Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323132373335.roa
File: 34352e36372e3232322e302f32342d3234203d3e20323132373335.roa (raw, json)
Hash identifier: MgdX6DpByS4nkqKeRGFQh68BuX87Dk9bR9LrCWGcdWI=
Subject key identifier: C2:44:F4:E8:0D:0B:59:8C:A4:4D:12:73:C4:80:DE:99:42:9F:6D:61
Certificate issuer: /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial: 5752D266007092EA7EA2A9A24E4998511048EB5A
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323132373335.roa
Signing time: Mon 30 Nov 2020 18:20:03 +0000
ROA not before: Mon 30 Nov 2020 18:15:03 +0000
ROA not after: Mon 29 Nov 2021 18:20:03 +0000
asID: 212735
IP address blocks: 45.67.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:52:d2:66:00:70:92:ea:7e:a2:a9:a2:4e:49:98:51:10:48:eb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Validity
Not Before: Nov 30 18:15:03 2020 GMT
Not After : Nov 29 18:20:03 2021 GMT
Subject: CN=3082010A0282010100B90D3AC6B1D36B79E9779827A87BFF68CED388F05E50CFF1BFC014676A0ACF964DBE0FE40F381D131AB7D5AF5DCC805F3021DD21ACB02FB6CBF7B311309F5BE101D72CED4F4756557E1BCB2DA15292D7FBC5A7E1FEC756AB9F3016C66DD41901E30E2B52720E76A99887A73CFE24DD9D969D00A24961FE7DA3542C64A9C87512C3BE43162DB30FD4287C12E3385BEB67E0B8D6861D7F1F2CB12E1D3CD73A7E151753A32C43AC59CF39CACC94AE0687CDA86C381AC44EC700F86DF30D7E2D0D628E808CD52389EAEADBC4D6535BDEE4AB16FF3A1C522FF076F920FE44934D01556AB9CB588818302332EDEF2801C3FBA05C51266C166D841B33E2CD9E7CD33A4F0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:3a:c6:b1:d3:6b:79:e9:77:98:27:a8:7b:
ff:68:ce:d3:88:f0:5e:50:cf:f1:bf:c0:14:67:6a:
0a:cf:96:4d:be:0f:e4:0f:38:1d:13:1a:b7:d5:af:
5d:cc:80:5f:30:21:dd:21:ac:b0:2f:b6:cb:f7:b3:
11:30:9f:5b:e1:01:d7:2c:ed:4f:47:56:55:7e:1b:
cb:2d:a1:52:92:d7:fb:c5:a7:e1:fe:c7:56:ab:9f:
30:16:c6:6d:d4:19:01:e3:0e:2b:52:72:0e:76:a9:
98:87:a7:3c:fe:24:dd:9d:96:9d:00:a2:49:61:fe:
7d:a3:54:2c:64:a9:c8:75:12:c3:be:43:16:2d:b3:
0f:d4:28:7c:12:e3:38:5b:eb:67:e0:b8:d6:86:1d:
7f:1f:2c:b1:2e:1d:3c:d7:3a:7e:15:17:53:a3:2c:
43:ac:59:cf:39:ca:cc:94:ae:06:87:cd:a8:6c:38:
1a:c4:4e:c7:00:f8:6d:f3:0d:7e:2d:0d:62:8e:80:
8c:d5:23:89:ea:ea:db:c4:d6:53:5b:de:e4:ab:16:
ff:3a:1c:52:2f:f0:76:f9:20:fe:44:93:4d:01:55:
6a:b9:cb:58:88:18:30:23:32:ed:ef:28:01:c3:fb:
a0:5c:51:26:6c:16:6d:84:1b:33:e2:cd:9e:7c:d3:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:F4:E8:0D:0B:59:8C:A4:4D:12:73:C4:80:DE:99:42:9F:6D:61
X509v3 Authority Key Identifier:
keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323132373335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.222.0/24
Signature Algorithm: sha256WithRSAEncryption
77:dd:7a:64:93:52:e2:0c:8a:ec:28:8f:e4:9f:48:94:77:ed:
e0:48:ad:eb:e4:20:a1:af:96:e7:45:06:6e:51:48:17:ba:87:
96:6a:61:98:38:12:f4:eb:02:8a:a1:68:7b:fa:7e:25:ed:df:
8a:9a:9e:b8:17:8a:af:15:ef:ce:ea:c3:d6:7d:13:48:22:49:
dc:48:78:40:a4:cb:24:20:1b:dc:80:3d:54:ca:f4:f1:c0:4e:
