Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139312e302f32342d3234203d3e20333238333737.roa
File: 34352e3135322e3139312e302f32342d3234203d3e20333238333737.roa (raw, json)
Hash identifier: cTMSQQl4GI4ps3VdO3zcrndjKyeXxqXBWJRhucjN3lw=
Subject key identifier: 29:80:C4:29:01:F2:41:53:D5:8A:B6:43:B3:4B:79:B7:36:2E:64:E8
Certificate issuer: /CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
Certificate serial: 2C5A53E4F6F82A97BB848AF8D3A2C8D116648FF6
Authority key identifier: 7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139312e302f32342d3234203d3e20333238333737.roa
Signing time: Tue 01 Dec 2020 23:28:22 +0000
ROA not before: Tue 01 Dec 2020 23:23:22 +0000
ROA not after: Tue 30 Nov 2021 23:28:22 +0000
asID: 328377
IP address blocks: 45.152.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5a:53:e4:f6:f8:2a:97:bb:84:8a:f8:d3:a2:c8:d1:16:64:8f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e7b4b4010541f8e95db7ebd28d73ea9272c86ca
Validity
Not Before: Dec 1 23:23:22 2020 GMT
Not After : Nov 30 23:28:22 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:28:e1:83:db:6e:d1:42:b4:fd:15:86:78:
5d:1f:39:a0:fa:82:dd:36:8d:b8:78:53:1b:e2:82:
8a:fa:12:f0:87:c1:2e:2a:35:34:02:93:86:b5:32:
fa:03:84:9f:13:19:1b:11:e7:58:28:0f:dc:75:eb:
a8:ee:e3:db:70:c4:89:89:10:5a:01:2b:e8:e7:6c:
98:e0:6f:cf:42:6f:f4:04:ba:3d:e5:51:1d:39:55:
0a:2c:39:0c:c6:0f:f7:91:05:d7:1e:da:e9:2c:1e:
47:69:7c:cc:46:20:c4:18:9b:5e:03:d1:2b:a2:74:
7c:f9:19:c9:df:3d:7d:56:37:9e:7e:0d:21:da:88:
26:35:11:90:93:14:2e:85:b2:ad:8c:0a:3a:4e:08:
97:be:86:8d:b7:08:92:c4:76:2a:d3:7e:ce:ac:8e:
e5:2e:8b:19:80:90:ba:a3:77:2d:16:40:f7:43:ec:
dd:99:bb:9e:6a:32:3a:a1:db:a8:8a:81:ff:ac:38:
4f:1b:59:d0:d9:ee:79:c8:4f:6b:69:7f:e5:bc:7f:
06:4f:ca:a3:66:e7:59:5f:79:2f:5b:ef:cf:28:20:
1f:c3:8e:a5:77:59:75:61:c7:68:d8:61:01:28:b3:
10:a6:d8:17:01:34:7e:2b:0b:a1:1d:a7:61:d5:c8:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:C4:29:01:F2:41:53:D5:8A:B6:43:B3:4B:79:B7:36:2E:64:E8
X509v3 Authority Key Identifier:
keyid:7E:7B:4B:40:10:54:1F:8E:95:DB:7E:BD:28:D7:3E:A9:27:2C:86:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/7E7B4B4010541F8E95DB7EBD28D73EA9272C86CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fntLQBBUH46V2369KNc-qScshso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/122/34352e3135322e3139312e302f32342d3234203d3e20333238333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:81:09:08:be:92:f4:bd:97:d6:4a:93:84:bc:87:b2:58:fc:
81:38:ed:45:67:92:94:e7:58:58:b3:6b:ff:06:75:7d:49:3e:
f6:92:64:36:7e:89:a9:eb:00:96:1d:93:76:33:7b:3e:29:80:
98:81:bf:3c:34:d7:cb:e8:9a:af:d4:65:75:82:97:9d:f5:b8:
31:db:21:ae:21:28:6a:a7:0a:33:ab:a5:9b:8c:62:ea:d4:57:
75:b1:f2:55:e0:5b:db:3c:d1:3b:7c:a2:db:10:21:ff:8d:8e:
6a:08:b5:2b:28:95:93:d5:7e:0c:c4:45:9e:a3:aa:95:4b:e7:
