Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134372e302f32342d3234203d3e2037393232.roa
File: 34352e38352e3134372e302f32342d3234203d3e2037393232.roa (raw, json)
Hash identifier: Nh5mW6NUKX9475y4yGq8NEWPJXdiNc7mU5i+GuQZTHU=
Subject key identifier: CE:81:D6:23:2D:C6:75:78:63:E4:23:47:FA:8A:33:1D:B9:D6:B5:5E
Certificate issuer: /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial: 520264A027462E422C48EBB788E37F43D220BA0C
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134372e302f32342d3234203d3e2037393232.roa
Signing time: Fri 27 Nov 2020 15:10:08 +0000
ROA not before: Fri 27 Nov 2020 15:05:08 +0000
ROA not after: Fri 26 Nov 2021 15:10:08 +0000
asID: 7922
IP address blocks: 45.85.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:02:64:a0:27:46:2e:42:2c:48:eb:b7:88:e3:7f:43:d2:20:ba:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Validity
Not Before: Nov 27 15:05:08 2020 GMT
Not After : Nov 26 15:10:08 2021 GMT
Subject: CN=3082010A0282010100A6224F29E5A96DC9644E93895A0F88D8BEFCFC8D004E061FD1DF63C1DFAE607C88D9DA8D578520CB4E67629358299BA9EDE88E914D25488E3D925C86056866D6FD482CE632A02681B8A81CE0978D555011C8F99BD0C627BFF2009B496C23466B72D1F54FD6185CE5BD94DB13B98A66F56B90C2B0A5BA355EFDFAE74E6F8B43C3497883C216AD4E350555AEEFFDD41D96B73ABA8D6D3E981E71925A7BA9C3E647E43980A215097BC4A427C5ADF88E420C9EAEA0F0B3164FF8D915BB44119E7E38D1B437450AF968D1B0AAFD3797D51747E93088096568CE2608CE3204F417034E564E2AAD22F3C50564089450FC4A11C89F74263CF2230E693AADC210465BA1810203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:4f:29:e5:a9:6d:c9:64:4e:93:89:5a:0f:
88:d8:be:fc:fc:8d:00:4e:06:1f:d1:df:63:c1:df:
ae:60:7c:88:d9:da:8d:57:85:20:cb:4e:67:62:93:
58:29:9b:a9:ed:e8:8e:91:4d:25:48:8e:3d:92:5c:
86:05:68:66:d6:fd:48:2c:e6:32:a0:26:81:b8:a8:
1c:e0:97:8d:55:50:11:c8:f9:9b:d0:c6:27:bf:f2:
00:9b:49:6c:23:46:6b:72:d1:f5:4f:d6:18:5c:e5:
bd:94:db:13:b9:8a:66:f5:6b:90:c2:b0:a5:ba:35:
5e:fd:fa:e7:4e:6f:8b:43:c3:49:78:83:c2:16:ad:
4e:35:05:55:ae:ef:fd:d4:1d:96:b7:3a:ba:8d:6d:
3e:98:1e:71:92:5a:7b:a9:c3:e6:47:e4:39:80:a2:
15:09:7b:c4:a4:27:c5:ad:f8:8e:42:0c:9e:ae:a0:
f0:b3:16:4f:f8:d9:15:bb:44:11:9e:7e:38:d1:b4:
37:45:0a:f9:68:d1:b0:aa:fd:37:97:d5:17:47:e9:
30:88:09:65:68:ce:26:08:ce:32:04:f4:17:03:4e:
56:4e:2a:ad:22:f3:c5:05:64:08:94:50:fc:4a:11:
c8:9f:74:26:3c:f2:23:0e:69:3a:ad:c2:10:46:5b:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:D6:23:2D:C6:75:78:63:E4:23:47:FA:8A:33:1D:B9:D6:B5:5E
X509v3 Authority Key Identifier:
keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134372e302f32342d3234203d3e2037393232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.147.0/24
Signature Algorithm: sha256WithRSAEncryption
20:89:a5:86:b9:24:f0:a9:f9:41:2a:03:0e:45:14:e1:a1:33:
b8:3b:a9:99:cd:36:0f:d7:4a:82:b1:24:90:3c:0c:dc:61:da:
30:9e:4d:40:01:37:9a:33:50:cb:88:fd:f3:3d:15:3f:67:38:
57:5a:6c:66:05:8c:64:07:cc:82:ea:35:2b:1f:d3:f7:ad:81:
43:57:fa:d0:ce:14:8c:b9:cb:49:0d:46:80:86:f8:7a:8b:f0:
34:cf:ec:2d:8f:65:02:6a:e8:ab:33:4e:7f:01:2a:cf:eb:35:
33:aa:f9:bc:a2:08:e9:fa:14:71:70:1c:40:88:24:33:6f:0c:
3c:97:96:c2:a0:96:e6:18:ac:59:68:20:63:85:25:ef:5f:40:
85:e1:ef:e4:e4:0f:7c:57:4e:fe:5d:54:9d:d0:27:7a:c3:3e:
74:42:f7:e6:34:f6:ef:be:6c:1f:3e:4e:ac:b7:a4:a1:26:d4:
2d:ff:16:c4:55:04:8a:15:3c:67:cd:ef:43:07:10:76:56:be:
dc:3d:0d:66:f4:00:f6:a5:4c:09:22:ea:b2:c4:9e:e5:52:af:
83:73:68:af:e5:06:1b:95:47:d2:8f:f7:29:1b:fe:72:dc:71:
52:6c:76:4a:1e:bd:4a:b4:5e:4f:af:70:0c:9d:c4:a2:07:67:
51:c6:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net