Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/14/34352e3135312e3132332e302f32342d3234203d3e20323132303034.roa
File: 34352e3135312e3132332e302f32342d3234203d3e20323132303034.roa (raw, json)
Hash identifier: Cj7nAb1fMmcWluM9azBdKVBgJs4dzeZ500TlD72W+0A=
Subject key identifier: 1C:8C:07:A5:5C:2D:1C:07:6A:99:EA:C8:A5:4C:FA:D3:3E:55:0E:4B
Certificate issuer: /CN=2f7cb84b1334e17130f0bb0bab35db5098eebbed
Certificate serial: 69723A71F77D8F3A8E034278A209F93FC8EC1990
Authority key identifier: 2F:7C:B8:4B:13:34:E1:71:30:F0:BB:0B:AB:35:DB:50:98:EE:BB:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3y4SxM04XEw8LsLqzXbUJjuu-0.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/14/34352e3135312e3132332e302f32342d3234203d3e20323132303034.roa
Signing time: Tue 09 Feb 2021 17:06:25 +0000
ROA not before: Tue 09 Feb 2021 17:01:25 +0000
ROA not after: Tue 08 Feb 2022 17:06:25 +0000
asID: 212004
IP address blocks: 45.151.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:72:3a:71:f7:7d:8f:3a:8e:03:42:78:a2:09:f9:3f:c8:ec:19:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7cb84b1334e17130f0bb0bab35db5098eebbed
Validity
Not Before: Feb 9 17:01:25 2021 GMT
Not After : Feb 8 17:06:25 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:66:e6:9f:be:9f:ba:ef:ff:7f:3c:98:b4:
35:57:87:57:17:7c:25:c9:ca:fc:9f:0b:5c:fb:2d:
39:bb:e0:16:9c:8c:c0:41:61:1d:23:7a:ad:16:96:
23:14:76:23:91:16:12:4e:75:cf:de:fe:bf:76:db:
2c:91:3a:df:cd:c2:c2:5f:bd:95:28:c8:b7:ff:d8:
94:8d:ca:ee:e9:61:c6:90:61:1c:ea:dc:12:07:78:
9b:a8:0e:ab:2e:47:95:c4:11:3b:44:f0:46:c9:cd:
d1:ac:26:58:7f:54:0a:93:ab:7b:48:e2:08:30:c4:
ac:31:7a:4d:e8:7a:a5:a0:f6:5d:05:f9:55:f0:4a:
d9:d6:ef:2b:0a:cc:cd:1b:00:07:8f:a0:58:3f:ec:
92:31:34:17:d0:fa:4c:6a:af:e7:e4:08:b7:3e:b6:
43:d9:98:75:53:c9:a3:cb:84:2c:5a:a9:f0:44:60:
91:91:6d:c4:78:51:8b:b7:b5:70:ab:73:78:17:31:
08:39:5f:16:bb:39:bd:68:93:19:4f:8f:35:71:f5:
d9:3a:64:4e:7a:6c:4c:fb:de:1c:16:9d:70:b3:86:
81:9c:80:21:0f:61:fd:33:e9:60:61:1f:09:3a:ef:
bf:f1:59:bc:c8:63:05:fb:a3:98:5d:16:0f:83:cb:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:07:A5:5C:2D:1C:07:6A:99:EA:C8:A5:4C:FA:D3:3E:55:0E:4B
X509v3 Authority Key Identifier:
keyid:2F:7C:B8:4B:13:34:E1:71:30:F0:BB:0B:AB:35:DB:50:98:EE:BB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/14/2F7CB84B1334E17130F0BB0BAB35DB5098EEBBED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3y4SxM04XEw8LsLqzXbUJjuu-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/14/34352e3135312e3132332e302f32342d3234203d3e20323132303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:22:36:7a:f0:3a:eb:a5:02:49:11:61:c5:c9:24:9b:2d:6b:
ff:d6:be:26:5a:68:80:9e:93:22:4a:2f:62:20:61:cc:f0:e7:
f2:3e:5c:2f:d0:bd:fd:5e:86:d6:9f:81:ed:d4:95:b7:e0:11:
09:46:2f:c0:fe:d7:e3:88:7f:f1:0b:99:a8:28:34:94:c6:7f:
8d:c3:00:d9:0a:55:64:45:52:5b:68:b9:07:6e:52:4a:3f:80:
