Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39312e302f32342d3234203d3e203434363835.roa
File: 34352e31342e39312e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier: +kmnN65cCiCsrccbYGHkXDPYgTWyP7xx+AVZNP99sFc=
Subject key identifier: 29:F6:BB:31:E7:E5:E1:CC:37:77:90:89:71:06:5F:6D:0A:17:80:FF
Certificate issuer: /CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Certificate serial: 33786AA1CA53B94DB116FA2F2A7B5692CAC271E9
Authority key identifier: 4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39312e302f32342d3234203d3e203434363835.roa
Signing time: Tue 01 Dec 2020 23:27:20 +0000
ROA not before: Tue 01 Dec 2020 23:22:20 +0000
ROA not after: Tue 30 Nov 2021 23:27:20 +0000
asID: 44685
IP address blocks: 45.14.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:78:6a:a1:ca:53:b9:4d:b1:16:fa:2f:2a:7b:56:92:ca:c2:71:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Validity
Not Before: Dec 1 23:22:20 2020 GMT
Not After : Nov 30 23:27:20 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:0e:a4:51:28:b7:9a:8a:52:d1:95:b4:f3:
f7:b8:44:d3:4e:c1:64:fb:83:38:f0:21:7b:38:a0:
91:58:9a:16:28:22:11:d5:99:00:19:b4:2f:77:06:
56:c2:71:fa:7f:94:d1:d1:6f:08:8c:de:46:d1:bf:
23:ae:62:11:47:99:aa:7d:e9:2f:3e:85:10:09:b1:
ae:49:b2:4d:6f:07:78:49:ca:ff:20:4e:46:34:80:
1c:6c:a4:fb:df:66:b8:98:a7:20:7b:fb:cc:f0:79:
74:07:d6:d9:fd:1b:31:3e:da:4e:3b:0e:fd:87:63:
13:d7:8c:7e:74:b2:81:68:b2:47:29:c7:8b:51:85:
0c:c9:01:6e:9b:db:99:14:6c:b9:e2:cf:62:5a:7d:
8c:be:96:e8:64:62:e4:e7:b7:e7:71:e2:a2:bd:ae:
56:17:bb:40:a3:6a:cb:5c:4f:c5:5b:b0:7d:c7:0d:
74:27:14:69:78:1d:29:0a:ee:55:e8:fb:f6:e7:b8:
9a:bb:ba:2b:7b:a9:98:43:28:65:25:87:08:7e:70:
1e:28:0f:2d:31:10:f4:73:26:81:1f:3a:b3:c3:61:
d1:97:d3:6e:73:a4:da:3d:4d:8c:87:f2:4f:f2:d8:
b4:16:b8:0c:0a:de:a8:64:a5:c8:63:54:5c:8b:9d:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F6:BB:31:E7:E5:E1:CC:37:77:90:89:71:06:5F:6D:0A:17:80:FF
X509v3 Authority Key Identifier:
keyid:4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39312e302f32342d3234203d3e203434363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.91.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8c:82:2e:cf:ae:37:b1:14:84:f9:3b:cf:2d:90:a7:e3:f3:
16:58:3c:89:c4:55:d8:95:48:d0:0c:8b:ae:9f:c8:19:18:5f:
fe:70:ad:07:e1:09:e1:fb:ad:bf:2b:e0:bf:26:be:f8:85:51:
ce:1e:f3:7d:b3:69:57:32:97:67:8d:a8:c2:80:13:f3:71:f1:
26:27:6f:7e:3c:0d:47:07:d4:07:b7:6c:bd:01:73:fd:51:5e:
61:46:a0:41:54:5b:f4:f1:b0:a7:bd:8b:ef:59:26:7f:c7:db:
e9:75:36:90:15:ac:dd:38:e2:95:6c:54:ec:f3:e7:10:1b:74:
8b:e8:89:23:dd:ff:86:8b:a6:3d:a9:f0:85:08:bb:e5:87:56:
19:ad:08:27:cc:cf:c1:e0:fd:d4:f3:7c:0a:1a:e3:97:d7:7b:
67:bd:13:d6:05:ea:6f:1c:6c:89:9f:84:c4:17:39:65:a9:1d:
da:0c:a4:9b:d7:89:09:e3:62:7b:4e:b3:e0:0c:cb:3d:9b:97:
4d:6a:90:d7:ee:7a:6a:f9:3d:08:62:ff:0c:66:b1:10:13:f8:
00:ff:38:c5:f1:bf:b2:7a:e9:5c:46:8e:f1:85:07:58:db:6c:
98:ec:bc:52:fa:63:be:64:83:af:f8:d7:77:b7:15:cd:0e:b4:
ab:c3:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net