Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323131383330.roa
File: 34352e3134312e32312e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier: X93+l0c/e9BZw2mprQUkqSJqe6Zwsi1LiyJQkFPJIqo=
Subject key identifier: 5B:C5:56:DF:3D:A1:83:D6:FC:0C:A2:DF:5A:59:19:DF:A2:64:94:6A
Certificate issuer: /CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Certificate serial: 7D2F1B6FD97A18B7258AD8D47C79599FE5571AC6
Authority key identifier: 54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323131383330.roa
Signing time: Sat 13 Feb 2021 18:27:29 +0000
ROA not before: Sat 13 Feb 2021 18:22:29 +0000
ROA not after: Sat 12 Feb 2022 18:27:29 +0000
asID: 211830
IP address blocks: 45.141.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2f:1b:6f:d9:7a:18:b7:25:8a:d8:d4:7c:79:59:9f:e5:57:1a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Validity
Not Before: Feb 13 18:22:29 2021 GMT
Not After : Feb 12 18:27:29 2022 GMT
Subject: CN=3082010A0282010100CF8342CDED35B31A20899164A3E9D020649069A3903C73DDB435778CA24265D9B7A83FD2E3581F2579B9DBE3D3D4CFB42E38F538F4C443DB1459B3177C5B87FD9BD07DA68B8CB0B51AA90A0E7FB28621CB5C1F44C94D2B7ABF5BC2E54082FD902E494738E7C02C2F7C8EA0DBF492600F5A9B8351A74E3C80B4ABE1FC1C0C1E2653D6B7C2EF378F12439641B75DCE6306795A853AC048F6884BC5FF474A5F5307957CCF9135973834A667295BCBAB78A66043774B0CF6312DE1D7F6BA77D015385D5C7A21D6E7D6FF27BD892FA1D40590847FF75AA79532AB5E169B1DFB3033FA1B8709A73890261DEE10395C5392A3347260AD4605D4A087802D5F440863A0410203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:42:cd:ed:35:b3:1a:20:89:91:64:a3:e9:
d0:20:64:90:69:a3:90:3c:73:dd:b4:35:77:8c:a2:
42:65:d9:b7:a8:3f:d2:e3:58:1f:25:79:b9:db:e3:
d3:d4:cf:b4:2e:38:f5:38:f4:c4:43:db:14:59:b3:
17:7c:5b:87:fd:9b:d0:7d:a6:8b:8c:b0:b5:1a:a9:
0a:0e:7f:b2:86:21:cb:5c:1f:44:c9:4d:2b:7a:bf:
5b:c2:e5:40:82:fd:90:2e:49:47:38:e7:c0:2c:2f:
7c:8e:a0:db:f4:92:60:0f:5a:9b:83:51:a7:4e:3c:
80:b4:ab:e1:fc:1c:0c:1e:26:53:d6:b7:c2:ef:37:
8f:12:43:96:41:b7:5d:ce:63:06:79:5a:85:3a:c0:
48:f6:88:4b:c5:ff:47:4a:5f:53:07:95:7c:cf:91:
35:97:38:34:a6:67:29:5b:cb:ab:78:a6:60:43:77:
4b:0c:f6:31:2d:e1:d7:f6:ba:77:d0:15:38:5d:5c:
7a:21:d6:e7:d6:ff:27:bd:89:2f:a1:d4:05:90:84:
7f:f7:5a:a7:95:32:ab:5e:16:9b:1d:fb:30:33:fa:
1b:87:09:a7:38:90:26:1d:ee:10:39:5c:53:92:a3:
34:72:60:ad:46:05:d4:a0:87:80:2d:5f:44:08:63:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:56:DF:3D:A1:83:D6:FC:0C:A2:DF:5A:59:19:DF:A2:64:94:6A
X509v3 Authority Key Identifier:
keyid:54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/54ED4605385D5EDB0DD5C3EA049C52A5159B7CF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323131383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.21.0/24
Signature Algorithm: sha256WithRSAEncryption
54:34:13:ad:94:27:e7:39:c1:d0:7d:1f:f5:ef:dd:01:26:ca:
f1:d7:dd:91:0d:e4:3d:98:05:a9:0e:fe:ab:68:fe:e3:95:1e:
50:9f:d9:9f:2e:b9:54:c4:81:61:16:dd:9f:09:11:d7:2a:bb:
f4:18:f9:cb:a4:90:78:c6:68:ac:78:de:6b:45:56:02:cc:68:
a0:5a:ec:cc:7d:69:be:c2:e7:ed:85:d8:6e:b7:3b:ee:c5:c3:
5b:be:47:b2:b9:0d:5e:44:50:f5:a4:2f:8b:e1:69:22:ff:e0:
fe:39:87:11:34:6d:9f:c2:f5:d7:81:b2:2c:a1:06:0b:68:1b:
c8:9a:27:0a:0a:b3:81:38:3c:97:ff:32:c7:f9:45:fd:77:eb:
48:c0:91:eb:a9:0a:ab:01:d8:92:67:fa:ed:d5:88:29:53:ce:
b7:97:8c:e7:b5:3d:15:8d:fb:b7:6c:52:7b:e0:de:bc:13:bb:
90:63:11:26:ca:47:1e:50:79:ad:3d:b1:90:cd:ae:53:90:b5:
17:db:54:39:e7:49:40:77:bc:a8:47:40:be:be:3f:00:ca:b3:
1d:f6:54:0a:aa:dc:fb:2a:cf:94:4a:5e:90:4f:5b:f2:49:66:
f5:8f:18:c7:28:7d:5d:19:81:a8:cd:bf:8d:9d:1a:51:93:e8:
1f:34:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net