B3:2D:94:5C:F7:73:80:AE:3D:39:20:EA:18:72:60:61
Certificate issuer: /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial: 088D487939FC31E927FB57AA69D23197965F017C
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134372e302f32342d3234203d3e203236363336.roa
Signing time: Fri 27 Nov 2020 15:10:08 +0000
ROA not before: Fri 27 Nov 2020 15:05:08 +0000
ROA not after: Fri 26 Nov 2021 15:10:08 +0000
asID: 26636
IP address blocks: 45.85.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8d:48:79:39:fc:31:e9:27:fb:57:aa:69:d2:31:97:96:5f:01:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Validity
Not Before: Nov 27 15:05:08 2020 GMT
Not After : Nov 26 15:10:08 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:3f:c7:8d:d6:62:a9:69:2d:45:1a:38:03:
70:20:4f:87:7c:1d:98:2b:b6:4f:a2:17:78:c8:a7:
91:e2:80:68:c7:4d:a4:a8:1a:97:67:98:62:82:96:
01:0a:b5:f3:ce:8b:c7:b9:87:20:4f:c7:e8:be:5d:
25:c3:fc:77:fe:98:83:aa:f0:43:fb:98:d1:9d:76:
2e:f0:64:38:88:85:3c:fb:fd:df:82:b4:80:45:71:
54:d9:e1:46:69:fe:48:23:42:60:0f:67:64:94:ff:
4c:b4:20:88:3c:e8:36:06:db:3f:4b:48:ba:c0:15:
a7:7f:e7:e9:d1:e1:a6:f0:74:90:c8:a4:e7:93:f2:
bd:a4:b0:51:37:76:5d:78:12:00:50:d4:7f:3a:ef:
92:7e:6d:5c:50:8e:6b:69:29:6b:d2:22:6c:3e:3e:
33:f3:ce:f9:07:70:a6:d0:b7:1d:45:c0:69:6f:e9:
fe:7b:41:bc:08:7e:a9:aa:ec:8e:7c:02:37:a0:94:
a6:81:7b:95:ac:62:38:e7:4e:8a:d1:f5:cb:8a:d7:
e5:c9:5f:e6:ed:f0:95:45:fc:0f:58:f7:2e:2a:51:
ba:30:56:cb:25:81:28:39:8a:50:4a:bb:a4:5d:38:
71:7c:e0:a2:ac:51:dd:6f:34:9b:36:e9:7d:87:ca:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CF:EB:4F:B3:2D:94:5C:F7:73:80:AE:3D:39:20:EA:18:72:60:61
X509v3 Authority Key Identifier:
keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134372e302f32342d3234203d3e203236363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.147.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:25:79:2d:90:0c:78:ce:3d:40:4a:e2:d0:5e:05:e5:1d:40:
b4:1d:98:59:0e:fa:b5:ed:08:0b:f7:e8:71:c1:f4:87:cd:4b:
ff:c5:3a:b5:28:a4:76:c9:0a:d7:5b:4b:e8:da:92:2c:91:51:
35:c9:a5:01:64:95:87:01:96:e9:3c:a4:ed:d6:1e:1b:8b:c4:
28:ec:a2:ed:00:85:25:b4:9c:3f:49:e4:c9:76:89:79:aa:ea:
e0:d8:7a:14:f2:1e:7d:10:1f:7a:1f:72:7a:e1:08:e8:9d:d0:
a9:70:2c:9c:e4:df:e4:47:33:bd:8a:54:aa:f7:22:6c:b5:fe:
1c:74:0d:49:fb:a7:c0:e5:e5:1a:85:9e:08:eb:41:43:0a:58:
a9:81:bb:5d:67:ff:bb:1f:01:ea:78:75:eb:19:e8:81:d6:ae:
58:5f:39:cd:4e:ed:3d:3f:be:ca:d7:27:18:f5:50:30:4e:ac:
c1:fa:d0:c2:59:6f:ca:c3:6b:ba:fc:e8:bd:c0:52:76:c8:1f:
ee:75:59:48:ea:18:04:f6:84:2c:1d:fd:8f:69:1a:06:65:82:
75:20:a0:59:a8:dd:13:e9:e5:b1:96:2c:80:3b:23:c3:4a:e0:
70:5c:19:b6:45:31:66:76:a4:d8:ac:19:5c:c0:70:3c:6a:33:
c6:7e:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net