Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135392e302f32342d3234203d3e20323130393737.roa
File: 34352e31302e3135392e302f32342d3234203d3e20323130393737.roa (raw, json)
Hash identifier: AM+epehq1FPOujJ6dr+s62PL49bvrVT1ao8A0wXjSo0=
Subject key identifier: 4E:6F:BC:4F:90:00:78:65:B3:A5:E1:21:C2:F8:AD:52:F5:4E:CD:6C
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 19CD8E0AFEEF896E2AFE9588A0F3BC62936113DC
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135392e302f32342d3234203d3e20323130393737.roa
Signing time: Wed 11 May 2022 09:21:07 +0000
ROA not before: Wed 11 May 2022 09:16:07 +0000
ROA not after: Wed 10 May 2023 09:21:07 +0000
asID: 210977
IP address blocks: 45.10.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:cd:8e:0a:fe:ef:89:6e:2a:fe:95:88:a0:f3:bc:62:93:61:13:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: May 11 09:16:07 2022 GMT
Not After : May 10 09:21:07 2023 GMT
Subject: CN=4E6FBC4F90007865B3A5E121C2F8AD52F54ECD6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:ea:66:46:5d:30:c3:bb:86:33:2e:07:01:
2f:90:f8:ae:e2:20:5f:7f:c7:f3:38:14:ad:0e:5d:
5d:60:b1:7b:1d:e4:e8:26:22:c9:9e:78:2a:dd:b2:
2f:81:83:27:e4:61:d5:26:43:cf:ea:88:da:b8:2a:
5c:cb:a1:30:ba:12:c1:f0:ea:ba:98:98:12:9e:38:
24:8a:36:e6:5f:7e:8d:92:68:27:be:18:62:67:dc:
7b:37:9e:f9:2d:30:f9:31:7c:ce:61:b9:07:0a:cd:
7c:d6:64:4a:b7:9b:1f:d4:0f:e9:ac:b3:fb:a8:54:
55:fa:5c:21:a1:12:d1:0c:3a:ea:db:04:3c:a4:a9:
af:30:d8:92:9f:97:01:5c:71:1e:ed:90:4b:b1:dc:
73:38:67:68:00:15:98:29:23:d5:c4:7d:72:38:97:
9d:02:da:71:11:83:5d:f8:fd:1c:69:5a:c4:0f:29:
e5:9e:2e:c5:ce:9f:10:f9:0e:cc:26:45:ad:56:39:
7e:b7:50:68:10:63:21:2a:48:95:f0:76:55:2a:20:
1e:f4:96:51:ee:08:8b:78:b6:f2:dd:45:09:1d:dd:
5b:95:5d:ab:f6:94:2d:ba:4b:13:02:e8:4b:91:d7:
4b:68:58:0a:69:34:74:85:23:98:96:70:5f:82:d4:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:BC:4F:90:00:78:65:B3:A5:E1:21:C2:F8:AD:52:F5:4E:CD:6C
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135392e302f32342d3234203d3e20323130393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c7:ea:2e:f6:53:90:b1:35:22:7c:f3:76:26:99:48:17:09:
3c:88:7f:c4:2f:c8:15:58:8e:bc:67:7c:4c:d5:96:72:72:c9:
59:6d:5c:e3:1b:5e:d2:fc:69:03:b4:ca:cb:a7:1a:ab:d3:2a:
7c:50:10:6f:98:d1:e3:c2:e5:50:e7:c9:14:06:5e:6c:48:5b:
03:2d:13:be:96:2e:f5:41:ee:65:92:1c:41:53:5a:c7:fe:df:
b2:7f:c8:d8:ea:78:4f:12:27:52:a7:e4:93:76:15:bb:63:e0:
a9:af:3b:24:91:fd:6d:60:94:66:28:0d:fd:68:4f:2a:a3:92:
3a:90:f1:d0:40:da:6e:ca:4c:ce:b4:14:3d:a7:2f:97:fb:76:
fd:f2:24:0a:c1:9c:7a:cf:d8:a4:40:5a:28:b2:cb:a2:37:ab:
8d:bc:0a:ad:58:ac:91:7d:fb:ec:2a:dd:ba:40:32:fa:9a:f8:
13:cd:45:43:20:7c:97:2f:cb:dc:70:74:03:30:54:19:ef:b0:
aa:89:7e:ab:b5:b5:6d:36:06:bb:76:fd:19:47:f7:39:a7:13:
e2:a3:ca:c3:b8:2c:07:e1:40:f9:40:24:39:bf:d1:8f:d0:54:
c9:36:31:2a:74:91:f4:86:fb:a7:d6:c3:af:a4:88:21:bd:b4:
9b:c5:25:bd
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUGc2OCv7viW4q/pWIoPO8YpNhE9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjA1MTEwOTE2MDdaFw0yMzA1MTAwOTIxMDdaMDMxMTAvBgNV
BAMTKDRFNkZCQzRGOTAwMDc4NjVCM0E1RTEyMUMyRjhBRDUyRjU0RUNENkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa/epmRl0ww7uGMy4HAS+Q+K7i
IF9/x/M4FK0OXV1gsXsd5OgmIsmeeCrdsi+BgyfkYdUmQ8/qiNq4KlzLoTC6EsHw
6rqYmBKeOCSKNuZffo2SaCe+GGJn3Hs3nvktMPkxfM5huQcKzXzWZEq3mx/UD+ms
s/uoVFX6XCGhEtEMOurbBDykqa8w2JKflwFccR7tkEux3HM4Z2gAFZgpI9XEfXI4
l50C2nERg134/RxpWsQPKeWeLsXOnxD5DswmRa1WOX63UGgQYyEqSJXwdlUqIB70
llHuCIt4tvLdRQkd3VuVXav2lC26SxMC6EuR10toWAppNHSFI5iWcF+C1NprAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUTm+8T5AAeGWzpeEhwvitUvVOzWwwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTMwMmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMx
MzAzOTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtCp8wDQYJKoZIhvcNAQELBQADggEBAA/H6i72
U5CxNSJ883YmmUgXCTyIf8QvyBVYjrxnfEzVlnJyyVltXOMbXtL8aQO0ysunGqvT
KnxQEG+Y0ePC5VDnyRQGXmxIWwMtE76WLvVB7mWSHEFTWsf+37J/yNjqeE8SJ1Kn
5JN2Fbtj4KmvOySR/W1glGYoDf1oTyqjkjqQ8dBA2m7KTM60FD2nL5f7dv3yJArB
nHrP2KRAWiiyy6I3q428Cq1YrJF9++wq3bpAMvqa+BPNRUMgfJcvy9xwdAMwVBnv
sKqJfqu1tW02Brt2/RlH9zmnE+KjysO4LAfhQPlAJDm/0Y/QVMk2MSp0kfSG+6fW
w6+kiCG9tJvFJb0=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net