Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323132383738.roa
File: 34352e3134312e32312e302f32342d3234203d3e20323132383738.roa (raw, json)
Hash identifier: CHlNeSQVLrAQtbo1TzpjH8HLOmDQ2KF5umj1Sc9rYUc=
Subject key identifier: 4E:BA:A3:D6:FD:36:0C:6F:28:F4:88:A2:BD:0E:3C:26:A5:E1:15:B8
Certificate issuer: /CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Certificate serial: 129ADF52BE84DE6121995954036B5351DC9202AE
Authority key identifier: 54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323132383738.roa
Signing time: Fri 27 Nov 2020 15:10:08 +0000
ROA not before: Fri 27 Nov 2020 15:05:08 +0000
ROA not after: Fri 26 Nov 2021 15:10:08 +0000
asID: 212878
IP address blocks: 45.141.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:9a:df:52:be:84:de:61:21:99:59:54:03:6b:53:51:dc:92:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Validity
Not Before: Nov 27 15:05:08 2020 GMT
Not After : Nov 26 15:10:08 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:a9:85:71:ce:3d:8c:00:f5:8f:5e:52:62:
10:e6:9c:97:9a:cf:09:73:db:94:45:24:dd:61:c2:
c3:43:c0:1c:52:ec:07:b4:32:99:9f:21:df:ce:a8:
6c:e1:63:06:05:fd:95:0d:81:60:c6:0c:3a:71:a2:
81:df:b0:a2:8b:f8:64:87:ec:6f:4e:2a:f2:d8:78:
07:d3:2b:ef:30:78:f9:2b:ab:ec:b3:10:36:6d:c2:
e2:a7:e9:a6:54:d2:d0:4a:6b:f8:d2:9d:9b:eb:ad:
1b:40:9f:52:7a:fa:7b:fe:a0:34:88:40:a2:d5:3a:
66:38:d0:c2:24:ee:45:3b:80:a1:0d:c5:46:b8:89:
aa:e7:19:26:28:1f:e8:60:80:cb:85:d8:5d:1a:ec:
ca:da:3b:5a:8a:18:79:09:84:3d:81:e8:3a:5e:70:
b1:5e:c4:e3:46:81:7a:04:2c:d0:0c:56:4c:49:0d:
57:2c:5b:80:fa:b3:9b:1e:62:2e:c4:25:d3:33:51:
69:5d:00:f0:61:63:20:b0:8b:6b:97:79:84:3e:fb:
98:c1:f8:4f:65:97:fe:d0:e0:57:7c:a6:ae:bb:e7:
7b:18:cd:56:19:00:a4:c3:b9:1f:83:d4:65:b5:23:
9c:03:d3:2c:26:05:7c:f3:82:f3:69:c8:94:d1:17:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BA:A3:D6:FD:36:0C:6F:28:F4:88:A2:BD:0E:3C:26:A5:E1:15:B8
X509v3 Authority Key Identifier:
keyid:54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/54ED4605385D5EDB0DD5C3EA049C52A5159B7CF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323132383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.21.0/24
Signature Algorithm: sha256WithRSAEncryption
74:77:a9:96:30:7d:b6:e1:40:e2:eb:b5:9e:fe:9e:e8:52:b5:
af:92:90:a6:bc:07:7b:79:48:07:b5:d4:88:2e:f7:a8:45:3d:
4e:07:ab:84:47:3c:9a:65:c9:0e:5f:02:ed:75:71:d1:98:84:
85:9d:ef:dc:50:f6:a3:04:67:57:58:a3:40:cf:b9:42:f2:31:
b0:1f:96:a2:9c:9c:c3:47:41:d8:da:aa:d0:71:24:e2:38:e9:
00:9f:6e:d6:30:70:80:36:13:aa:18:e1:3c:34:96:da:1b:84:
e9:e4:15:76:41:ba:c4:cc:66:67:52:4c:6b:52:8d:12:2f:22:
fd:e3:97:0b:43:c0:3c:47:ca:0f:07:a2:a9:e8:2d:92:c9:77:
76:e7:89:0b:81:40:86:d4:79:24:5b:15:ad:f8:f8:4b:34:55:
ef:07:e4:62:19:e0:69:ad:6a:2f:6b:aa:75:eb:68:d6:1f:47:
a8:ac:14:de:ab:83:c8:db:c0:6b:cb:58:bf:40:4a:90:33:85:
1f:2d:c9:df:e5:77:0a:85:e0:f1:31:5a:b5:83:8b:5e:5b:5f:
d2:de:d5:40:71:e6:db:b4:d5:6b:5b:6c:5d:b2:f3:a8:6e:19:
6d:bd:6a:26:07:31:70:5d:8f:eb:a9:8b:9c:e6:dd:3c:48:0b:
8d:1e:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net