Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31382e302f32342d3234203d3e203235303938.roa
File: 34352e3133362e31382e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier: aY/nXWVap9SWJaCVcL3XQCNR11JcFjyfthLIR5JNYCM=
Subject key identifier: 7B:BE:53:AB:93:BC:70:2A:69:FB:48:88:F2:FD:AB:67:87:D8:6B:5A
Certificate issuer: /CN=3e980f91cc95086fb049172616de25c8f6353255
Certificate serial: 2BC13363451ED9F61AEAC25BF85C40B9297753A9
Authority key identifier: 3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31382e302f32342d3234203d3e203235303938.roa
Signing time: Tue 01 Dec 2020 23:27:35 +0000
ROA not before: Tue 01 Dec 2020 23:22:35 +0000
ROA not after: Tue 30 Nov 2021 23:27:35 +0000
asID: 25098
IP address blocks: 45.136.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c1:33:63:45:1e:d9:f6:1a:ea:c2:5b:f8:5c:40:b9:29:77:53:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e980f91cc95086fb049172616de25c8f6353255
Validity
Not Before: Dec 1 23:22:35 2020 GMT
Not After : Nov 30 23:27:35 2021 GMT
Subject: CN=3082010A0282010100C1DAFA70D56D1885BEA449C0F623272ACF59E1AAE6D5C8330E7B9DA8402480B591225F9ED5B619EFA1D7D095A88A579B025A37DE4BABEE74CF01B03C7A85D82FE8A3EFA5F5E1F542F24003278EFFC20656D85BA35DEAC7D4F38C96814605910448A1C3692F1A34CD1BD4349208E16055E7F2118F2CAB0117E4822417B022F1BD4903A2B91FC6D4869E56E0251D762E63F9A3A9224E6845133FC6CB96E0CCE444988F90B436BE502FA059810EE1BBC7FE3ECC381993426B3EC4221E98C26FA0B617FEB44C5368E1A889FF13FAC0248713AE4518C1C9DF68EA1BB47C7F80269F4D955B887938514BB5BE1A3918813AA0BBF3D9AABBE56722B42425E7CCFD5BAF7D0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:fa:70:d5:6d:18:85:be:a4:49:c0:f6:23:
27:2a:cf:59:e1:aa:e6:d5:c8:33:0e:7b:9d:a8:40:
24:80:b5:91:22:5f:9e:d5:b6:19:ef:a1:d7:d0:95:
a8:8a:57:9b:02:5a:37:de:4b:ab:ee:74:cf:01:b0:
3c:7a:85:d8:2f:e8:a3:ef:a5:f5:e1:f5:42:f2:40:
03:27:8e:ff:c2:06:56:d8:5b:a3:5d:ea:c7:d4:f3:
8c:96:81:46:05:91:04:48:a1:c3:69:2f:1a:34:cd:
1b:d4:34:92:08:e1:60:55:e7:f2:11:8f:2c:ab:01:
17:e4:82:24:17:b0:22:f1:bd:49:03:a2:b9:1f:c6:
d4:86:9e:56:e0:25:1d:76:2e:63:f9:a3:a9:22:4e:
68:45:13:3f:c6:cb:96:e0:cc:e4:44:98:8f:90:b4:
36:be:50:2f:a0:59:81:0e:e1:bb:c7:fe:3e:cc:38:
19:93:42:6b:3e:c4:22:1e:98:c2:6f:a0:b6:17:fe:
b4:4c:53:68:e1:a8:89:ff:13:fa:c0:24:87:13:ae:
45:18:c1:c9:df:68:ea:1b:b4:7c:7f:80:26:9f:4d:
95:5b:88:79:38:51:4b:b5:be:1a:39:18:81:3a:a0:
bb:f3:d9:aa:bb:e5:67:22:b4:24:25:e7:cc:fd:5b:
af:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:53:AB:93:BC:70:2A:69:FB:48:88:F2:FD:AB:67:87:D8:6B:5A
X509v3 Authority Key Identifier:
keyid:3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/3E980F91CC95086FB049172616DE25C8F6353255.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31382e302f32342d3234203d3e203235303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.18.0/24
Signature Algorithm: sha256WithRSAEncryption
00:31:6d:96:e3:60:62:25:53:77:e5:70:5e:7e:77:3f:dd:8d:
a4:74:b9:87:b5:0e:2b:87:c5:1e:f8:59:bc:21:3b:85:81:7e:
82:76:5e:1e:a1:8f:c2:db:3f:50:60:a7:33:7a:13:ae:43:44:
9f:80:63:3a:9e:c6:fc:db:9c:f4:c8:ab:95:ef:a3:95:4b:80:
d3:1f:2b:6a:52:00:20:00:0c:ef:cc:d6:01:1f:da:f3:8f:0f:
62:eb:4c:bf:a0:34:8a:ec:b6:15:c4:80:a7:f5:f9:f1:5e:c2:
c2:32:f1:65:c0:f5:78:03:a2:4e:c6:03:eb:d4:ea:67:b0:53:
f1:fb:38:13:5a:19:22:92:33:77:98:38:4e:86:5c:b6:b0:a1:
a7:c6:42:eb:18:3d:26:8f:e6:f5:2b:cc:20:fa:7e:10:95:cb:
53:02:bd:e0:b6:af:db:21:53:fa:41:bd:44:3c:6d:f2:89:e2:
68:e5:c1:c9:b1:93:32:d0:5a:d1:47:39:0a:49:9d:18:42:8e:
70:d3:18:00:fc:bc:4c:b6:2a:1e:23:e4:08:c6:37:b3:c8:43:
ce:f4:bb:e0:b4:5d:12:36:d0:13:0c:60:9a:ea:d0:e1:16:84:
34:5a:09:76:b3:15:8f:84:da:7c:d4:0c:a9:95:a6:64:89:f6:
f4:57:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-fra.rpki-client.org