Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203630373231.roa
File: 38302e36352e3230392e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: DopO51KpG7u85nFjtUJ2jhWYEyX3+dp3I+Wtpo8XpGg=
Subject key identifier: 83:F1:7B:6A:6D:9A:0E:30:82:3E:F0:8B:D0:D8:F2:C6:E1:69:84:A2
Certificate issuer: /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial: 6CA66338DDD2CB314FF76FF21A7FBB885E90EA52
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203630373231.roa
Signing time: Fri 27 Nov 2020 15:10:28 +0000
ROA not before: Fri 27 Nov 2020 15:05:28 +0000
ROA not after: Fri 26 Nov 2021 15:10:28 +0000
asID: 60721
IP address blocks: 80.65.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a6:63:38:dd:d2:cb:31:4f:f7:6f:f2:1a:7f:bb:88:5e:90:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Validity
Not Before: Nov 27 15:05:28 2020 GMT
Not After : Nov 26 15:10:28 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:69:cb:19:b2:57:1e:33:77:7a:12:75:55:
f1:44:eb:d2:ce:c7:f7:ea:2f:ca:c6:9f:49:1a:93:
f8:f0:1d:99:92:04:48:38:a0:49:ab:26:a5:71:7b:
e1:38:22:54:f4:bd:0b:63:e4:61:bf:8e:75:07:c6:
ec:67:3b:1c:bf:0f:74:4e:15:3d:a1:a7:30:61:49:
a2:d4:fe:be:e5:a9:15:e5:f4:a6:57:2d:15:07:ad:
a4:eb:c3:b3:2c:29:a4:69:05:21:9f:53:83:86:69:
14:f7:4f:2d:dc:b6:ff:e2:54:d0:56:7e:83:e4:bb:
6d:34:e9:e3:75:9a:2e:3e:ac:66:62:c0:4c:d2:12:
95:fb:fa:2b:8b:72:69:dd:94:db:2c:ce:1f:03:69:
61:0b:8b:e9:88:7c:7b:f8:17:c9:e7:d6:ae:02:18:
ae:ef:8a:a3:c5:fd:12:a8:fa:85:3e:e9:67:59:fa:
b5:1b:52:48:dd:ac:15:78:c9:30:37:90:ac:7d:0e:
d7:22:9e:cd:03:3a:03:43:c8:84:3b:44:79:d3:aa:
22:2c:ed:40:28:c4:d6:ac:e8:25:a5:26:03:73:07:
55:da:ec:ff:aa:53:a5:58:e6:b2:e5:85:70:3d:c7:
87:37:75:d9:5c:8c:53:3d:40:4c:70:16:c4:55:48:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F1:7B:6A:6D:9A:0E:30:82:3E:F0:8B:D0:D8:F2:C6:E1:69:84:A2
X509v3 Authority Key Identifier:
keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4a:54:5a:5e:00:a4:96:18:2a:2e:64:55:b1:9f:7d:0a:68:
77:dd:1e:b8:13:6a:78:02:cb:16:92:b6:81:76:e9:4e:59:4b:
c7:90:f5:3f:27:fd:5d:54:65:6e:49:88:04:d0:24:56:e1:1a:
e3:c0:88:e2:2c:f0:48:69:de:b9:12:e7:24:93:9e:81:ff:7b:
b2:64:0f:23:c5:1f:7d:7f:ce:ee:27:dd:e9:80:1a:43:c1:e2:
ac:21:7d:79:d7:bb:7f:ba:83:eb:2d:ea:d1:39:17:f7:d1:37:
5f:99:85:a4:c7:6f:ce:07:ef:85:92:a8:b0:3d:77:da:cc:dd:
b2:e1:e3:2c:0c:67:63:6e:a7:f2:f3:f5:5b:aa:ac:85:63:60:
10:a6:53:5f:a9:66:bd:b1:1c:16:05:8f:ee:75:e4:9d:00:d2:
49:b1:d7:2e:32:18:59:1b:22:53:7a:8d:93:46:fe:c3:aa:e1:
c9:3f:c2:5b:b7:39:5d:1d:96:8d:29:b7:68:40:45:47:43:ce:
99:af:66:cd:3a:e4:c4:72:63:9a:7c:b4:38:eb:c6:f8:66:34:
34:7a:b8:60:7f:24:3d:7c:25:d8:12:81:b7:c3:ee:83:b7:82:
d0:19:5e:e8:82:02:29:ca:e9:1a:04:5b:be:77:26:a0:40:fe:
22:f6:fe:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org