Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139312e302f32342d3234203d3e203434363835.roa
File: 34352e3135322e3139312e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier: ZdqaFqbR9dtfJKvH9hlSUxj+oLOReOiwJP9gnMFRPc0=
Subject key identifier: 58:9E:FA:1B:7C:59:29:FC:56:97:4F:75:6E:D3:B4:FC:A9:FF:28:BF
Certificate issuer: /CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
Certificate serial: 70F41A577988C075D05169A975E4CF59AA85F158
Authority key identifier: 7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139312e302f32342d3234203d3e203434363835.roa
Signing time: Tue 01 Dec 2020 23:28:23 +0000
ROA not before: Tue 01 Dec 2020 23:23:23 +0000
ROA not after: Tue 30 Nov 2021 23:28:23 +0000
asID: 44685
IP address blocks: 45.152.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f4:1a:57:79:88:c0:75:d0:51:69:a9:75:e4:cf:59:aa:85:f1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
Validity
Not Before: Dec 1 23:23:23 2020 GMT
Not After : Nov 30 23:28:23 2021 GMT
Subject: CN=3082010A0282010100DA726E1FA8AB86656BD8A3B8990671EA73F2DF1D7E7D59EC1D0AB606A730E422235EB7540F2F6F7B2A92BFEA238656C02CAD7CE7C0AFD872BF7A9AA59B6D43F08A7D4F95469670D46A08BA5A013DCA22288D9A481EF712FE0EB19B15BF2E4EB91297C0CEBFE05F32B3D80C9F5C81EB82FFBF97078E66AC1DE3646F08A6CE55F10B71730BAA3211A0FDDB483532D5BE0E1A0DAEC0F23490A2354C204DCEC57E9E3207BF35C29B2A163CC85E5FC5C7409D157A0B3546D59E535F0424D7A941655AEB0D32F13AB1CB973F1C178ECBF9193F36FE15B9B75BC6324D7FFAC0BA132C1B3F75F9A88E317403922137A9ACA5AF01532563ACFCF9F7ACB013A58964F2B0C30203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:6e:1f:a8:ab:86:65:6b:d8:a3:b8:99:06:
71:ea:73:f2:df:1d:7e:7d:59:ec:1d:0a:b6:06:a7:
30:e4:22:23:5e:b7:54:0f:2f:6f:7b:2a:92:bf:ea:
23:86:56:c0:2c:ad:7c:e7:c0:af:d8:72:bf:7a:9a:
a5:9b:6d:43:f0:8a:7d:4f:95:46:96:70:d4:6a:08:
ba:5a:01:3d:ca:22:28:8d:9a:48:1e:f7:12:fe:0e:
b1:9b:15:bf:2e:4e:b9:12:97:c0:ce:bf:e0:5f:32:
b3:d8:0c:9f:5c:81:eb:82:ff:bf:97:07:8e:66:ac:
1d:e3:64:6f:08:a6:ce:55:f1:0b:71:73:0b:aa:32:
11:a0:fd:db:48:35:32:d5:be:0e:1a:0d:ae:c0:f2:
34:90:a2:35:4c:20:4d:ce:c5:7e:9e:32:07:bf:35:
c2:9b:2a:16:3c:c8:5e:5f:c5:c7:40:9d:15:7a:0b:
35:46:d5:9e:53:5f:04:24:d7:a9:41:65:5a:eb:0d:
32:f1:3a:b1:cb:97:3f:1c:17:8e:cb:f9:19:3f:36:
fe:15:b9:b7:5b:c6:32:4d:7f:fa:c0:ba:13:2c:1b:
3f:75:f9:a8:8e:31:74:03:92:21:37:a9:ac:a5:af:
01:53:25:63:ac:fc:f9:f7:ac:b0:13:a5:89:64:f2:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9E:FA:1B:7C:59:29:FC:56:97:4F:75:6E:D3:B4:FC:A9:FF:28:BF
X509v3 Authority Key Identifier:
keyid:7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/7E7B4B4010541F8E95DB7EBD28D73EA9272C86CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139312e302f32342d3234203d3e203434363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.191.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e0:dd:d3:65:27:03:f8:9f:ac:53:9c:a0:9b:52:8c:70:11:
7a:f2:0c:c7:41:0c:26:8b:25:cd:59:dd:6c:b3:0a:f1:2b:53:
f2:ea:57:43:f9:bd:6f:e2:30:5d:5f:0f:b6:b4:ff:b8:7f:b0:
fc:b7:d5:72:e9:74:1e:d3:8b:26:95:d0:63:92:17:2c:6a:04:
3c:2d:aa:2a:e7:a4:a1:d5:dc:a6:df:77:ba:8a:6b:f1:38:2a:
fd:cb:df:64:5f:b6:a2:82:f6:1a:38:78:07:24:b4:4f:e4:85:
6b:56:41:15:fd:1a:cd:54:55:3f:e6:2c:72:cd:d5:27:d7:a1:
e6:75:76:f9:72:06:99:35:8d:55:9f:c2:e4:ba:c0:a3:7d:32:
17:3c:47:b9:ff:a4:10:3b:55:83:84:df:31:62:1d:e6:68:30:
94:64:11:13:7f:d5:3b:2f:08:aa:02:e7:20:ea:df:3a:51:e2:
ac:51:5c:21:1d:3b:79:24:dc:4e:1d:48:ab:9c:0a:41:35:6f:
b8:14:04:36:4f:d2:63:d9:2d:7e:84:7b:60:63:49:15:0c:3c:
85:62:29:78:de:17:94:f7:24:04:fd:10:1f:a2:01:4b:b3:23:
6f:c9:80:c1:fe:bd:43:fe:63:7a:ea:7b:80:0e:67:8d:ca:a6:
1e:29:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net