Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e2037383431.roa
File: 34352e38352e3235302e302f32342d3234203d3e2037383431.roa (raw, json)
Hash identifier: U7Ggmt5l2cSlX1PLhxnwY/jPyw1TbtdPOH9mnEhrwE8=
Subject key identifier: 15:EF:BF:3B:CB:69:74:C0:26:A9:3C:4F:CC:7E:A4:F3:05:8D:93:A6
Certificate issuer: /CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
Certificate serial: 0F415E4714BA88D9F35056D725605BDAE013F282
Authority key identifier: EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e2037383431.roa
Signing time: Tue 01 Dec 2020 23:30:26 +0000
ROA not before: Tue 01 Dec 2020 23:25:26 +0000
ROA not after: Tue 30 Nov 2021 23:30:26 +0000
asID: 7841
IP address blocks: 45.85.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:41:5e:47:14:ba:88:d9:f3:50:56:d7:25:60:5b:da:e0:13:f2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
Validity
Not Before: Dec 1 23:25:26 2020 GMT
Not After : Nov 30 23:30:26 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:81:a6:12:ab:c2:97:4a:d0:df:d5:d8:f3:
b2:f4:a5:38:ec:33:83:1d:f6:0b:2d:df:cc:10:80:
67:0d:8b:94:0a:96:47:f2:5d:bd:80:d5:be:b7:80:
0d:4c:4f:4d:13:14:92:c8:e1:53:2f:6f:b8:9e:71:
b4:49:4f:70:97:34:cc:e7:92:83:3a:00:6c:ba:35:
21:84:52:15:8d:cd:4b:32:f0:70:19:63:9c:c6:5e:
e0:d4:c3:d8:c8:4a:42:b8:ca:31:12:76:78:bc:05:
84:65:0a:8a:33:37:e9:cd:32:bb:cf:3c:3e:a2:1b:
2b:5f:a6:bb:12:2c:af:c3:cc:45:e8:c0:15:16:9d:
48:fd:19:a0:e5:f9:78:53:0a:8b:93:64:5c:cc:2d:
63:da:99:69:fe:7a:7b:08:c4:1d:85:b1:10:36:0d:
49:9e:d8:be:41:e2:84:9b:47:ac:ca:36:e8:43:ac:
6d:c0:25:47:7f:ce:dc:d2:66:54:77:20:17:16:66:
22:35:fe:d2:59:d6:92:7a:74:33:74:36:32:4a:8c:
bf:0d:55:55:70:3c:70:7f:af:e5:cf:9b:7b:bf:b4:
9e:a3:35:f0:55:7a:cf:a2:8d:73:59:5d:2d:5f:eb:
a3:ce:6d:ac:65:12:bf:7e:b2:91:e8:ba:6e:e2:4c:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:BF:3B:CB:69:74:C0:26:A9:3C:4F:CC:7E:A4:F3:05:8D:93:A6
X509v3 Authority Key Identifier:
keyid:EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e2037383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.250.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e0:db:3f:8b:c7:bf:83:e2:c4:13:3f:bc:fc:d9:6c:c2:28:
b0:d9:92:d4:6d:be:04:7f:7c:92:93:e5:79:9a:1f:5d:1e:ea:
35:eb:aa:7a:fa:5b:70:ed:38:d6:6b:db:2e:d1:35:a2:10:f5:
07:d4:2f:6a:a5:d3:7a:fa:14:8f:81:0c:2c:a9:00:5d:06:74:
87:f2:f0:38:1d:05:d9:9c:5a:c7:e5:7a:d3:f8:13:7a:02:0c:
11:99:3c:5f:2c:95:76:d1:f4:df:82:4d:1d:7b:94:03:5c:37:
d6:8d:e1:79:1a:65:d5:8b:80:ce:14:38:79:a5:e1:9f:19:94:
af:d2:6e:33:e2:8c:63:52:fd:9c:d4:62:cd:8c:5c:80:5a:30:
9c:5a:0d:77:4e:56:a9:59:4a:92:49:72:ca:ae:73:14:62:30:
