Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34372e302f32342d3234203d3e203434363835.roa
File: 34352e3135322e34372e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier: kdI7GIjHxuqSKVDZK3p8arXeNZhtMGC82xqS4PPaX+c=
Subject key identifier: B2:82:F0:71:4A:0F:36:28:6C:EC:96:A9:48:80:D6:C2:A1:AA:CB:46
Certificate issuer: /CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Certificate serial: 11DF92866099A6A20F52347C525DD36596E06051
Authority key identifier: 4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34372e302f32342d3234203d3e203434363835.roa
Signing time: Tue 01 Dec 2020 23:27:53 +0000
ROA not before: Tue 01 Dec 2020 23:22:53 +0000
ROA not after: Tue 30 Nov 2021 23:27:53 +0000
asID: 44685
IP address blocks: 45.152.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:df:92:86:60:99:a6:a2:0f:52:34:7c:52:5d:d3:65:96:e0:60:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Validity
Not Before: Dec 1 23:22:53 2020 GMT
Not After : Nov 30 23:27:53 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:ab:b2:05:b1:c4:fc:26:ae:52:b3:91:3d:
bf:66:5c:6f:de:9d:13:67:da:59:f9:54:d4:9f:ca:
ef:8c:2a:4b:cc:f0:ac:f3:39:3d:a9:d0:41:92:27:
06:fe:fe:11:db:21:3f:25:dd:64:bb:18:59:fd:b5:
e2:ee:74:cb:ec:57:23:24:1b:52:bc:82:13:03:32:
e3:99:0b:b5:2a:6e:e5:58:c6:d1:4a:21:2f:cc:c4:
30:71:e3:7b:e6:26:4c:c8:3c:84:21:d9:03:93:2d:
74:43:40:84:60:3d:dd:72:dd:b6:9f:f1:8a:0a:8d:
a9:21:05:43:9d:ee:6e:08:3d:84:7e:d0:3b:b7:38:
6a:2e:3d:2a:f2:cb:27:40:b7:1c:78:6e:57:43:d1:
c6:73:76:99:f1:af:3f:18:98:7e:c6:d9:80:81:44:
81:37:fb:9a:8c:c0:dd:c4:32:68:2c:f7:ba:18:f5:
f8:5c:34:7c:4a:9e:5c:57:bc:f2:08:77:aa:89:a2:
cb:fe:47:52:1f:ca:1e:58:3e:48:09:1a:ab:0a:89:
05:ca:29:f7:01:db:6a:bb:2c:bd:41:c0:16:f5:6b:
1e:2c:f7:ae:1b:d0:53:72:63:97:de:c3:12:03:9f:
e8:f4:1d:1e:c7:fc:bc:4b:56:c8:c8:2b:83:b0:4d:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:F0:71:4A:0F:36:28:6C:EC:96:A9:48:80:D6:C2:A1:AA:CB:46
X509v3 Authority Key Identifier:
keyid:4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34372e302f32342d3234203d3e203434363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:77:f1:60:2c:81:cb:2f:37:3b:3f:43:38:f5:9b:b4:fa:e2:
ff:04:ce:10:f0:e5:29:01:b2:ef:1a:0c:ab:d1:1a:2f:55:01:
f4:6b:2a:d5:e7:fc:78:b6:9c:b9:80:24:14:d4:e7:d8:de:5e:
dd:d5:e9:b2:fe:59:db:f3:68:5b:aa:48:a5:8b:90:1b:82:42:
6b:4b:fc:0e:7a:da:7c:7f:dd:2c:4a:12:2e:a9:ef:0b:c4:80:
55:30:ba:94:e7:13:ea:03:82:ef:f8:e7:9c:9b:25:b8:cd:f3:
3f:c1:2e:af:83:7d:c9:01:d3:27:92:2f:f3:51:1d:f2:81:2a:
dc:a9:a3:82:c4:90:af:fb:0c:05:04:dc:99:11:8a:19:d2:83:
e2:19:21:8e:bb:46:42:28:0b:46:0b:9b:a7:c4:91:b4:bf:98:
11:a4:af:d1:62:a6:8b:a3:a6:26:1f:aa:18:32:48:f5:17:13:
01:be:99:7e:a7:a9:fd:e9:cf:41:7b:4d:60:18:3e:27:c7:88:
6c:7a:6f:8d:fa:b5:54:04:a4:64:66:06:95:35:6a:eb:68:3c:
17:ad:9a:ee:75:d1:da:0b:81:de:dd:52:78:21:8b:ff:8c:ef:
95:cb:34:89:dc:2f:48:59:e3:a9:cb:d3:74:f1:4d:9f:f6:86:
6d:83:76:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org