Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32332d3234203d3e203631333137.roa
File: 34352e38352e3134342e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: uIvRqrm7NY/Gb14MvXD6Yfm/3N6W8Jtva4dRLhlJ4IM=
Subject key identifier: 8A:33:62:F4:D0:9E:21:F6:EF:4D:05:81:2F:CD:4B:E5:D5:F6:F5:35
Certificate issuer: /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial: 4C91820D40A4B97AA60339166A2090B0D8618ACA
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32332d3234203d3e203631333137.roa
Signing time: Fri 27 Nov 2020 15:10:08 +0000
ROA not before: Fri 27 Nov 2020 15:05:08 +0000
ROA not after: Fri 26 Nov 2021 15:10:08 +0000
asID: 61317
IP address blocks: 45.85.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:91:82:0d:40:a4:b9:7a:a6:03:39:16:6a:20:90:b0:d8:61:8a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Validity
Not Before: Nov 27 15:05:08 2020 GMT
Not After : Nov 26 15:10:08 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:f0:9a:77:30:5f:54:5e:88:01:35:31:2a:
7e:e5:24:30:07:42:d8:94:81:30:1e:70:e2:5c:d2:
94:01:dc:65:4a:f8:7e:c2:c9:30:c0:8b:da:90:da:
27:14:2c:03:af:de:df:7d:1f:b4:79:97:1b:9b:4d:
01:8f:a4:3e:ee:d9:53:a9:ce:d2:e7:37:2f:cd:02:
cf:b7:d9:40:d0:d6:d6:68:3c:41:a6:93:cf:60:1c:
79:da:43:56:dd:e4:7a:db:a7:19:e0:9f:87:63:fe:
29:c3:38:ba:08:b3:f1:e2:0f:ea:e9:21:11:19:53:
1b:a5:81:85:dc:ca:dd:58:ea:96:f5:4e:92:b1:b1:
7f:8a:f5:42:13:38:b7:c1:57:ca:1b:92:fa:e5:c1:
b2:ba:75:14:86:34:97:54:73:ea:db:b8:c8:18:12:
97:7f:89:3a:8b:d5:22:09:75:0c:1c:30:84:7b:5f:
e5:7d:2d:65:80:18:1d:85:7a:c1:03:4f:ed:48:96:
c5:cb:e6:07:e6:a9:1a:e6:4c:4e:56:bf:c4:5a:d1:
52:c0:85:ce:bf:c4:95:dc:27:55:b5:09:fc:bb:b2:
6b:a2:9f:1f:36:a6:43:83:eb:42:2f:89:6c:c2:11:
e1:b0:be:8c:78:55:7c:59:92:56:40:06:c7:83:01:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:62:F4:D0:9E:21:F6:EF:4D:05:81:2F:CD:4B:E5:D5:F6:F5:35
X509v3 Authority Key Identifier:
keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.144.0/23
Signature Algorithm: sha256WithRSAEncryption
13:09:af:31:5c:89:bc:51:54:42:db:3f:eb:11:1e:dd:54:a8:
82:f9:c7:11:ce:fc:ae:27:3a:a7:fa:10:af:be:5f:05:50:07:
e2:a9:19:69:1d:32:2c:be:b7:79:be:48:26:ec:49:59:d4:67:
bc:77:9f:e0:f7:55:b5:23:1b:b3:ea:bc:88:07:25:4f:ad:a4:
e0:fa:b0:c9:d8:1e:ce:5c:9e:9b:b1:df:5e:c5:37:cc:aa:7d:
6c:19:c8:b4:98:6e:cc:63:03:14:3b:21:b5:a9:ef:d7:c0:18:
a6:8c:8f:a0:d2:d1:f3:2c:72:e4:70:e8:8c:0f:e2:fc:eb:17:
c4:b6:02:31:43:70:35:94:58:9b:5b:46:10:17:f6:09:45:47:
43:b3:91:c5:7d:7f:12:2e:89:b5:c8:63:5f:0b:eb:7b:83:bc:
c7:35:61:0e:19:8b:1f:d5:65:c8:71:9a:35:3a:c7:1c:0f:43:
01:8d:8b:9c:98:fc:58:c5:29:e5:08:74:35:d4:c9:45:8a:ea:
fa:8d:48:48:dc:8b:b4:ba:5a:88:26:52:ff:ed:99:4a:59:1e:
da:73:41:f6:ba:8d:60:1d:1f:96:7e:45:d0:78:02:2f:23:38:
f1:2e:a0:dc:5a:e4:46:01:94:79:ec:5a:ab:8c:99:8c:a2:cc:
03:46:c0:60
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUTJGCDUCkuXqmAzkWaiCQsNhhisowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc0OTU3NTc3MTM5NjA3MGMxZWI4Y2NlYmZmYWY3NWYw
NWRiYWYzYzAeFw0yMDExMjcxNTA1MDhaFw0yMTExMjYxNTEwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTEwRkYwOUE3NzMwNUY1NDVF
ODgwMTM1MzEyQTdFRTUyNDMwMDc0MkQ4OTQ4MTMwMUU3MEUyNUNEMjk0MDFEQzY1
NEFGODdFQzJDOTMwQzA4QkRBOTBEQTI3MTQyQzAzQUZERURGN0QxRkI0Nzk5NzFC
OUI0RDAxOEZBNDNFRUVEOTUzQTlDRUQyRTczNzJGQ0QwMkNGQjdEOTQwRDBENkQ2
NjgzQzQxQTY5M0NGNjAxQzc5REE0MzU2RERFNDdBREJBNzE5RTA5Rjg3NjNGRTI5
QzMzOEJBMDhCM0YxRTIwRkVBRTkyMTExMTk1MzFCQTU4MTg1RENDQURENThFQTk2
RjU0RTkyQjFCMTdGOEFGNTQyMTMzOEI3QzE1N0NBMUI5MkZBRTVDMUIyQkE3NTE0
ODYzNDk3NTQ3M0VBREJCOEM4MTgxMjk3N0Y4OTNBOEJENTIyMDk3NTBDMUMzMDg0
N0I1RkU1N0QyRDY1ODAxODFEODU3QUMxMDM0RkVENDg5NkM1Q0JFNjA3RTZBOTFB
RTY0QzRFNTZCRkM0NUFEMTUyQzA4NUNFQkZDNDk1REMyNzU1QjUwOUZDQkJCMjZC
QTI5RjFGMzZBNjQzODNFQjQyMkY4OTZDQzIxMUUxQjBCRThDNzg1NTdDNTk5MjU2
NDAwNkM3ODMwMTY4QzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoQ/wmncwX1ReiAE1MSp+5SQwB0LYlIEwHnDiXNKUAdxlSvh+wskw
wIvakNonFCwDr97ffR+0eZcbm00Bj6Q+7tlTqc7S5zcvzQLPt9lA0NbWaDxBppPP
YBx52kNW3eR626cZ4J+HY/4pwzi6CLPx4g/q6SERGVMbpYGF3MrdWOqW9U6SsbF/
ivVCEzi3wVfKG5L65cGyunUUhjSXVHPq27jIGBKXf4k6i9UiCXUMHDCEe1/lfS1l
gBgdhXrBA0/tSJbFy+YH5qka5kxOVr/EWtFSwIXOv8SV3CdVtQn8u7Jrop8fNqZD
g+tCL4lswhHhsL6MeFV8WZJWQAbHgwFowQIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FIozYvTQniH2700FgS/NS+XV9vU1MB8GA1UdIwQYMBaAFDdJV1dxOWBwweuMzr/6
918F2688MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC85LzM3NDk1
NzU3NzEzOTYwNzBDMUVCOENDRUJGRkFGNzVGMDVEQkFGM0MuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9OMGxYVjNFNVlIREI2NHpPdl9yM1h3WGJyencuY2VyMIGG
BggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzkvMzQzNTJlMzgzNTJlMzEzNDM0
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1V
kDANBgkqhkiG9w0BAQsFAAOCAQEAEwmvMVyJvFFUQts/6xEe3VSogvnHEc78ric6
p/oQr75fBVAH4qkZaR0yLL63eb5IJuxJWdRnvHef4PdVtSMbs+q8iAclT62k4Pqw
ydgezlyem7HfXsU3zKp9bBnItJhuzGMDFDshtanv18AYpoyPoNLR8yxy5HDojA/i
/OsXxLYCMUNwNZRYm1tGEBf2CUVHQ7ORxX1/Ei6JtchjXwvre4O8xzVhDhmLH9Vl
yHGaNTrHHA9DAY2LnJj8WMUp5Qh0NdTJRYrq+o1ISNyLtLpaiCZS/+2ZSlke2nNB
9rqNYB0fln5F0HgCLyM48S6g3FrkRgGUeexaq4yZjKLMA0bAYA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net