Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323132303837.roa
File: 34352e36372e3232322e302f32342d3234203d3e20323132303837.roa (raw, json)
Hash identifier: uce/88ZPnGSENkPwoJu/A/Bf1q6aKQLBxjHNwlhFy3U=
Subject key identifier: 08:9C:1B:E5:6F:0E:42:55:99:2B:0F:E2:47:CE:68:E3:3C:DB:EB:DF
Certificate issuer: /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial: 1A02BFE08A18C771F0D779FCFA1D35BEE65D469F
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323132303837.roa
Signing time: Mon 04 Jan 2021 17:56:01 +0000
ROA not before: Mon 04 Jan 2021 17:51:01 +0000
ROA not after: Mon 03 Jan 2022 17:56:01 +0000
asID: 212087
IP address blocks: 45.67.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:02:bf:e0:8a:18:c7:71:f0:d7:79:fc:fa:1d:35:be:e6:5d:46:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Validity
Not Before: Jan 4 17:51:01 2021 GMT
Not After : Jan 3 17:56:01 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:81:a5:80:24:0a:f1:fc:bd:27:ed:b6:83:
4e:a2:a9:bb:9b:eb:42:81:31:da:0f:ee:4e:84:dd:
2f:cc:98:57:3f:c3:77:60:75:c9:ad:e7:95:92:5e:
ca:b3:b5:05:4f:6e:f8:84:7c:a5:df:bd:b6:d5:97:
0b:5d:97:8d:50:2e:b0:65:f7:2d:6e:54:3e:e9:86:
69:5f:32:8b:49:e2:92:96:2a:a7:0c:15:7e:c0:14:
51:e6:d3:86:ab:b8:d3:9d:61:64:0c:0d:b8:c1:40:
28:01:90:13:9c:66:03:20:b4:b8:a4:62:92:f8:a4:
8e:18:85:d5:45:a7:27:b0:70:5c:70:0d:ee:d5:95:
8a:8b:4f:6a:ca:c1:c6:e4:85:b8:7d:55:55:a7:0e:
c1:63:35:5d:4f:c6:f4:e5:55:63:f8:95:50:c9:a1:
8e:89:6c:49:a3:09:68:37:df:14:63:ed:8f:57:e1:
86:f6:4c:9e:8d:73:38:58:0f:94:84:4b:d7:cd:b7:
a5:2e:66:1b:7f:5a:05:98:d7:1f:69:89:58:b4:0b:
67:99:50:f3:02:9f:f7:8e:25:22:67:1d:9b:c4:5d:
0c:fa:80:49:49:a4:f1:6d:15:a8:71:c2:3b:ac:c7:
65:bc:e8:16:81:ee:1f:0f:92:d3:25:9a:9d:58:20:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9C:1B:E5:6F:0E:42:55:99:2B:0F:E2:47:CE:68:E3:3C:DB:EB:DF
X509v3 Authority Key Identifier:
keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323132303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.222.0/24
Signature Algorithm: sha256WithRSAEncryption
54:76:41:aa:55:b6:dd:4b:f3:7b:28:15:9d:d2:03:68:b9:d8:
c5:01:29:c1:1e:89:8e:d7:77:4b:cd:fa:b7:ea:4b:ec:5f:2a:
61:81:68:15:1e:46:bf:a0:87:dc:dd:3f:46:ba:af:20:81:28:
9a:c7:4a:ea:39:25:d9:3b:f6:dc:7d:f5:ce:5c:88:38:16:30:
96:68:57:e3:fc:db:73:b4:9e:7f:44:6c:95:82:06:76:76:a7:
62:11:8e:17:f2:90:d0:2a:d5:70:f9:a0:2d:7f:36:4e:7b:13:
29:16:2f:94:71:90:72:3f:1d:7f:57:85:c4:db:dc:82:48:d3:
f4:14:25:2c:92:49:f9:93:13:f6:78:08:d6:d7:c4:ff:54:47:
94:11:ba:e6:a5:a2:5b:c8:4f:90:16:3a:54:30:f9:8a:4f:27:
1b:f2:ec:aa:27:fd:f2:09:fa:79:b1:8f:05:7b:a8:d1:fe:73:
