Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135372e302f32342d3234203d3e20323132303730.roa
File: 34352e31302e3135372e302f32342d3234203d3e20323132303730.roa (raw, json)
Hash identifier: /pqm5g3cog6x81r5N7fGwfsIvNKlQRMTD9OYjddqlUA=
Subject key identifier: BF:2C:6C:11:33:3D:67:7E:6C:6D:61:CC:09:44:7C:47:5E:FC:65:4C
Certificate issuer: /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial: 0116EBCFDF3371E7CAC28970AD4CD41CBAEB2892
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135372e302f32342d3234203d3e20323132303730.roa
Signing time: Mon 04 Jan 2021 14:53:59 +0000
ROA not before: Mon 04 Jan 2021 14:48:59 +0000
ROA not after: Mon 03 Jan 2022 14:53:59 +0000
asID: 212070
IP address blocks: 45.10.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:16:eb:cf:df:33:71:e7:ca:c2:89:70:ad:4c:d4:1c:ba:eb:28:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Validity
Not Before: Jan 4 14:48:59 2021 GMT
Not After : Jan 3 14:53:59 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:cf:25:e1:b8:49:49:c9:7e:71:87:c6:1b:
0c:7e:53:a0:64:30:06:8e:e6:47:4f:1d:f4:dd:77:
32:c8:6f:f3:53:b5:12:d3:94:38:7c:e4:a3:8d:53:
76:8a:86:83:47:4f:d6:36:56:5d:10:e2:b7:c3:54:
e5:19:dd:f0:8b:0e:3e:fe:58:65:78:24:d2:ab:94:
3e:35:0f:33:38:88:85:e3:e1:a8:f0:4d:7c:ca:68:
1d:fe:7a:14:0b:45:27:bd:75:15:ad:b8:21:b6:bf:
b2:18:41:26:90:d1:cc:60:c6:71:51:56:b4:ca:eb:
a2:0b:32:e0:35:86:47:06:7d:cf:db:fd:05:a8:1e:
77:a4:41:25:62:c0:7e:a4:69:7f:ad:09:a4:ff:fe:
d2:2e:34:44:35:dc:b7:fa:25:88:1e:5b:5e:58:ea:
8a:f5:bd:2e:fd:18:10:1e:df:2a:0c:4a:5f:67:d7:
8a:ab:03:c8:ba:43:0c:78:d2:8b:c5:ba:ac:75:85:
4e:5a:d2:82:7f:49:f3:32:00:67:35:62:ba:bc:2c:
92:ad:52:b3:51:c5:d5:bd:b4:52:d5:bb:40:eb:93:
08:71:f4:87:5d:7d:89:0e:97:91:fc:62:2d:e4:02:
56:8e:0d:9c:fb:ed:1e:b4:00:13:f4:18:1f:ce:a6:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2C:6C:11:33:3D:67:7E:6C:6D:61:CC:09:44:7C:47:5E:FC:65:4C
X509v3 Authority Key Identifier:
keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135372e302f32342d3234203d3e20323132303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4a:33:e4:16:7c:b6:e0:fd:07:c1:c8:98:3f:a9:f4:bc:64:
af:d5:b1:eb:f4:9c:df:e4:85:2e:5e:03:fb:8e:13:c7:50:c4:
81:44:da:86:46:4f:06:4a:5d:4f:73:50:59:bb:d7:fd:95:df:
26:be:57:f7:6c:d8:d3:1a:2a:f6:a5:da:b9:ad:b6:76:ac:84:
f8:78:da:fd:80:8a:70:fc:85:7f:b1:bc:c9:51:78:e4:4e:c7:
c2:eb:f6:b6:4a:08:12:60:a7:ed:02:aa:8f:ad:a5:55:5d:23:
9e:c7:97:c6:e7:0e:ee:93:39:cf:fd:8f:2c:08:91:cd:49:2a:
19:b3:d7:b7:84:ec:f7:71:7f:ec:d3:40:26:23:08:a7:c4:b6:
1f:90:b3:01:2b:c4:52:92:47:0b:bb:7b:d4:36:e1:83:e0:84:
a4:98:2b:99:3c:be:f0:a4:33:06:ea:7f:e5:0b:86:a6:40:3b:
a9:fa:aa:d5:ee:ab:04:c4:fe:22:2b:aa:e2:49:43:38:b5:67:
93:8d:48:f5:79:6f:6b:40:f0:03:52:05:48:b7:eb:ba:36:86:
d5:91:0a:6c:41:f6:8e:96:ce:f4:18:50:81:be:ff:75:7a:d3:
3a:5c:a0:8d:4e:12:38:44:fc:0b:e1:09:ae:74:05:82:4a:5a:
7b:fb:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:54 2024 by rpki-client on console-ams.rpki-client.org