Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134362e302f32332d3233203d3e203439393831.roa
File: 34352e38352e3134362e302f32332d3233203d3e203439393831.roa (raw, json)
Hash identifier: WVgOitOR8bRjxSgQ7dJJDguF+G7jPMC8Tzsnfo7aBmU=
Subject key identifier: C3:D9:89:32:C1:C9:2D:70:B2:7C:24:87:C7:89:43:A3:79:51:59:B5
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 5AC555EC670D4541F5B0E688814791232A006B82
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134362e302f32332d3233203d3e203439393831.roa
Signing time: Wed 17 Nov 2021 18:57:10 +0000
ROA not before: Wed 17 Nov 2021 18:52:10 +0000
ROA not after: Wed 16 Nov 2022 18:57:10 +0000
asID: 49981
IP address blocks: 45.85.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c5:55:ec:67:0d:45:41:f5:b0:e6:88:81:47:91:23:2a:00:6b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Nov 17 18:52:10 2021 GMT
Not After : Nov 16 18:57:10 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:1e:78:d8:91:f7:18:b1:6f:9f:96:51:8c:
f2:21:a5:7b:e9:41:a7:ed:91:ff:da:58:c2:26:5c:
a4:ca:9e:5e:10:8a:44:a8:bd:49:a9:bb:d2:f0:74:
ce:73:e3:40:79:1f:e3:c1:6e:8c:68:a0:b0:67:c7:
a5:d9:8f:a6:89:15:98:71:87:1a:cc:2a:60:36:30:
9b:18:fc:5d:13:a0:13:bb:e8:e2:ec:5b:f3:2f:33:
43:40:b0:be:24:7b:4f:d2:73:a7:78:bb:04:59:92:
e0:0e:c5:65:1d:06:79:4b:29:f3:f7:42:24:14:16:
f0:9d:4a:ba:8f:93:46:c4:f3:00:7c:dc:bd:19:41:
98:38:0a:d6:96:bc:a6:e3:b8:db:26:64:8c:80:3c:
7f:d0:fe:78:62:85:1e:de:4b:59:1b:cf:be:f7:2d:
c3:9d:32:77:9f:97:10:ab:24:dd:dd:e2:57:75:79:
ad:93:93:65:11:58:8e:76:db:22:4a:f1:5a:49:ed:
40:6a:5a:41:2a:cd:e4:c3:07:8a:83:5d:12:9f:b3:
f2:2d:8d:e8:e9:c1:0a:ef:62:fc:0b:94:22:2c:f8:
61:df:cd:78:58:17:db:d5:5e:7e:d2:05:66:ed:8a:
29:a5:27:5d:71:58:f8:69:cf:36:68:20:6d:b7:69:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:89:32:C1:C9:2D:70:B2:7C:24:87:C7:89:43:A3:79:51:59:B5
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134362e302f32332d3233203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:7a:a4:cc:f4:d8:c2:09:ff:76:06:22:ab:0b:78:2d:35:4c:
de:9c:16:6e:1e:a0:3d:e5:ad:fa:b7:3a:73:5f:96:4f:9c:ac:
7a:84:05:e6:14:01:c6:cc:74:6f:4e:9b:c6:d4:74:02:f9:3e:
2f:cb:ec:c8:8c:db:8c:f4:50:20:9e:0b:49:44:6a:2c:5f:53:
f2:ab:1b:b7:eb:d0:75:6d:fd:a4:ee:2e:86:4b:71:bd:28:b5:
7e:ac:2b:d3:df:70:88:2e:a5:1c:08:87:0a:16:88:11:6d:90:
91:fe:c6:ba:b1:51:5b:ee:0b:8b:ad:86:25:37:21:c4:a3:26:
8e:5d:b5:c6:91:3c:ef:05:3b:91:36:9e:1c:86:ec:fa:0c:3b:
b2:43:0b:8c:2d:a3:ad:0a:3e:c1:1f:aa:6d:9e:3f:a1:ed:94:
4c:94:4e:e7:0f:1f:0f:54:2b:61:d4:c6:a7:f8:84:39:2e:84:
9d:df:4a:4e:60:78:8d:a8:ce:f8:c9:66:ff:43:34:09:b6:0b:
d6:f6:62:3d:ca:25:57:04:bf:2a:6a:2c:37:1f:68:70:55:eb:
32:0b:6c:93:be:37:f9:81:63:f9:e4:cb:c1:c0:2a:12:4a:f9:
51:6b:5f:ba:03:55:62:a4:d7:a9:25:cc:5e:20:ad:a1:85:fb:
93:83:aa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:03:11 2025 by rpki-client