Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31362e302f32342d3234203d3e20323132353630.roa
File: 352e3138322e31362e302f32342d3234203d3e20323132353630.roa (raw, json)
Hash identifier: vfyE8yt4rhKWQLGzP+rMa7Ur7oYbi8WNHJ7UrT0uJFo=
Subject key identifier: D7:C0:49:AF:B6:83:E6:BD:68:36:C7:36:61:80:E1:F7:BB:18:1B:64
Certificate issuer: /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial: 5D620447C338A558FBD4399F114BFFD4D6C97A8B
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31362e302f32342d3234203d3e20323132353630.roa
Signing time: Thu 10 Dec 2020 16:10:08 +0000
ROA not before: Thu 10 Dec 2020 16:05:08 +0000
ROA not after: Thu 09 Dec 2021 16:10:08 +0000
asID: 212560
IP address blocks: 5.182.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:62:04:47:c3:38:a5:58:fb:d4:39:9f:11:4b:ff:d4:d6:c9:7a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Validity
Not Before: Dec 10 16:05:08 2020 GMT
Not After : Dec 9 16:10:08 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:86:e7:b4:62:69:e7:fa:f8:ef:0a:61:bc:
df:93:7f:35:29:ad:49:6e:87:99:68:a8:0d:0f:0f:
0d:38:b9:ee:8a:f5:f9:85:ec:5a:cb:c9:f5:c4:30:
4c:fd:ba:15:e3:b3:3c:13:76:7e:80:f4:0f:2b:18:
9e:08:52:00:63:28:c3:7c:52:5f:cd:c8:58:76:38:
d9:47:34:de:43:2f:f6:eb:3a:4d:ce:ea:b1:3e:be:
30:83:ad:b1:b1:9b:63:bc:98:5d:ee:2c:2b:b7:48:
4e:ed:b1:67:15:11:52:a2:88:a7:45:7e:86:3e:86:
74:b3:15:c9:a9:4f:a1:84:9e:5c:90:1e:94:60:f8:
a9:e7:0a:f7:eb:5f:0b:36:fd:05:1c:30:f4:5b:66:
77:dd:44:da:1d:6b:a3:b3:01:11:d1:ec:9f:70:5a:
bb:77:73:98:d6:60:11:93:14:98:47:80:4c:cd:92:
46:e8:65:bc:6a:b2:b6:57:2c:b9:86:49:8f:9f:c2:
7f:cb:da:36:90:82:68:63:11:4d:cb:f9:59:20:db:
24:e9:fe:19:ab:af:f9:bb:7b:f5:af:b8:21:51:99:
71:d1:a3:2c:69:7a:7c:29:1d:58:1d:32:4a:8a:51:
14:1a:c1:02:50:cd:6b:fb:85:28:d3:50:ce:4d:83:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:49:AF:B6:83:E6:BD:68:36:C7:36:61:80:E1:F7:BB:18:1B:64
X509v3 Authority Key Identifier:
keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31362e302f32342d3234203d3e20323132353630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.16.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8c:ef:1b:a2:6e:16:ee:6e:37:3c:d1:75:61:ff:39:62:72:
32:5f:b5:38:24:ec:62:37:b2:70:ad:6e:65:a7:d6:12:cf:18:
f9:ce:2a:7f:5b:b1:15:5f:ad:5e:2b:8d:94:76:f7:10:bf:cd:
72:dd:91:47:85:52:91:df:cd:de:a6:6e:c6:b0:9f:99:ce:3b:
41:30:c4:b3:85:3e:70:7b:57:16:f7:58:d2:e7:bd:2e:9b:84:
ab:17:80:71:60:a8:ad:f1:84:36:91:73:a5:18:60:34:2e:93:
3d:f3:38:ad:73:61:f6:46:2f:4e:fa:40:0d:ac:6d:4a:be:7d:
e6:95:e0:6e:b5:0b:4d:a4:bd:d3:d8:e1:71:23:88:a3:71:33:
34:e0:97:ae:42:39:5c:38:2e:8c:08:f0:f4:4a:1a:57:9d:28:
f3:23:0f:20:54:02:2c:fc:42:93:01:07:a7:4f:aa:9f:e7:9a:
af:4f:13:9c:54:4f:29:5c:59:87:44:f4:5d:95:28:47:c0:9e:
4c:d5:5d:a3:83:4c:34:a0:15:e2:53:bb:b3:75:26:e2:69:2b:
40:53:cf:4e:5e:95:88:7e:a6:ad:5a:ea:f1:d6:a9:52:03:23:
56:8b:ce:27:71:8b:8d:aa:17:0a:55:52:49:7d:97:32:63:7e:
18:8d:aa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net