Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/117/322e35392e3135372e302f32342d3234203d3e2037383431.roa
File: 322e35392e3135372e302f32342d3234203d3e2037383431.roa (raw, json)
Hash identifier: nd5VDrEfxpubQzFOw2V5CsnArEwmSGyMAM6IqhAusZw=
Subject key identifier: 99:86:16:EA:8C:77:CD:7F:69:19:5A:38:40:34:8F:4D:68:6B:00:D9
Certificate issuer: /CN=7878c3df04dbfd4674ba6706c36e9b455e708bde
Certificate serial: 4E548A4054487187B1D0BB00B64B7FE788E3E25C
Authority key identifier: 78:78:C3:DF:04:DB:FD:46:74:BA:67:06:C3:6E:9B:45:5E:70:8B:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHjD3wTb_UZ0umcGw26bRV5wi94.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/117/322e35392e3135372e302f32342d3234203d3e2037383431.roa
Signing time: Tue 01 Dec 2020 23:29:54 +0000
ROA not before: Tue 01 Dec 2020 23:24:54 +0000
ROA not after: Tue 30 Nov 2021 23:29:54 +0000
asID: 7841
IP address blocks: 2.59.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:54:8a:40:54:48:71:87:b1:d0:bb:00:b6:4b:7f:e7:88:e3:e2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7878c3df04dbfd4674ba6706c36e9b455e708bde
Validity
Not Before: Dec 1 23:24:54 2020 GMT
Not After : Nov 30 23:29:54 2021 GMT
Subject: CN=3082010A0282010100C1822DA8B49509E40587E1FA3C66A8F4098DC7110ADB5F4BA84785FDD1385F53985CE9F381E0DB71D25EBBA54E7DF4AC2FD6B027FCC5058150B3B9F9D5FFA97E4BDE4C26CAB3E2EDA51CFF05571CBF75A8A59044CF57661F5E5D189D2D70DD07201D697AFFBC5E782FED9DFD6CF9E8B1E1D6965BBB88FC0918042EF73E121EF57B5A8DF721CD4147386E2A072B08E00C9466BF6F8746033BA8FF18D9BE85380A780268F3CAC18E8E9E8F38FF76D2A1D1D1B62D61E3E573868C1F4C6472A5A9B4CC7C384F993482705BEAC4A053C8C6F539B7A76BC6F01B135D5E1E882F39AE08F9C8239B0A12E97AF84379F8F59392C840C0A8E443F7815CCF1BEEB232F36CF10203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:2d:a8:b4:95:09:e4:05:87:e1:fa:3c:66:
a8:f4:09:8d:c7:11:0a:db:5f:4b:a8:47:85:fd:d1:
38:5f:53:98:5c:e9:f3:81:e0:db:71:d2:5e:bb:a5:
4e:7d:f4:ac:2f:d6:b0:27:fc:c5:05:81:50:b3:b9:
f9:d5:ff:a9:7e:4b:de:4c:26:ca:b3:e2:ed:a5:1c:
ff:05:57:1c:bf:75:a8:a5:90:44:cf:57:66:1f:5e:
5d:18:9d:2d:70:dd:07:20:1d:69:7a:ff:bc:5e:78:
2f:ed:9d:fd:6c:f9:e8:b1:e1:d6:96:5b:bb:88:fc:
09:18:04:2e:f7:3e:12:1e:f5:7b:5a:8d:f7:21:cd:
41:47:38:6e:2a:07:2b:08:e0:0c:94:66:bf:6f:87:
46:03:3b:a8:ff:18:d9:be:85:38:0a:78:02:68:f3:
ca:c1:8e:8e:9e:8f:38:ff:76:d2:a1:d1:d1:b6:2d:
61:e3:e5:73:86:8c:1f:4c:64:72:a5:a9:b4:cc:7c:
38:4f:99:34:82:70:5b:ea:c4:a0:53:c8:c6:f5:39:
b7:a7:6b:c6:f0:1b:13:5d:5e:1e:88:2f:39:ae:08:
f9:c8:23:9b:0a:12:e9:7a:f8:43:79:f8:f5:93:92:
c8:40:c0:a8:e4:43:f7:81:5c:cf:1b:ee:b2:32:f3:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:86:16:EA:8C:77:CD:7F:69:19:5A:38:40:34:8F:4D:68:6B:00:D9
X509v3 Authority Key Identifier:
keyid:78:78:C3:DF:04:DB:FD:46:74:BA:67:06:C3:6E:9B:45:5E:70:8B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/117/7878C3DF04DBFD4674BA6706C36E9B455E708BDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHjD3wTb_UZ0umcGw26bRV5wi94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/117/322e35392e3135372e302f32342d3234203d3e2037383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.157.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4e:48:24:1d:77:0f:86:af:c4:33:c9:90:bf:b8:e0:88:71:
e9:fa:f7:88:b5:34:bc:cd:c4:68:8f:5f:41:50:5b:70:0e:70:
8b:e0:4d:ec:07:9c:32:ac:35:36:00:cf:8d:c2:17:21:a1:21:
2f:27:57:de:01:46:20:7d:aa:dd:56:6e:8a:15:b6:48:0d:53:
dc:d9:8c:8d:65:ab:5f:f6:bd:0d:dc:dc:df:55:c0:d5:9e:3c:
46:2c:45:af:04:65:5b:17:67:42:ab:a9:50:50:f5:95:f2:27:
55:f8:56:34:1e:10:ad:3c:11:a5:e3:00:58:e4:6a:cb:86:fc:
7d:64:b0:14:8f:79:6d:05:c1:41:52:68:3e:7d:f4:ab:c9:2c:
92:9d:76:af:f8:98:1c:8e:b3:01:6e:91:8b:3c:cb:5b:ae:6d:
f1:2b:af:19:31:a6:f3:94:8f:10:7b:38:68:f3:62:76:3b:52:
12:98:c7:fc:f0:7c:29:b7:56:05:3c:8a:75:39:42:73:db:71:
fe:0d:cc:48:68:53:de:23:10:ae:19:25:63:d1:52:ba:bf:97:
cc:f6:44:17:f4:1f:fa:4c:dc:7f:f2:8e:3b:8f:7c:e5:5e:47:
d8:a9:37:63:cd:0b:3d:87:89:7e:79:75:66:0a:21:1c:92:f4:
81:ed:f5:65
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUTlSKQFRIcYex0LsAtkt/54jj4lwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3OGMzZGYwNGRiZmQ0Njc0YmE2NzA2YzM2ZTliNDU1
ZTcwOGJkZTAeFw0yMDEyMDEyMzI0NTRaFw0yMTExMzAyMzI5NTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE4MjJEQThCNDk1MDlFNDA1
ODdFMUZBM0M2NkE4RjQwOThEQzcxMTBBREI1RjRCQTg0Nzg1RkREMTM4NUY1Mzk4
NUNFOUYzODFFMERCNzFEMjVFQkJBNTRFN0RGNEFDMkZENkIwMjdGQ0M1MDU4MTUw
QjNCOUY5RDVGRkE5N0U0QkRFNEMyNkNBQjNFMkVEQTUxQ0ZGMDU1NzFDQkY3NUE4
QTU5MDQ0Q0Y1NzY2MUY1RTVEMTg5RDJENzBERDA3MjAxRDY5N0FGRkJDNUU3ODJG
RUQ5REZENkNGOUU4QjFFMUQ2OTY1QkJCODhGQzA5MTgwNDJFRjczRTEyMUVGNTdC
NUE4REY3MjFDRDQxNDczODZFMkEwNzJCMDhFMDBDOTQ2NkJGNkY4NzQ2MDMzQkE4
RkYxOEQ5QkU4NTM4MEE3ODAyNjhGM0NBQzE4RThFOUU4RjM4RkY3NkQyQTFEMUQx
QjYyRDYxRTNFNTczODY4QzFGNEM2NDcyQTVBOUI0Q0M3QzM4NEY5OTM0ODI3MDVC
RUFDNEEwNTNDOEM2RjUzOUI3QTc2QkM2RjAxQjEzNUQ1RTFFODgyRjM5QUUwOEY5
QzgyMzlCMEExMkU5N0FGODQzNzlGOEY1OTM5MkM4NDBDMEE4RTQ0M0Y3ODE1Q0NG
MUJFRUIyMzJGMzZDRjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwYItqLSVCeQFh+H6PGao9AmNxxEK219LqEeF/dE4X1OYXOnzgeDb
cdJeu6VOffSsL9awJ/zFBYFQs7n51f+pfkveTCbKs+LtpRz/BVccv3WopZBEz1dm
H15dGJ0tcN0HIB1pev+8Xngv7Z39bPnoseHWllu7iPwJGAQu9z4SHvV7Wo33Ic1B
RzhuKgcrCOAMlGa/b4dGAzuo/xjZvoU4CngCaPPKwY6Ono84/3bSodHRti1h4+Vz
howfTGRypam0zHw4T5k0gnBb6sSgU8jG9Tm3p2vG8BsTXV4eiC85rgj5yCObChLp
evhDefj1k5LIQMCo5EP3gVzPG+6yMvNs8QIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FJmGFuqMd81/aRlaOEA0j01oawDZMB8GA1UdIwQYMBaAFHh4w98E2/1GdLpnBsNu
m0VecIveMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMTcvNzg3
OEMzREYwNERCRkQ0Njc0QkE2NzA2QzM2RTlCNDU1RTcwOEJERS5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL2VIakQzd1RiX1VaMHVtY0d3MjZiUlY1d2k5NC5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTE3LzMyMmUzNTM5MmUzMTM1
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzM4MzQzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAI7
nTANBgkqhkiG9w0BAQsFAAOCAQEAdE5IJB13D4avxDPJkL+44Ihx6fr3iLU0vM3E
aI9fQVBbcA5wi+BN7AecMqw1NgDPjcIXIaEhLydX3gFGIH2q3VZuihW2SA1T3NmM
jWWrX/a9Ddzc31XA1Z48RixFrwRlWxdnQqupUFD1lfInVfhWNB4QrTwRpeMAWORq
y4b8fWSwFI95bQXBQVJoPn30q8kskp12r/iYHI6zAW6RizzLW65t8SuvGTGm85SP
EHs4aPNidjtSEpjH/PB8KbdWBTyKdTlCc9tx/g3MSGhT3iMQrhklY9FSur+XzPZE
F/Qf+kzcf/KOO4985V5H2Kk3Y80LPYeJfnl1ZgohHJL0ge31ZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:54 2024 by rpki-client on console-ams.rpki-client.org