Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39302e302f32342d3234203d3e20323132383532.roa
File: 34352e31342e39302e302f32342d3234203d3e20323132383532.roa (raw, json)
Hash identifier: Ev/A5WedLI95EWmjmXn7yyW1T3tfLYhcsPSwZUdBJew=
Subject key identifier: 58:7C:89:3A:66:3E:43:73:06:FB:C8:B2:44:06:45:B7:5E:E9:15:E1
Certificate issuer: /CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Certificate serial: 0C71B9DD4FB76A17BB0B9AC3FEE25317929B15BF
Authority key identifier: 4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39302e302f32342d3234203d3e20323132383532.roa
Signing time: Tue 01 Dec 2020 23:27:19 +0000
ROA not before: Tue 01 Dec 2020 23:22:19 +0000
ROA not after: Tue 30 Nov 2021 23:27:19 +0000
asID: 212852
IP address blocks: 45.14.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:71:b9:dd:4f:b7:6a:17:bb:0b:9a:c3:fe:e2:53:17:92:9b:15:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Validity
Not Before: Dec 1 23:22:19 2020 GMT
Not After : Nov 30 23:27:19 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:61:00:b3:8f:6a:43:db:18:21:c7:d3:b2:
64:a9:04:fa:88:7a:73:f3:c0:45:4b:0b:a3:a7:72:
d0:8a:83:ce:dd:75:29:09:04:13:d0:67:b7:90:ef:
37:af:34:92:3d:83:ff:47:8d:71:e4:7e:65:6c:58:
ab:0c:8d:f9:6c:f1:18:f2:13:72:16:68:3e:c4:8d:
19:51:dc:18:b9:c3:a2:34:fd:34:40:80:10:74:68:
d5:ef:c4:cd:a8:17:e2:13:e2:4c:9b:32:93:71:c1:
19:c8:a2:8e:07:a7:68:b4:62:f9:1c:bd:bb:2f:9c:
b4:11:b7:f1:bd:2b:ff:4c:d9:cb:d6:c8:69:1f:38:
09:2e:70:1f:2f:42:24:1b:56:96:0b:ed:ab:24:49:
f0:9d:5a:d7:36:ec:51:98:d7:68:d2:53:ea:6a:3b:
1d:39:3f:d9:7c:16:b8:33:78:27:8a:7b:51:be:85:
34:ab:26:8b:4a:88:e8:cc:5a:63:7f:b6:23:c8:69:
43:04:f8:d2:ec:7e:f8:e2:fd:e4:9d:b0:d2:f1:dd:
19:17:3f:76:af:ba:dc:34:43:72:02:88:d9:4e:99:
45:6f:a3:28:d7:60:cc:bc:bc:3f:2a:cc:93:7f:0f:
d2:42:15:4d:11:7c:f9:44:38:f5:b6:a9:d3:4c:bf:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:89:3A:66:3E:43:73:06:FB:C8:B2:44:06:45:B7:5E:E9:15:E1
X509v3 Authority Key Identifier:
keyid:4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39302e302f32342d3234203d3e20323132383532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:16:43:2d:9d:17:1a:59:ac:d8:94:5f:49:fa:42:ba:7d:f4:
e0:e4:4d:b0:a5:d8:af:3c:83:56:ad:1d:e6:c7:fc:fd:34:9c:
19:8e:22:3b:d3:9f:47:c1:00:e9:c4:24:b7:af:80:22:03:02:
0e:3d:8c:97:b2:d8:19:8b:36:c7:cf:79:96:de:f3:c4:13:87:
bb:1f:f8:4e:e4:05:e3:ab:c5:7b:b1:a7:4a:bb:a2:5a:ca:ee:
77:6c:5d:ce:8b:94:a8:ab:6c:23:77:ee:67:bd:e0:84:67:21:
fc:19:3b:e1:d5:44:72:bf:55:09:e6:d1:45:8f:f4:1b:bc:75:
95:e7:f3:24:7a:e5:bd:9e:d0:40:6e:b7:64:0d:87:8d:c6:1d:
dd:e1:8e:91:c2:41:45:c4:61:59:d2:7b:ec:78:06:e8:60:45:
e6:7c:cb:34:d2:71:0d:b1:cf:22:79:e3:61:30:96:82:ad:0f:
44:21:d6:ee:f7:0d:40:b6:42:b4:7c:4c:84:16:92:c7:78:14:
3b:46:40:0a:61:bc:2f:db:d1:45:8a:5c:fa:52:95:1e:b5:1f:
af:89:29:fa:a0:46:1d:bd:2f:20:b2:d1:c8:18:14:99:33:97:
6e:45:a5:91:d2:26:06:8f:8b:f6:3d:5e:b5:aa:80:56:68:5c:
b0:66:20:61
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUDHG53U+3ahe7C5rD/uJTF5KbFb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGQ0YTVjMDcxZTNjN2I0NzczM2UxYTVhOTI2ZmZjOTQ1
ZmE2N2UyNjAeFw0yMDEyMDEyMzIyMTlaFw0yMTExMzAyMzI3MTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzkwQjYxMDBCMzhGNkE0M0RC
MTgyMUM3RDNCMjY0QTkwNEZBODg3QTczRjNDMDQ1NEIwQkEzQTc3MkQwOEE4M0NF
REQ3NTI5MDkwNDEzRDA2N0I3OTBFRjM3QUYzNDkyM0Q4M0ZGNDc4RDcxRTQ3RTY1
NkM1OEFCMEM4REY5NkNGMTE4RjIxMzcyMTY2ODNFQzQ4RDE5NTFEQzE4QjlDM0Ey
MzRGRDM0NDA4MDEwNzQ2OEQ1RUZDNENEQTgxN0UyMTNFMjRDOUIzMjkzNzFDMTE5
QzhBMjhFMDdBNzY4QjQ2MkY5MUNCREJCMkY5Q0I0MTFCN0YxQkQyQkZGNENEOUNC
RDZDODY5MUYzODA5MkU3MDFGMkY0MjI0MUI1Njk2MEJFREFCMjQ0OUYwOUQ1QUQ3
MzZFQzUxOThENzY4RDI1M0VBNkEzQjFEMzkzRkQ5N0MxNkI4MzM3ODI3OEE3QjUx
QkU4NTM0QUIyNjhCNEE4OEU4Q0M1QTYzN0ZCNjIzQzg2OTQzMDRGOEQyRUM3RUY4
RTJGREU0OURCMEQyRjFERDE5MTczRjc2QUZCQURDMzQ0MzcyMDI4OEQ5NEU5OTQ1
NkZBMzI4RDc2MENDQkNCQzNGMkFDQzkzN0YwRkQyNDIxNTREMTE3Q0Y5NDQzOEY1
QjZBOUQzNENCRjNEQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyQthALOPakPbGCHH07JkqQT6iHpz88BFSwujp3LQioPO3XUpCQQT
0Ge3kO83rzSSPYP/R41x5H5lbFirDI35bPEY8hNyFmg+xI0ZUdwYucOiNP00QIAQ
dGjV78TNqBfiE+JMmzKTccEZyKKOB6dotGL5HL27L5y0EbfxvSv/TNnL1shpHzgJ
LnAfL0IkG1aWC+2rJEnwnVrXNuxRmNdo0lPqajsdOT/ZfBa4M3gnintRvoU0qyaL
SojozFpjf7YjyGlDBPjS7H744v3knbDS8d0ZFz92r7rcNENyAojZTplFb6Mo12DM
vLw/KsyTfw/SQhVNEXz5RDj1tqnTTL89qQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FFh8iTpmPkNzBvvIskQGRbde6RXhMB8GA1UdIwQYMBaAFE1KXAcePHtHcz4aWpJv
/JRfpn4mMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMjcvNEQ0
QTVDMDcxRTNDN0I0NzczM0UxQTVBOTI2RkZDOTQ1RkE2N0UyNi5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL1RVcGNCeDQ4ZTBkelBocGFrbV84bEYtbWZpWS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTI3LzM0MzUyZTMxMzQyZTM5
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzODM1MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtDlowDQYJKoZIhvcNAQELBQADggEBAC0WQy2dFxpZrNiUX0n6Qrp99ODkTbCl
2K88g1atHebH/P00nBmOIjvTn0fBAOnEJLevgCIDAg49jJey2BmLNsfPeZbe88QT
h7sf+E7kBeOrxXuxp0q7olrK7ndsXc6LlKirbCN37me94IRnIfwZO+HVRHK/VQnm
0UWP9Bu8dZXn8yR65b2e0EBut2QNh43GHd3hjpHCQUXEYVnSe+x4BuhgReZ8yzTS
cQ2xzyJ542EwloKtD0Qh1u73DUC2QrR8TIQWksd4FDtGQAphvC/b0UWKXPpSlR61
H6+JKfqgRh29LyCy0cgYFJkzl25FpZHSJgaPi/Y9XrWqgFZoXLBmIGE=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net