Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3138392e302f32342d3234203d3e2039303039.roa
File: 34352e38382e3138392e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: VWk65IYGsaDimkQwyNC7vzF9Zs5F3ZiHUL7Pc8YGE3A=
Subject key identifier: 22:68:2C:EE:FD:0A:0A:FC:6A:77:94:25:CC:20:67:D4:A9:1E:F9:1E
Certificate issuer: /CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
Certificate serial: 3CADC74EE5E2B0DF603C439F62E42261525CEBC9
Authority key identifier: 26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3138392e302f32342d3234203d3e2039303039.roa
Signing time: Mon 30 Nov 2020 19:12:06 +0000
ROA not before: Mon 30 Nov 2020 19:07:06 +0000
ROA not after: Mon 29 Nov 2021 19:12:06 +0000
asID: 9009
IP address blocks: 45.88.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ad:c7:4e:e5:e2:b0:df:60:3c:43:9f:62:e4:22:61:52:5c:eb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
Validity
Not Before: Nov 30 19:07:06 2020 GMT
Not After : Nov 29 19:12:06 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:56:dc:2a:77:66:83:be:41:7e:55:81:5d:
9f:86:e7:a0:0f:6c:86:42:a6:ae:68:3e:ac:ec:fe:
69:cd:6f:47:fe:66:be:c2:dd:5d:12:c9:05:ed:44:
fb:aa:ca:10:77:06:03:82:78:f6:7e:76:fc:eb:5b:
af:1b:89:4d:dd:16:0c:ee:83:62:3a:72:de:e6:83:
31:07:f3:0a:d2:a6:87:62:2d:e2:b9:0f:b2:c7:90:
7a:00:a2:56:cb:8d:78:f1:01:ec:dd:c3:e7:ff:39:
78:9a:8b:c3:cf:e8:24:32:c1:39:6e:53:27:a4:8e:
8b:1b:45:a9:5b:e8:ac:17:c2:ec:f8:52:27:1b:f5:
36:e9:8a:7a:82:ea:1b:ee:e3:42:95:1d:82:70:a0:
d1:d6:bb:08:a8:30:6c:c1:63:05:d7:dd:1e:f7:cc:
17:24:96:0a:7c:00:d0:5c:68:c5:a9:ed:dc:90:c6:
24:8a:dc:51:61:08:ef:57:9f:be:24:ed:3a:9d:d2:
4a:70:81:97:65:43:66:08:be:4d:a3:b2:7a:ce:e9:
5f:8f:c8:26:36:ce:c9:c7:17:0a:2b:97:37:f2:d5:
d4:69:6b:c7:c6:66:33:29:06:ff:e3:8b:11:44:d4:
b4:f3:aa:41:ce:54:07:c0:de:8c:6d:33:cf:e8:28:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:68:2C:EE:FD:0A:0A:FC:6A:77:94:25:CC:20:67:D4:A9:1E:F9:1E
X509v3 Authority Key Identifier:
keyid:26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/26C157349BEEB72D0815CFBB33FCABC27FAD9FC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3138392e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f8:39:51:02:8e:5a:15:cf:3f:0c:87:2c:a6:93:93:70:46:
e5:9f:54:37:05:c8:7e:0d:1d:8c:cf:8e:50:07:f1:a1:d5:f4:
18:49:c6:d9:d7:e4:c3:fd:35:66:2c:13:cf:8f:05:8e:82:f0:
37:ff:3c:a3:af:41:ed:27:ac:ac:6a:e3:66:ff:6b:c4:65:bc:
31:c6:cc:5a:18:13:16:d8:5c:58:dd:a2:9c:d0:73:d2:e6:3d:
f7:f8:2d:a6:59:6a:2b:23:26:45:51:f3:a7:cb:b7:0b:9d:8d:
ea:96:ee:f2:2b:d6:ab:04:5f:24:c8:62:e7:31:fb:0f:89:71:
9a:74:77:e1:72:d5:5c:ec:d1:b8:bd:18:28:f9:21:85:83:f8:
c5:95:f5:10:fe:80:8b:64:0f:02:d7:d0:d5:7a:62:39:de:10:
ef:b7:a6:23:cc:0f:95:c1:5d:b2:a6:58:07:f7:20:13:3e:ca:
df:cd:76:f7:fb:fa:ce:10:e5:4b:24:08:12:eb:11:d4:bf:5e:
b7:b9:ee:a2:14:be:2f:d0:f4:f7:f4:a5:81:b2:a4:aa:5a:a2:
0b:bc:00:da:87:15:4b:bc:6e:f7:73:36:c2:cf:df:d7:b7:54:
f6:a8:eb:31:ff:96:b5:51:0c:ff:84:70:99:e6:5c:c9:ac:7e:
19:ed:d2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net