Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35382e302f32342d3234203d3e20333937343233.roa
File: 34352e31332e35382e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier: 2RWLQ83ByxztpwsOQ2V9E5PnIcQOYUzoB/V3DrBmoYQ=
Subject key identifier: 35:A4:3D:10:5F:0C:28:63:03:6B:2A:32:74:D3:44:45:EB:BE:F9:62
Certificate issuer: /CN=8000e2f09d2bdd9bee9d4694e4779bca485a6067
Certificate serial: 4E6F409A9969AFC1899996DF0E44BF46009E560C
Authority key identifier: 80:00:E2:F0:9D:2B:DD:9B:EE:9D:46:94:E4:77:9B:CA:48:5A:60:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gADi8J0r3ZvunUaU5HebykhaYGc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35382e302f32342d3234203d3e20333937343233.roa
Signing time: Sat 02 Jan 2021 10:29:34 +0000
ROA not before: Sat 02 Jan 2021 10:24:34 +0000
ROA not after: Sat 01 Jan 2022 10:29:34 +0000
asID: 397423
IP address blocks: 45.13.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6f:40:9a:99:69:af:c1:89:99:96:df:0e:44:bf:46:00:9e:56:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8000e2f09d2bdd9bee9d4694e4779bca485a6067
Validity
Not Before: Jan 2 10:24:34 2021 GMT
Not After : Jan 1 10:29:34 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:b2:91:e6:61:f2:55:e7:59:b5:51:95:5a:
9a:6f:9e:e1:72:38:6c:27:55:4f:a5:cd:db:f9:22:
20:f6:64:3b:52:2a:fa:12:42:3a:b8:e9:6b:4a:9f:
9c:2c:5b:ae:83:f2:83:ca:05:52:b3:be:64:66:c3:
84:ea:5b:8c:ae:ea:3e:80:c1:76:bb:f6:11:1a:e9:
5b:2b:33:a0:d1:c8:6e:3c:df:04:5b:ce:9f:f9:6e:
7c:e1:f6:bd:8a:67:b0:7a:26:43:af:30:17:ec:cc:
3f:cb:2e:c3:c0:d9:6a:ef:0f:88:56:7d:c3:02:7a:
b2:10:11:1a:91:b8:b2:10:af:f7:58:41:51:60:1d:
40:50:e9:e6:41:96:2e:44:2c:8d:bd:84:f5:6c:18:
32:d5:5a:ba:75:39:03:07:88:a7:25:05:89:8e:78:
c0:f3:6c:77:49:34:de:a7:ec:c5:fa:31:bb:52:e0:
3b:55:af:4d:04:68:83:6b:a4:1c:ab:a5:bb:82:bc:
f9:ac:a4:38:48:88:56:a0:30:05:42:8d:9b:2e:cb:
46:29:72:77:7e:6c:8b:db:97:03:18:28:03:18:3f:
1d:5f:5b:54:4a:ad:fb:5d:e3:ad:fd:2e:0f:96:65:
d8:ab:88:24:6c:df:31:b0:b9:df:17:c6:a8:c4:26:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A4:3D:10:5F:0C:28:63:03:6B:2A:32:74:D3:44:45:EB:BE:F9:62
X509v3 Authority Key Identifier:
keyid:80:00:E2:F0:9D:2B:DD:9B:EE:9D:46:94:E4:77:9B:CA:48:5A:60:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/13/8000E2F09D2BDD9BEE9D4694E4779BCA485A6067.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gADi8J0r3ZvunUaU5HebykhaYGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35382e302f32342d3234203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.58.0/24
Signature Algorithm: sha256WithRSAEncryption
69:df:45:ad:71:5d:97:86:7a:4e:b1:52:30:40:ff:e7:08:00:
80:78:98:3d:d3:31:7e:9e:f2:46:e1:ac:bf:28:9f:04:45:c8:
c0:42:f7:19:ae:f1:af:da:af:82:ba:3c:23:91:aa:23:6d:8b:
eb:74:69:8a:cb:93:11:df:cf:20:ba:63:f3:69:08:dd:70:48:
a4:42:e6:3d:67:48:20:90:34:04:29:22:0e:27:c6:a8:d6:6e:
ab:e7:6f:24:35:09:9a:1e:62:25:0f:98:3c:4c:c3:c0:4a:3c:
b4:c5:ae:3c:48:b1:c2:e7:0d:d7:5e:23:ad:4e:fe:60:76:e0:
04:25:81:0a:1e:dc:64:b6:d6:7b:0e:09:24:08:db:e0:02:26:
24:21:f8:ee:90:44:45:41:37:f0:8a:11:59:16:cf:0f:a5:8f:
5c:a1:75:a1:9b:1c:e8:ac:fb:ed:cb:c6:b7:d5:14:c8:34:bd:
07:cc:b5:e5:a2:53:46:4c:e4:0f:89:ef:54:d8:10:8c:a2:82:
f8:b0:d0:c5:f8:a1:32:fd:e6:24:2b:84:06:55:6b:e0:32:15:
e8:d0:2f:25:08:24:b5:be:a6:24:86:0e:e4:b6:f1:a0:2f:31:
b8:e6:03:64:a5:dd:a7:00:c1:b8:c3:3e:fd:73:76:de:1d:3d:
09:93:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:54 2024 by rpki-client on console-ams.rpki-client.org