Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133352e302f32342d3234203d3e20323132363330.roa
File: 34352e382e3133352e302f32342d3234203d3e20323132363330.roa (raw, json)
Hash identifier: YbM+q/eAsNMhaNRXxG1jXrcW415FrfWUZ0ajpgZsJeQ=
Subject key identifier: DE:D3:AD:F3:B6:42:48:44:B9:19:36:F5:08:0D:A7:90:68:D2:62:13
Certificate issuer: /CN=2727235923158bc2dc42ad8d7cf3618a464ae58c
Certificate serial: 4241C749FBC17A2524DB6CF04220643718511AC0
Authority key identifier: 27:27:23:59:23:15:8B:C2:DC:42:AD:8D:7C:F3:61:8A:46:4A:E5:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JycjWSMVi8LcQq2NfPNhikZK5Yw.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133352e302f32342d3234203d3e20323132363330.roa
Signing time: Tue 01 Dec 2020 23:26:15 +0000
ROA not before: Tue 01 Dec 2020 23:21:15 +0000
ROA not after: Tue 30 Nov 2021 23:26:15 +0000
asID: 212630
IP address blocks: 45.8.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:41:c7:49:fb:c1:7a:25:24:db:6c:f0:42:20:64:37:18:51:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2727235923158bc2dc42ad8d7cf3618a464ae58c
Validity
Not Before: Dec 1 23:21:15 2020 GMT
Not After : Nov 30 23:26:15 2021 GMT
Subject: CN=3082010A0282010100C1BD6E20845E7CED86BD3AB29C7787E49B81B3753BBB20FC6991A394A07A904B9471E34F7105F22C9574FB6248AF8BF78C58E937052F931DA27BB993776E3928EACD8F6479B8CF249829E865AC715562D781EED4C67D98E6C165167FBE3239481AEC041E32D8E1F8F8AE11A2421864922A53D07A407BF031A94F42BBD928F2C5EEDBF3C322BCFC9AF49097C688239AB2B52F629824BA792DEEBDC918265D99FEB5DAA5C561E460BD4BA432C68FEF38DCF72E2E358ECC45A9EFED5D74978D7EA85D0D52DCD6902957E0A1F022FED7D4CFADE5DF7DFDDD956A1564A4B7873586E741582C15A62DDF378E1F433FF34A61670CEDB3CC0E2D488D953DA0C6547B5D9B0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:6e:20:84:5e:7c:ed:86:bd:3a:b2:9c:77:
87:e4:9b:81:b3:75:3b:bb:20:fc:69:91:a3:94:a0:
7a:90:4b:94:71:e3:4f:71:05:f2:2c:95:74:fb:62:
48:af:8b:f7:8c:58:e9:37:05:2f:93:1d:a2:7b:b9:
93:77:6e:39:28:ea:cd:8f:64:79:b8:cf:24:98:29:
e8:65:ac:71:55:62:d7:81:ee:d4:c6:7d:98:e6:c1:
65:16:7f:be:32:39:48:1a:ec:04:1e:32:d8:e1:f8:
f8:ae:11:a2:42:18:64:92:2a:53:d0:7a:40:7b:f0:
31:a9:4f:42:bb:d9:28:f2:c5:ee:db:f3:c3:22:bc:
fc:9a:f4:90:97:c6:88:23:9a:b2:b5:2f:62:98:24:
ba:79:2d:ee:bd:c9:18:26:5d:99:fe:b5:da:a5:c5:
61:e4:60:bd:4b:a4:32:c6:8f:ef:38:dc:f7:2e:2e:
35:8e:cc:45:a9:ef:ed:5d:74:97:8d:7e:a8:5d:0d:
52:dc:d6:90:29:57:e0:a1:f0:22:fe:d7:d4:cf:ad:
e5:df:7d:fd:dd:95:6a:15:64:a4:b7:87:35:86:e7:
41:58:2c:15:a6:2d:df:37:8e:1f:43:3f:f3:4a:61:
67:0c:ed:b3:cc:0e:2d:48:8d:95:3d:a0:c6:54:7b:
5d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D3:AD:F3:B6:42:48:44:B9:19:36:F5:08:0D:A7:90:68:D2:62:13
X509v3 Authority Key Identifier:
keyid:27:27:23:59:23:15:8B:C2:DC:42:AD:8D:7C:F3:61:8A:46:4A:E5:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/48/2727235923158BC2DC42AD8D7CF3618A464AE58C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JycjWSMVi8LcQq2NfPNhikZK5Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133352e302f32342d3234203d3e20323132363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.135.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c0:fa:0a:7f:17:09:e9:a6:2e:50:ee:26:7a:db:52:38:51:
1e:7a:c9:cf:cb:35:54:d7:1b:73:22:d2:c0:d5:aa:ad:3b:90:
6e:dc:25:6c:a4:a2:4e:4d:9a:e8:dd:08:a8:91:77:9c:f0:62:
7d:48:4b:13:b0:f1:ac:93:28:8b:61:b4:e6:19:5d:e7:e7:43:
6b:f9:4f:06:1c:45:f9:ac:f6:ad:d3:76:a1:3a:a4:e7:ea:ed:
cb:ee:ec:6b:36:3d:3e:64:1a:56:48:da:c7:ef:c6:e0:57:01:
3f:93:6f:8a:7d:38:3f:2a:ce:77:35:34:f8:aa:dc:ec:9b:dd:
1b:c9:57:ef:4c:94:b5:cc:f4:fa:da:4a:e8:6f:63:dc:ef:b2:
2f:4d:15:7c:c8:35:ed:e1:0d:85:e1:25:17:27:60:ad:4f:5e:
33:70:14:e4:2d:13:92:4f:7d:49:a7:0f:fd:0f:eb:ff:2e:03:
d6:73:a7:43:ae:ef:97:aa:4c:fe:09:e0:25:b3:a6:82:c6:d9:
13:ff:dd:a7:c7:eb:f7:4d:a7:f8:3c:7c:50:f7:7f:16:9c:3b:
01:90:3f:35:d1:dd:f0:4b:1f:7c:4d:20:af:20:18:e9:73:35:
43:b2:8b:07:09:75:d6:a3:2e:fe:7a:19:c6:c8:73:d6:48:40:
49:aa:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net