a3:dd:6d:ed:3c:20:5a:20:6e:1e:0f:a7:cf:b4:c2:93:82:9b:
0a:d8:ac:60:bc:d9:b9:a9:6c:3a:3b:b1:bf:0f:f3:80:e1:27:
86:40:45:67:5f:14:39:c7:df:07:c5:3c:30:62:ce:42:a4:5a:
7b:35:5e:59:c5:72:a3:95:b9:15:ab:db:c3:c8:cb:04:a0:f9:
69:1c:01:7a:e9:31:32:85:1b:71:1c:3e:e3:66:c0:d1:9a:34:
c6:91:c5:6e:f7:f0:9d:34:7e:4b:b5:6a:f2:a5:45:e8:6b:9a:
6b:c2:2d:dd:49:93:1e:2e:fd:46:e0:41:41:41:72:ce:c5:c5:
a5:27:e4:bc:82:0a:9e:55:4e:2a:00:c5:aa:b3:91:e2:e6:32:
10:9c:65:24:c9:59:81:78:25:48:64:77:bc:a9:99:7e:03:ec:
6e:06:15:dc
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUaXI6cfd9jzqOA0J4ogn5P8jsGZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmY3Y2I4NGIxMzM0ZTE3MTMwZjBiYjBiYWIzNWRiNTA5
OGVlYmJlZDAeFw0yMTAyMDkxNzAxMjVaFw0yMjAyMDgxNzA2MjVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDQyMzY2RTY5RkJFOUZCQUVG
RkY3RjNDOThCNDM1NTc4NzU3MTc3QzI1QzlDQUZDOUYwQjVDRkIyRDM5QkJFMDE2
OUM4Q0MwNDE2MTFEMjM3QUFEMTY5NjIzMTQ3NjIzOTExNjEyNEU3NUNGREVGRUJG
NzZEQjJDOTEzQURGQ0RDMkMyNUZCRDk1MjhDOEI3RkZEODk0OERDQUVFRTk2MUM2
OTA2MTFDRUFEQzEyMDc3ODlCQTgwRUFCMkU0Nzk1QzQxMTNCNDRGMDQ2QzlDREQx
QUMyNjU4N0Y1NDBBOTNBQjdCNDhFMjA4MzBDNEFDMzE3QTRERTg3QUE1QTBGNjVE
MDVGOTU1RjA0QUQ5RDZFRjJCMEFDQ0NEMUIwMDA3OEZBMDU4M0ZFQzkyMzEzNDE3
RDBGQTRDNkFBRkU3RTQwOEI3M0VCNjQzRDk5ODc1NTNDOUEzQ0I4NDJDNUFBOUYw
NDQ2MDkxOTE2REM0Nzg1MThCQjdCNTcwQUI3Mzc4MTczMTA4Mzk1RjE2QkIzOUJE
Njg5MzE5NEY4RjM1NzFGNUQ5M0E2NDRFN0E2QzRDRkJERTFDMTY5RDcwQjM4Njgx
OUM4MDIxMEY2MUZEMzNFOTYwNjExRjA5M0FFRkJGRjE1OUJDQzg2MzA1RkJBMzk4
NUQxNjBGODNDQjQwODUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1CNm5p++n7rv/388mLQ1V4dXF3wlycr8nwtc+y05u+AWnIzAQWEd
I3qtFpYjFHYjkRYSTnXP3v6/dtsskTrfzcLCX72VKMi3/9iUjcru6WHGkGEc6twS
B3ibqA6rLkeVxBE7RPBGyc3RrCZYf1QKk6t7SOIIMMSsMXpN6HqloPZdBflV8ErZ
1u8rCszNGwAHj6BYP+ySMTQX0PpMaq/n5Ai3PrZD2Zh1U8mjy4QsWqnwRGCRkW3E
eFGLt7Vwq3N4FzEIOV8Wuzm9aJMZT481cfXZOmROemxM+94cFp1ws4aBnIAhD2H9
M+lgYR8JOu+/8Vm8yGMF+6OYXRYPg8tAhQIDAQABo4IB9TCCAfEwHQYDVR0OBBYE
FByMB6VcLRwHapnqyKVM+tM+VQ5LMB8GA1UdIwQYMBaAFC98uEsTNOFxMPC7C6s1
21CY7rvtMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNC8yRjdD
Qjg0QjEzMzRFMTcxMzBGMEJCMEJBQjM1REI1MDk4RUVCQkVELmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDN5NFN4TTA0WEV3OExzTHF6WGJVSmp1dS0wLmNlcjCB
iwYIKwYBBQUHAQsEfzB9MHsGCCsGAQUFBzALhm9yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNC8zNDM1MmUzMTM1MzEyZTMx
MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMwMzAzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAC2XezANBgkqhkiG9w0BAQsFAAOCAQEAsSI2evA666UCSRFhxckkmy1r/9a+
JlpogJ6TIkovYiBhzPDn8j5cL9C9/V6G1p+B7dSVt+ARCUYvwP7X44h/8QuZqCg0
lMZ/jcMA2QpVZEVSW2i5B25SSj+Ao91t7TwgWiBuHg+nz7TCk4KbCtisYLzZuals
Ojuxvw/zgOEnhkBFZ18UOcffB8U8MGLOQqRaezVeWcVyo5W5Favbw8jLBKD5aRwB
eukxMoUbcRw+42bA0Zo0xpHFbvfwnTR+S7Vq8qVF6Guaa8It3UmTHi79RuBBQUFy
zsXFpSfkvIIKnlVOKgDFqrOR4uYyEJxlJMlZgXglSGR3vKmZfgPsbgYV3A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net