42:fd:8b:2e:bc:6d:34:86:01:e8:44:b4:e4:fb:47:4a:ff:a7:
d8:e3:20:19:9e:a9:c7:09:bd:c9:4e:cd:d2:62:4d:eb:c9:3c:
be:be:79:f7:e6:57:24:dc:0f:4a:84:29:dc:3b:7b:f0:d3:2b:
33:54:9e:4e:e0:42:61:7e:05:8d:d4:a9:b7:a9:19:e5:30:f6:
e8:aa:fb:2c
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUGgK/4IoYx3Hw13n8+h01vuZdRp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyYTMwN2M0ZTBhMmE0ZTdlMzhhYTUxNjRkNGJjNWNk
YjdjY2E0OTAeFw0yMTAxMDQxNzUxMDFaFw0yMjAxMDMxNzU2MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUJDQTgxQTU4MDI0MEFGMUZD
QkQyN0VEQjY4MzRFQTJBOUJCOUJFQjQyODEzMURBMEZFRTRFODRERDJGQ0M5ODU3
M0ZDMzc3NjA3NUM5QURFNzk1OTI1RUNBQjNCNTA1NEY2RUY4ODQ3Q0E1REZCREI2
RDU5NzBCNUQ5NzhENTAyRUIwNjVGNzJENkU1NDNFRTk4NjY5NUYzMjhCNDlFMjky
OTYyQUE3MEMxNTdFQzAxNDUxRTZEMzg2QUJCOEQzOUQ2MTY0MEMwREI4QzE0MDI4
MDE5MDEzOUM2NjAzMjBCNEI4QTQ2MjkyRjhBNDhFMTg4NUQ1NDVBNzI3QjA3MDVD
NzAwREVFRDU5NThBOEI0RjZBQ0FDMUM2RTQ4NUI4N0Q1NTU1QTcwRUMxNjMzNTVE
NEZDNkY0RTU1NTYzRjg5NTUwQzlBMThFODk2QzQ5QTMwOTY4MzdERjE0NjNFRDhG
NTdFMTg2RjY0QzlFOEQ3MzM4NTgwRjk0ODQ0QkQ3Q0RCN0E1MkU2NjFCN0Y1QTA1
OThENzFGNjk4OTU4QjQwQjY3OTk1MEYzMDI5RkY3OEUyNTIyNjcxRDlCQzQ1RDBD
RkE4MDQ5NDlBNEYxNkQxNUE4NzFDMjNCQUNDNzY1QkNFODE2ODFFRTFGMEY5MkQz
MjU5QTlENTgyMDBGMkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAm8qBpYAkCvH8vSfttoNOoqm7m+tCgTHaD+5OhN0vzJhXP8N3YHXJ
reeVkl7Ks7UFT274hHyl37221ZcLXZeNUC6wZfctblQ+6YZpXzKLSeKSliqnDBV+
wBRR5tOGq7jTnWFkDA24wUAoAZATnGYDILS4pGKS+KSOGIXVRacnsHBccA3u1ZWK
i09qysHG5IW4fVVVpw7BYzVdT8b05VVj+JVQyaGOiWxJowloN98UY+2PV+GG9kye
jXM4WA+UhEvXzbelLmYbf1oFmNcfaYlYtAtnmVDzAp/3jiUiZx2bxF0M+oBJSaTx
bRWoccI7rMdlvOgWge4fD5LTJZqdWCAPLwIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FAicG+VvDkJVmSsP4kfOaOM82+vfMB8GA1UdIwQYMBaAFIUqMHxOCipOfjiqUWTU
vFzbfMpJMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yNS84NTJB
MzA3QzRFMEEyQTRFN0UzOEFBNTE2NEQ0QkM1Q0RCN0NDQTQ5LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNvd2ZFNEtLazUtT0twUlpOUzhYTnQ4eWtrLmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yNS8zNDM1MmUzNjM3MmUzMjMy
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMDM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtQ94wDQYJKoZIhvcNAQELBQADggEBAFR2QapVtt1L83soFZ3SA2i52MUBKcEe
iY7Xd0vN+rfqS+xfKmGBaBUeRr+gh9zdP0a6ryCBKJrHSuo5Jdk79tx99c5ciDgW
MJZoV+P823O0nn9EbJWCBnZ2p2IRjhfykNAq1XD5oC1/Nk57EykWL5RxkHI/HX9X
hcTb3IJI0/QUJSySSfmTE/Z4CNbXxP9UR5QRuualolvIT5AWOlQw+YpPJxvy7Kon
/fIJ+nmxjwV7qNH+c0L9iy68bTSGAehEtOT7R0r/p9jjIBmeqccJvclOzdJiTevJ
PL6+effmVyTcD0qEKdw7e/DTKzNUnk7gQmF+BY3UqbepGeUw9uiq+yw=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net