d8:c0:9e:d2:74:60:24:fb:88:7b:aa:f2:be:ae:f1:90:5e:ec:
ac:8a:ed:0b:d9:84:3a:83:bc:36:cd:e3:3c:37:52:9a:18:a7:
89:85:f1:f1:81:9a:ff:d7:92:69:81:ca:18:97:03:32:72:c8:
29:93:fb:18:ff:78:74:6f:e4:3d:6b:a4:d5:f5:b5:5b:60:83:
76:d7:67:08:c0:91:78:76:51:22:42:bf:f1:46:95:e7:ae:87:
6b:b7:be:5a:77:fa:35:7a:5e:9b:20:ca:3c:d0:32:09:f4:d0:
57:1c:53:1c:bd:19:8e:5b:a8:6e:41:d9:2f:05:57:c8:d4:8d:
62:17:69:b5:3f:61:8a:67:60:ea:84:7e:03:42:51:7a:0a:38:
f7:f5:2e:6f:60:0e:22:18:ce:f9:24:ff:a0:2f:36:5a:16:ac:
e2:a5:aa:48
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUV1LSZgBwkup+oqmiTkmYURBI61owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyYTMwN2M0ZTBhMmE0ZTdlMzhhYTUxNjRkNGJjNWNk
YjdjY2E0OTAeFw0yMDExMzAxODE1MDNaFw0yMTExMjkxODIwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjkwRDNBQzZCMUQzNkI3OUU5
Nzc5ODI3QTg3QkZGNjhDRUQzODhGMDVFNTBDRkYxQkZDMDE0Njc2QTBBQ0Y5NjRE
QkUwRkU0MEYzODFEMTMxQUI3RDVBRjVEQ0M4MDVGMzAyMUREMjFBQ0IwMkZCNkNC
RjdCMzExMzA5RjVCRTEwMUQ3MkNFRDRGNDc1NjU1N0UxQkNCMkRBMTUyOTJEN0ZC
QzVBN0UxRkVDNzU2QUI5RjMwMTZDNjZERDQxOTAxRTMwRTJCNTI3MjBFNzZBOTk4
ODdBNzNDRkUyNEREOUQ5NjlEMDBBMjQ5NjFGRTdEQTM1NDJDNjRBOUM4NzUxMkMz
QkU0MzE2MkRCMzBGRDQyODdDMTJFMzM4NUJFQjY3RTBCOEQ2ODYxRDdGMUYyQ0Ix
MkUxRDNDRDczQTdFMTUxNzUzQTMyQzQzQUM1OUNGMzlDQUNDOTRBRTA2ODdDREE4
NkMzODFBQzQ0RUM3MDBGODZERjMwRDdFMkQwRDYyOEU4MDhDRDUyMzg5RUFFQURC
QzRENjUzNUJERUU0QUIxNkZGM0ExQzUyMkZGMDc2RjkyMEZFNDQ5MzREMDE1NTZB
QjlDQjU4ODgxODMwMjMzMkVERUYyODAxQzNGQkEwNUM1MTI2NkMxNjZEODQxQjMz
RTJDRDlFN0NEMzNBNEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuQ06xrHTa3npd5gnqHv/aM7TiPBeUM/xv8AUZ2oKz5ZNvg/kDzgd
Exq31a9dzIBfMCHdIaywL7bL97MRMJ9b4QHXLO1PR1ZVfhvLLaFSktf7xafh/sdW
q58wFsZt1BkB4w4rUnIOdqmYh6c8/iTdnZadAKJJYf59o1QsZKnIdRLDvkMWLbMP
1Ch8EuM4W+tn4LjWhh1/HyyxLh081zp+FRdToyxDrFnPOcrMlK4Gh82obDgaxE7H
APht8w1+LQ1ijoCM1SOJ6urbxNZTW97kqxb/OhxSL/B2+SD+RJNNAVVquctYiBgw
IzLt7ygBw/ugXFEmbBZthBsz4s2efNM6TwIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FMJE9OgNC1mMpE0Sc8SA3plCn21hMB8GA1UdIwQYMBaAFIUqMHxOCipOfjiqUWTU
vFzbfMpJMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yNS84NTJB
MzA3QzRFMEEyQTRFN0UzOEFBNTE2NEQ0QkM1Q0RCN0NDQTQ5LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNvd2ZFNEtLazUtT0twUlpOUzhYTnQ4eWtrLmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yNS8zNDM1MmUzNjM3MmUzMjMy
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNzMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtQ94wDQYJKoZIhvcNAQELBQADggEBAHfdemSTUuIMiuwoj+SfSJR37eBIrevk
IKGvludFBm5RSBe6h5ZqYZg4EvTrAoqhaHv6fiXt34qanrgXiq8V787qw9Z9E0gi
SdxIeECkyyQgG9yAPVTK9PHATtjAntJ0YCT7iHuq8r6u8ZBe7KyK7QvZhDqDvDbN
4zw3UpoYp4mF8fGBmv/XkmmByhiXAzJyyCmT+xj/eHRv5D1rpNX1tVtgg3bXZwjA
kXh2USJCv/FGleeuh2u3vlp3+jV6XpsgyjzQMgn00FccUxy9GY5bqG5B2S8FV8jU
jWIXabU/YYpnYOqEfgNCUXoKOPf1Lm9gDiIYzvkk/6AvNloWrOKlqkg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net