Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3234392e302f32342d3234203d3e20323031303131.roa
File: 34352e38352e3234392e302f32342d3234203d3e20323031303131.roa (raw, json)
Hash identifier: rOE78DaChxr4HH1dntxA9wjPaYcLZtexSx6cdJpNvFM=
Subject key identifier: 1E:BD:DF:77:07:D0:24:C5:95:A2:BF:50:FF:DB:2F:C8:43:78:7A:52
Certificate issuer: /CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
Certificate serial: 47CFCE2C7C4432E66B64FADE3AD2BEBC8CC7BAB7
Authority key identifier: EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3234392e302f32342d3234203d3e20323031303131.roa
Signing time: Wed 02 Dec 2020 01:18:22 +0000
ROA not before: Wed 02 Dec 2020 01:13:22 +0000
ROA not after: Wed 01 Dec 2021 01:18:22 +0000
asID: 201011
IP address blocks: 45.85.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:cf:ce:2c:7c:44:32:e6:6b:64:fa:de:3a:d2:be:bc:8c:c7:ba:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
Validity
Not Before: Dec 2 01:13:22 2020 GMT
Not After : Dec 1 01:18:22 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:2c:f1:d7:1a:91:3c:3b:1b:70:b9:76:11:
8a:24:91:db:82:7b:15:b9:a7:cd:e1:c9:0e:dd:d7:
b3:b8:e0:e5:ea:c8:a4:62:93:27:be:b6:17:fb:78:
06:87:4d:bc:55:32:a1:88:10:7d:34:9c:d9:7c:4b:
0c:00:0c:78:df:cb:26:11:91:27:42:ff:25:0c:07:
47:c9:cd:24:46:72:87:05:a4:8e:d5:9f:db:17:79:
09:f7:7d:24:8f:f3:99:22:9a:88:77:30:ed:4b:c0:
e8:a2:28:28:c7:96:b1:fc:79:66:9c:8a:b0:65:32:
b1:84:d2:07:c1:8c:23:33:5a:6f:3e:fa:d3:2f:fa:
34:27:c6:ff:6f:f3:03:e2:09:da:1a:6e:86:99:6e:
93:42:b4:ce:17:be:6d:76:e0:44:b0:8f:17:ea:7a:
cb:9b:2a:70:e5:b9:a7:2a:fc:c4:35:4e:b9:a7:d1:
f6:bd:4a:f9:65:41:d7:2c:97:4d:18:da:c6:7d:05:
f7:e0:6b:92:31:5d:ee:b4:2f:13:82:67:31:5e:79:
39:82:8f:51:07:af:05:a5:1f:76:f9:4c:dc:68:e1:
5e:94:63:86:9a:97:a8:a4:d5:ef:90:b7:03:dc:d3:
0a:30:d7:4c:14:d1:8d:0c:15:d3:d6:07:20:e6:4f:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BD:DF:77:07:D0:24:C5:95:A2:BF:50:FF:DB:2F:C8:43:78:7A:52
X509v3 Authority Key Identifier:
keyid:EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3234392e302f32342d3234203d3e20323031303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.249.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8f:2a:7a:54:7d:55:75:a5:2f:80:f1:2e:09:74:e5:93:46:
be:a7:ae:2c:ca:d0:60:a5:04:db:ce:a5:90:27:94:53:41:93:
94:5b:67:03:7e:67:df:5d:c3:72:82:44:e6:63:7f:97:8d:96:
e8:46:bc:e2:77:6a:6b:e5:ca:7d:a8:c0:cd:d4:1e:26:ab:19:
fe:bb:c1:dc:0a:07:e6:6a:b1:50:aa:e6:03:7d:03:1e:8f:2a:
35:be:7a:97:3e:24:c3:98:2a:ad:0e:a0:ec:50:b8:90:c9:aa:
13:94:a5:5e:f4:77:ab:b8:e8:18:d7:bf:5f:5d:87:af:3f:2a:
06:7c:e5:20:12:9a:78:4b:09:8d:ba:5f:62:de:6f:ec:f9:bb:
b7:70:1f:2b:93:74:6a:c8:bd:dd:db:74:34:08:cf:fb:73:f1:
63:72:f7:7d:04:dc:ab:a6:32:5a:6f:f7:d7:7f:f0:f3:68:14:
33:f8:0b:fb:1a:bb:5b:64:cd:20:5d:51:7c:c7:8c:e6:e4:ef:
db:f0:df:75:39:17:7b:23:e1:78:7b:33:db:5d:68:e7:a0:35:
2f:d2:30:bc:c0:72:b3:cf:6d:4b:53:ec:72:75:e6:38:1b:a0:
42:32:48:bc:bc:bd:da:6c:29:4d:03:c9:59:74:34:5f:21:c2:
4d:74:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:52:24 2025 by rpki-client