10:4d:ac:3b:78:4c:6b:a2:bf:f8:7b:6f:a8:f0:20:20:59:b3:
85:8c:2a:24:91:c7:11:39:2c:19:74:2d:ff:6f:f6:63:42:c5:
e8:15:8e:87:be:c7:de:a8:58:79:25:ef:3f:c0:7e:a4:d5:13:
5c:51:9d:a8:e2:68:75:da:c3:eb:54:c8:34:ac:d3:4a:1b:67:
0e:41:05:12:5c:fe:ef:ef:d6:2f:51:56:a0:6e:b4:3f:b7:3d:
0e:09:52:7b:18:51:ea:1b:18:9f:db:8b:b0:7a:f1:d0:c0:48:
97:87:45:39:14:0e:be:0a:64:47:14:9a:49:f4:2c:e3:d4:1e:
47:af:97:83
-----BEGIN CERTIFICATE-----
MIIG6jCCBdKgAwIBAgIULFpT5Pb4Kpe7hIr406LI0RZkj/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2U3YjRiNDAxMDU0MWY4ZTk1ZGI3ZWJkMjhkNzNlYTky
NzJjODZjYTAeFw0yMDEyMDEyMzIzMjJaFw0yMTExMzAyMzI4MjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQThDRDI4RTE4M0RCNkVEMTQy
QjRGRDE1ODY3ODVEMUYzOUEwRkE4MkREMzY4REI4Nzg1MzFCRTI4MjhBRkExMkYw
ODdDMTJFMkEzNTM0MDI5Mzg2QjUzMkZBMDM4NDlGMTMxOTFCMTFFNzU4MjgwRkRD
NzVFQkE4RUVFM0RCNzBDNDg5ODkxMDVBMDEyQkU4RTc2Qzk4RTA2RkNGNDI2RkY0
MDRCQTNERTU1MTFEMzk1NTBBMkMzOTBDQzYwRkY3OTEwNUQ3MUVEQUU5MkMxRTQ3
Njk3Q0NDNDYyMEM0MTg5QjVFMDNEMTJCQTI3NDdDRjkxOUM5REYzRDdENTYzNzlF
N0UwRDIxREE4ODI2MzUxMTkwOTMxNDJFODVCMkFEOEMwQTNBNEUwODk3QkU4NjhE
QjcwODkyQzQ3NjJBRDM3RUNFQUM4RUU1MkU4QjE5ODA5MEJBQTM3NzJEMTY0MEY3
NDNFQ0REOTlCQjlFNkEzMjNBQTFEQkE4OEE4MUZGQUMzODRGMUI1OUQwRDlFRTc5
Qzg0RjZCNjk3RkU1QkM3RjA2NEZDQUEzNjZFNzU5NUY3OTJGNUJFRkNGMjgyMDFG
QzM4RUE1Nzc1OTc1NjFDNzY4RDg2MTAxMjhCMzEwQTZEODE3MDEzNDdFMkIwQkEx
MURBNzYxRDVDOENDRjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqM0o4YPbbtFCtP0VhnhdHzmg+oLdNo24eFMb4oKK+hLwh8EuKjU0
ApOGtTL6A4SfExkbEedYKA/cdeuo7uPbcMSJiRBaASvo52yY4G/PQm/0BLo95VEd
OVUKLDkMxg/3kQXXHtrpLB5HaXzMRiDEGJteA9EronR8+RnJ3z19Vjeefg0h2ogm
NRGQkxQuhbKtjAo6TgiXvoaNtwiSxHYq037OrI7lLosZgJC6o3ctFkD3Q+zdmbue
ajI6oduoioH/rDhPG1nQ2e55yE9raX/lvH8GT8qjZudZX3kvW+/PKCAfw46ld1l1
Ycdo2GEBKLMQptgXATR+KwuhHadh1cjM8wIDAQABo4IB+DCCAfQwHQYDVR0OBBYE
FCmAxCkB8kFT1Yq2Q7NLebc2LmToMB8GA1UdIwQYMBaAFH57S0AQVB+Oldt+vSjX
PqknLIbKMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMjIvN0U3
QjRCNDAxMDU0MUY4RTk1REI3RUJEMjhENzNFQTkyNzJDODZDQS5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL2ZudExRQkJVSDQ2VjIzNjlLTmMtcVNjc2hzby5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraTEudGVy
cmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzEyMi8zNDM1MmUzMTM1MzIy
ZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzODMzMzczNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC2YvzANBgkqhkiG9w0BAQsFAAOCAQEAG4EJCL6S9L2X1kqThLyHslj8
gTjtRWeSlOdYWLNr/wZ1fUk+9pJkNn6JqesAlh2TdjN7PimAmIG/PDTXy+iar9Rl
dYKXnfW4MdshriEoaqcKM6ulm4xi6tRXdbHyVeBb2zzRO3yi2xAh/42Oagi1KyiV
k9V+DMRFnqOqlUvnEE2sO3hMa6K/+HtvqPAgIFmzhYwqJJHHETksGXQt/2/2Y0LF
6BWOh77H3qhYeSXvP8B+pNUTXFGdqOJoddrD61TINKzTShtnDkEFElz+7+/WL1FW
oG60P7c9DglSexhR6hsYn9uLsHrx0MBIl4dFORQOvgpkRxSaSfQs49QeR6+Xgw==
-----END CERTIFICATE-----
Generated at Wed May 14 01:17:45 2025 by rpki-client