10:6f:6b:95:f6:4e:35:c1:00:32:cd:88:e5:f2:73:8f:ac:2a:
3c:ca:26:36:45:ca:16:98:31:5b:35:03:5d:1d:5e:f3:4a:3c:
20:a7:38:cf:27:00:1c:db:bd:67:6e:a1:1b:1e:67:e4:69:eb:
68:6f:0c:5a:cf:16:3d:0d:26:e8:7f:94:69:b7:a6:3f:0a:09:
c1:77:55:4d:aa:43:41:09:66:1a:cf:86:59:b7:8c:94:16:43:
a3:c1:3e:5e
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUD0FeRxS6iNnzUFbXJWBb2uAT8oIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWMwZmYyN2M2NmYzNzMwZWNjMDA2YzI1ZTk0ZDBhMDcw
Yjg3MDdkZjAeFw0yMDEyMDEyMzI1MjZaFw0yMTExMzAyMzMwMjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDU2NjgxQTYxMkFCQzI5NzRB
RDBERkQ1RDhGM0IyRjRBNTM4RUMzMzgzMURGNjBCMkRERkNDMTA4MDY3MEQ4Qjk0
MEE5NjQ3RjI1REJEODBENUJFQjc4MDBENEM0RjREMTMxNDkyQzhFMTUzMkY2RkI4
OUU3MUI0NDk0RjcwOTczNENDRTc5MjgzM0EwMDZDQkEzNTIxODQ1MjE1OERDRDRC
MzJGMDcwMTk2MzlDQzY1RUUwRDRDM0Q4Qzg0QTQyQjhDQTMxMTI3Njc4QkMwNTg0
NjUwQThBMzMzN0U5Q0QzMkJCQ0YzQzNFQTIxQjJCNUZBNkJCMTIyQ0FGQzNDQzQ1
RThDMDE1MTY5RDQ4RkQxOUEwRTVGOTc4NTMwQThCOTM2NDVDQ0MyRDYzREE5OTY5
RkU3QTdCMDhDNDFEODVCMTEwMzYwRDQ5OUVEOEJFNDFFMjg0OUI0N0FDQ0EzNkU4
NDNBQzZEQzAyNTQ3N0ZDRURDRDI2NjU0NzcyMDE3MTY2NjIyMzVGRUQyNTlENjky
N0E3NDMzNzQzNjMyNEE4Q0JGMEQ1NTU1NzAzQzcwN0ZBRkU1Q0Y5QjdCQkZCNDlF
QTMzNUYwNTU3QUNGQTI4RDczNTk1RDJENUZFQkEzQ0U2REFDNjUxMkJGN0VCMjkx
RThCQTZFRTI0QzE5QTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1WaBphKrwpdK0N/V2POy9KU47DODHfYLLd/MEIBnDYuUCpZH8l29
gNW+t4ANTE9NExSSyOFTL2+4nnG0SU9wlzTM55KDOgBsujUhhFIVjc1LMvBwGWOc
xl7g1MPYyEpCuMoxEnZ4vAWEZQqKMzfpzTK7zzw+ohsrX6a7Eiyvw8xF6MAVFp1I
/Rmg5fl4UwqLk2RczC1j2plp/np7CMQdhbEQNg1Jnti+QeKEm0esyjboQ6xtwCVH
f87c0mZUdyAXFmYiNf7SWdaSenQzdDYySoy/DVVVcDxwf6/lz5t7v7SeozXwVXrP
oo1zWV0tX+ujzm2sZRK/frKR6Lpu4kwZoQIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FBXvvzvLaXTAJqk8T8x+pPMFjZOmMB8GA1UdIwQYMBaAFOwP8nxm83MOzABsJelN
CgcLhwffMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMTAvRUMw
RkYyN0M2NkYzNzMwRUNDMDA2QzI1RTk0RDBBMDcwQjg3MDdERi5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxULzdBX3lmR2J6Y3c3TUFHd2w2VTBLQnd1SEI5OC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTEwLzM0MzUyZTM4MzUyZTMy
MzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzgzNDMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LVX6MA0GCSqGSIb3DQEBCwUAA4IBAQBY4Ns/i8e/g+LEEz+8/Nlswiiw2ZLUbb4E
f3ySk+V5mh9dHuo166p6+ltw7TjWa9su0TWiEPUH1C9qpdN6+hSPgQwsqQBdBnSH
8vA4HQXZnFrH5XrT+BN6AgwRmTxfLJV20fTfgk0de5QDXDfWjeF5GmXVi4DOFDh5
peGfGZSv0m4z4oxjUv2c1GLNjFyAWjCcWg13TlapWUqSSXLKrnMUYjAQb2uV9k41
wQAyzYjl8nOPrCo8yiY2RcoWmDFbNQNdHV7zSjwgpzjPJwAc271nbqEbHmfkaeto
bwxazxY9DSbof5Rpt6Y/CgnBd1VNqkNBCWYaz4ZZt4yUFkOjwT5e
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net