Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3138382e302f32342d3234203d3e203630373831.roa
File: 34352e38382e3138382e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier: /QGcqSAZvHTZYnCQEyp2HJ9KjR92YJ7I7uhETMOZXW4=
Subject key identifier: D0:52:D6:E5:A8:F1:ED:7E:ED:1C:0B:9E:FD:62:94:0F:5B:63:56:28
Certificate issuer: /CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
Certificate serial: 13D09725D3F1EC74681005663AC03FB28FF80266
Authority key identifier: 26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3138382e302f32342d3234203d3e203630373831.roa
Signing time: Mon 30 Nov 2020 19:12:06 +0000
ROA not before: Mon 30 Nov 2020 19:07:06 +0000
ROA not after: Mon 29 Nov 2021 19:12:06 +0000
asID: 60781
IP address blocks: 45.88.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d0:97:25:d3:f1:ec:74:68:10:05:66:3a:c0:3f:b2:8f:f8:02:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
Validity
Not Before: Nov 30 19:07:06 2020 GMT
Not After : Nov 29 19:12:06 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:30:de:a8:20:36:37:89:1c:e6:11:6f:89:
a5:0b:5b:f5:aa:ff:22:76:d1:e3:5c:ff:cc:5d:33:
ef:96:96:54:df:f6:ca:b9:02:e0:f3:5b:f7:1c:53:
e4:a5:7a:4e:e2:46:0b:3f:94:60:62:13:88:52:8d:
20:61:79:79:91:45:44:7c:34:bb:6e:62:3e:07:7b:
eb:1a:a0:17:2a:92:4f:93:05:34:02:1b:6c:7a:97:
35:12:aa:de:21:e3:76:20:e9:e4:0d:3e:a3:67:1a:
fe:84:3e:03:0d:90:a0:fa:1f:94:9f:f3:87:c3:06:
0a:2c:97:a4:54:5f:f2:22:90:1f:ed:b9:72:54:47:
18:48:cf:45:36:c2:9b:e2:d3:7c:de:b9:26:a3:ff:
d5:f6:92:d1:c0:db:b0:7e:13:a5:0d:6e:15:22:d7:
63:95:80:9f:ae:db:23:83:48:62:a5:a1:bb:14:18:
d9:e1:38:36:4f:06:1d:05:9b:3c:aa:ec:3e:a9:89:
b3:40:53:04:31:31:15:16:cf:7b:a7:f2:a7:b8:f1:
f0:2f:9a:2c:f4:8e:72:3a:c1:a8:df:3c:2a:02:08:
01:05:08:37:6f:80:f0:c2:07:9e:34:cb:e4:fe:a6:
b0:48:8e:f9:96:98:05:af:ce:3f:47:0d:d0:c8:a7:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:52:D6:E5:A8:F1:ED:7E:ED:1C:0B:9E:FD:62:94:0F:5B:63:56:28
X509v3 Authority Key Identifier:
keyid:26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/26C157349BEEB72D0815CFBB33FCABC27FAD9FC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3138382e302f32342d3234203d3e203630373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.188.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f4:39:a3:78:86:1f:3d:f8:f7:e8:c6:84:f0:41:5d:f3:b2:
72:c4:2f:f3:c3:e0:68:67:5c:08:80:8b:49:10:17:dc:f6:61:
5e:c0:02:81:da:d7:64:02:c7:c2:02:60:fe:0a:a6:c3:aa:d8:
fe:8b:a0:5f:f6:69:1a:de:cf:de:16:0c:41:9d:3a:c9:ad:54:
06:cb:fe:ad:14:70:08:a7:a4:fe:76:84:ae:7c:97:21:0e:aa:
5d:10:1b:77:36:de:63:31:04:68:e2:48:8c:25:f2:8c:21:97:
58:0f:99:b2:63:0c:13:20:f0:76:27:7d:cf:40:80:ae:60:7e:
5d:05:a5:60:5d:07:11:7f:58:ac:25:9b:a6:b9:d0:58:8d:d0:
ef:15:e7:59:93:fb:06:01:a1:fa:b8:3c:8c:ca:88:3c:5a:59:
d1:93:6d:f8:f2:b9:13:08:4f:c5:77:62:64:c6:1a:03:58:7f:
e8:e3:4b:aa:43:f4:17:41:2d:b2:01:12:56:a7:58:4b:3f:a9:
fa:ab:a1:72:00:a4:e1:5d:16:3a:7a:55:c4:7a:68:72:11:40:
07:d0:05:15:fa:df:8d:ea:b4:c0:5d:f7:64:04:f7:12:1c:45:
51:fa:c4:9b:21:d3:90:d5:bb:06:eb:1c:da:40:93:47:57:46:
c4:19:bf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org