Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/55/352e3138302e36302e302f32332d3234203d3e203631333137.roa
File: 352e3138302e36302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: m/eDDyIuoR8WBvdfMOvh3gG0+jcBLIzgVqt7gmxZe8U=
Subject key identifier: 7F:A6:F8:DF:71:65:7B:71:F4:29:79:33:31:D3:C4:84:99:4B:E1:09
Certificate issuer: /CN=c9d78d8a48b0e6fa4d59727081d02afda59f8650
Certificate serial: 29540CFA868C3708B439273A1C4E191F36378A3A
Authority key identifier: C9:D7:8D:8A:48:B0:E6:FA:4D:59:72:70:81:D0:2A:FD:A5:9F:86:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydeNikiw5vpNWXJwgdAq_aWfhlA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/55/352e3138302e36302e302f32332d3234203d3e203631333137.roa
Signing time: Tue 01 Dec 2020 23:25:45 +0000
ROA not before: Tue 01 Dec 2020 23:20:45 +0000
ROA not after: Tue 30 Nov 2021 23:25:45 +0000
asID: 61317
IP address blocks: 5.180.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:54:0c:fa:86:8c:37:08:b4:39:27:3a:1c:4e:19:1f:36:37:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d78d8a48b0e6fa4d59727081d02afda59f8650
Validity
Not Before: Dec 1 23:20:45 2020 GMT
Not After : Nov 30 23:25:45 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:e6:67:49:43:67:35:17:be:e1:77:9c:8b:
ee:ed:3f:e9:b4:b7:52:2b:be:b1:e9:c1:c5:a2:8a:
76:ea:c5:5d:cb:2a:f4:c5:a0:0c:26:01:94:89:d6:
85:25:5a:55:21:2a:48:d1:23:45:59:3a:94:fc:92:
bd:37:47:a8:e4:d9:85:a9:fc:ee:a2:a8:63:aa:52:
da:4c:95:e8:3d:c2:84:06:fa:71:fa:02:75:23:d9:
f7:ca:57:68:e5:c1:42:5e:34:78:ed:e5:62:11:0a:
08:b4:86:de:17:bb:f3:e4:82:30:c9:4d:5a:e2:7f:
cd:fe:3e:88:6d:5a:ed:2a:bf:e6:8d:69:3a:cc:70:
d7:b2:c6:82:6e:85:35:10:e6:ad:83:42:c6:67:ee:
d1:48:07:8a:01:e7:f9:e4:97:d5:a4:e6:77:da:fa:
1d:56:72:ba:bb:5f:ec:22:14:82:bf:7f:15:94:44:
ef:3e:b8:87:58:82:81:ac:e9:ed:67:4c:9e:dc:72:
44:49:5d:ff:c5:91:38:3e:73:43:73:42:eb:b3:bd:
64:e7:b4:ef:03:e5:ea:ee:e2:88:30:1f:30:e0:8b:
e1:18:87:79:f9:4b:4f:88:e3:be:0e:0b:19:cb:6b:
21:48:d1:ef:fc:44:e7:0f:4a:f5:eb:e8:17:6a:9f:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A6:F8:DF:71:65:7B:71:F4:29:79:33:31:D3:C4:84:99:4B:E1:09
X509v3 Authority Key Identifier:
keyid:C9:D7:8D:8A:48:B0:E6:FA:4D:59:72:70:81:D0:2A:FD:A5:9F:86:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/55/C9D78D8A48B0E6FA4D59727081D02AFDA59F8650.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydeNikiw5vpNWXJwgdAq_aWfhlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/55/352e3138302e36302e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.60.0/23
Signature Algorithm: sha256WithRSAEncryption
41:4f:b0:af:fd:3a:14:71:d6:b7:36:ea:67:1d:25:dc:5f:ca:
c1:17:1f:1b:f6:21:bc:66:12:17:86:6c:02:24:0e:0d:8b:5f:
5d:1a:36:91:7e:95:2d:ac:53:73:dc:e7:6a:5d:8a:e8:7e:da:
1d:49:5a:0f:99:b4:32:74:0f:06:fe:88:c4:35:44:e8:00:ce:
63:c7:cc:3c:a4:da:84:76:47:09:5f:e2:bd:88:44:6f:1d:e1:
fd:50:30:cf:b2:16:f6:52:7b:e1:cb:cc:6c:a3:4c:43:3c:7b:
3c:06:fe:0f:6b:68:4e:b6:c4:e5:88:44:de:b4:b3:43:3c:de:
33:66:06:87:4d:1f:02:ce:21:bc:18:62:9b:68:bf:92:f9:7f:
86:75:59:d6:0e:8d:dd:46:b2:26:29:dd:b1:32:50:90:34:23:
64:68:2a:3e:a3:70:3e:d2:0a:ce:3d:2e:d2:e7:f0:1f:ef:b9:
3c:dc:f2:7d:39:de:7e:1b:7b:91:8c:08:6d:11:e2:a4:01:fd:
79:ae:88:c4:81:c5:38:d4:07:d2:db:04:2f:29:69:96:fb:cc:
20:f3:af:aa:e2:f9:05:9b:aa:2a:9a:ca:dd:99:ae:ba:af:dc:
42:6a:ae:ab:ec:b3:18:05:63:44:97:9c:13:24:43:55:01:ef:
91:fc:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net