Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3138392e302f32342d3234203d3e20323132333832.roa
File: 34352e3135322e3138392e302f32342d3234203d3e20323132333832.roa (raw, json)
Hash identifier: 7rs1J8Hd4yr0M4sdCy7bVhcU4AGKPLwz3krpvhl6X24=
Subject key identifier: 10:8C:B0:EB:B5:8B:20:48:24:C8:0D:B6:A0:0D:8F:D8:BC:05:85:2A
Certificate issuer: /CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
Certificate serial: 431292628C5602E79D5221840181CBA96C213DBF
Authority key identifier: 7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3138392e302f32342d3234203d3e20323132333832.roa
Signing time: Tue 01 Dec 2020 23:28:22 +0000
ROA not before: Tue 01 Dec 2020 23:23:22 +0000
ROA not after: Tue 30 Nov 2021 23:28:22 +0000
asID: 212382
IP address blocks: 45.152.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:12:92:62:8c:56:02:e7:9d:52:21:84:01:81:cb:a9:6c:21:3d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
Validity
Not Before: Dec 1 23:23:22 2020 GMT
Not After : Nov 30 23:28:22 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:36:85:e5:75:ea:d4:4d:b3:6a:0d:1c:1b:
2f:0c:d5:35:60:47:1a:d4:c2:70:86:73:86:28:ec:
e2:12:b6:f6:47:9d:97:04:5c:9c:58:28:cf:0c:3e:
fd:b0:a8:ae:2b:0a:01:38:1a:25:69:9b:6d:97:94:
90:f3:6a:d1:f5:86:b8:1d:20:5c:e1:a0:0a:b5:59:
b8:d5:fd:23:d6:7a:74:75:09:23:7c:90:25:32:57:
31:de:16:99:b5:75:80:a9:b6:f1:0b:6b:b4:ea:ae:
19:26:0d:3a:c0:3a:cc:71:70:8c:be:bd:8c:3c:2c:
4d:0c:c1:da:74:dc:3e:e3:ce:7d:78:51:a3:07:b2:
bf:d7:d5:83:a1:d4:e8:4c:7b:48:d4:54:a3:80:45:
b0:21:7d:63:cb:b1:ff:33:8e:c0:36:06:1b:3b:8a:
25:98:ed:cd:72:26:94:fb:5a:8d:ea:85:d0:ad:eb:
c5:48:64:02:31:00:06:55:58:b2:dc:49:4d:8c:0d:
b0:78:93:b5:60:f3:4b:db:d4:c9:09:89:cd:a4:6b:
a8:ee:df:c3:18:9c:8d:4b:93:41:2f:05:22:8f:f3:
33:fd:72:a4:30:4c:dd:09:de:1c:ff:0c:d8:80:fd:
f1:e6:b0:15:67:5f:21:d6:4c:ce:66:d1:6c:c8:95:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:B0:EB:B5:8B:20:48:24:C8:0D:B6:A0:0D:8F:D8:BC:05:85:2A
X509v3 Authority Key Identifier:
keyid:7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/7E7B4B4010541F8E95DB7EBD28D73EA9272C86CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3138392e302f32342d3234203d3e20323132333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.189.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f3:73:65:f8:fb:54:aa:15:c2:9a:38:17:1b:55:92:83:91:
85:48:bf:39:11:80:82:b0:67:2b:8d:83:ba:cc:b8:f2:d4:8a:
ac:05:e1:77:f2:04:9f:80:a6:19:68:b4:38:0d:54:83:1b:a4:
58:c9:93:59:7c:05:6f:78:30:06:c7:2f:7b:4f:22:d0:55:ce:
a3:45:c9:2d:54:97:8f:54:34:50:02:50:ba:17:a1:24:fe:07:
0e:1c:24:92:04:07:33:64:ba:60:65:b5:7f:0b:44:d5:a7:08:
19:c8:9b:d5:f6:d1:04:87:52:04:f0:2c:0a:e1:4d:27:ab:96:
02:2c:0d:85:fd:c3:b1:93:c6:e9:91:f1:01:ab:11:a8:0f:d7:
7a:1c:ed:21:0a:74:50:d6:3e:17:be:7e:3e:24:71:36:ad:ba:
6c:39:b3:f0:e3:ae:3b:98:86:66:18:a9:30:03:17:49:5e:48:
78:66:f5:dc:6d:41:02:c3:6b:6b:6e:79:0d:e8:e0:19:d4:b5:
c5:35:21:7c:a4:c7:91:8f:21:d5:83:f2:7c:a4:2e:71:d7:74:
54:d6:80:82:6a:3b:8a:df:8d:4b:c7:e0:c1:34:95:16:5c:6f:
7c:05:3f:23:d3:1b:15:c8:a9:c5:d6:1b:94:f2:30:57:9f:df:
1c:2b:7a:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net