Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3234203d3e20323132303730.roa
File: 38352e3230382e34382e302f32342d3234203d3e20323132303730.roa (raw, json)
Hash identifier: I4KgLSkbTrMp+VMODXNfpxdeKc1oBsUUCJfG1CdL63s=
Subject key identifier: D4:F6:86:32:DC:67:8C:D6:D7:A7:51:AE:76:CC:99:EF:B7:9A:88:D8
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 25528219D412ADF43345592916955D5635B274CE
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3234203d3e20323132303730.roa
Signing time: Mon 04 Jan 2021 13:52:10 +0000
ROA not before: Mon 04 Jan 2021 13:47:10 +0000
ROA not after: Mon 03 Jan 2022 13:52:10 +0000
asID: 212070
IP address blocks: 85.208.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:52:82:19:d4:12:ad:f4:33:45:59:29:16:95:5d:56:35:b2:74:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Jan 4 13:47:10 2021 GMT
Not After : Jan 3 13:52:10 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:3b:34:62:79:87:4c:da:f6:0c:5a:bb:98:
50:a4:43:6c:eb:b8:38:3b:b0:8c:e8:bd:24:d4:06:
91:ad:6a:a1:df:08:97:d7:ea:07:ec:c2:dc:48:cf:
6b:f6:73:f9:21:4f:56:57:08:3b:93:3c:48:84:96:
a5:17:ee:4b:13:bb:91:ae:75:59:df:46:cd:90:b1:
be:dd:2e:57:98:9e:31:4d:2a:bc:fc:98:1a:ab:10:
13:0f:3a:e1:57:ba:86:3f:95:2f:a3:1c:5e:55:fe:
77:c0:a0:f3:7e:b9:0f:d7:ff:4f:d9:92:98:b2:51:
5e:c0:13:57:70:4e:71:9d:96:4a:cb:45:54:a7:9b:
d3:50:da:f2:da:1d:4e:50:f7:db:8d:10:93:1e:1a:
f6:00:4a:ed:85:8b:b8:d6:6f:7d:80:f0:f3:e8:22:
42:29:80:81:47:25:75:3c:61:a3:3c:29:6b:a3:aa:
36:6c:04:d2:43:8f:12:b7:1d:73:2f:3d:09:9a:ec:
ee:34:31:29:27:20:f3:39:80:f9:cf:76:ce:e6:10:
54:86:5f:2c:a7:41:63:6d:18:4d:33:8b:94:ed:4b:
c9:be:33:77:01:e8:f6:ca:79:55:24:13:6f:d1:0d:
98:66:05:65:b2:49:0c:a5:a4:aa:91:e3:3e:96:3c:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F6:86:32:DC:67:8C:D6:D7:A7:51:AE:76:CC:99:EF:B7:9A:88:D8
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3234203d3e20323132303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.48.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fc:60:7d:78:cb:0a:c3:0e:2f:77:0f:32:17:7d:cb:93:95:
5f:f8:7b:b2:2e:e0:e5:37:05:b0:4a:ce:79:f9:fb:9f:98:8b:
1d:26:45:be:3c:f7:68:f8:e9:8b:9b:ea:88:6b:b9:94:ba:34:
98:df:6e:03:ab:f1:27:f1:c5:df:64:ee:7d:27:96:51:3e:40:
23:ed:e3:5d:91:ce:63:84:85:ed:47:8c:b5:81:e3:89:b2:73:
d2:f4:c7:50:85:ab:de:b7:7a:7e:95:ad:00:f8:3b:ad:a1:57:
8d:17:f7:49:51:9e:e1:9e:1b:12:a1:93:ae:5e:9b:ce:ad:d8:
44:63:bb:2f:7e:9d:ca:cc:c7:e2:d6:3f:29:7a:e4:98:6a:a3:
21:f3:bd:23:ac:4b:ef:d0:a3:12:3c:73:72:6a:45:c3:29:9f:
01:28:6a:b6:6b:8c:fd:12:58:8d:cf:fd:ff:7c:ed:4c:92:37:
ab:80:c2:64:b8:8a:78:4a:61:ea:25:d0:e0:80:4d:60:4e:6a:
10:2d:db:8b:52:da:54:65:bf:de:70:d0:b0:af:df:6b:f9:2e:
2d:95:c2:89:52:37:dc:f6:8a:8f:5b:68:8e:a4:d5:4f:b6:55:
0b:26:e4:f8:50:29:32:48:53:b3:b2:1d:ee:a9:ec:64:58:3b:
86:b4:49:46
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUJVKCGdQSrfQzRVkpFpVdVjWydM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMTAxMDQxMzQ3MTBaFw0yMjAxMDMxMzUyMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUI5NjNCMzQ2Mjc5ODc0Q0RB
RjYwQzVBQkI5ODUwQTQ0MzZDRUJCODM4M0JCMDhDRThCRDI0RDQwNjkxQUQ2QUEx
REYwODk3RDdFQTA3RUNDMkRDNDhDRjZCRjY3M0Y5MjE0RjU2NTcwODNCOTMzQzQ4
ODQ5NkE1MTdFRTRCMTNCQjkxQUU3NTU5REY0NkNEOTBCMUJFREQyRTU3OTg5RTMx
NEQyQUJDRkM5ODFBQUIxMDEzMEYzQUUxNTdCQTg2M0Y5NTJGQTMxQzVFNTVGRTc3
QzBBMEYzN0VCOTBGRDdGRjRGRDk5Mjk4QjI1MTVFQzAxMzU3NzA0RTcxOUQ5NjRB
Q0I0NTU0QTc5QkQzNTBEQUYyREExRDRFNTBGN0RCOEQxMDkzMUUxQUY2MDA0QUVE
ODU4QkI4RDY2RjdEODBGMEYzRTgyMjQyMjk4MDgxNDcyNTc1M0M2MUEzM0MyOTZC
QTNBQTM2NkMwNEQyNDM4RjEyQjcxRDczMkYzRDA5OUFFQ0VFMzQzMTI5MjcyMEYz
Mzk4MEY5Q0Y3NkNFRTYxMDU0ODY1RjJDQTc0MTYzNkQxODREMzM4Qjk0RUQ0QkM5
QkUzMzc3MDFFOEY2Q0E3OTU1MjQxMzZGRDEwRDk4NjYwNTY1QjI0OTBDQTVBNEFB
OTFFMzNFOTYzQzA1ODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq5Y7NGJ5h0za9gxau5hQpENs67g4O7CM6L0k1AaRrWqh3wiX1+oH
7MLcSM9r9nP5IU9WVwg7kzxIhJalF+5LE7uRrnVZ30bNkLG+3S5XmJ4xTSq8/Jga
qxATDzrhV7qGP5UvoxxeVf53wKDzfrkP1/9P2ZKYslFewBNXcE5xnZZKy0VUp5vT
UNry2h1OUPfbjRCTHhr2AErthYu41m99gPDz6CJCKYCBRyV1PGGjPClro6o2bATS
Q48Stx1zLz0JmuzuNDEpJyDzOYD5z3bO5hBUhl8sp0FjbRhNM4uU7UvJvjN3Aej2
ynlVJBNv0Q2YZgVlskkMpaSqkeM+ljwFgQIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FNT2hjLcZ4zW16dRrnbMme+3mojYMB8GA1UdIwQYMBaAFGGZTuk7q+YME+BEh/pc
00/SP8k/MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzYxOTk0
RUU5M0JBQkU2MEMxM0UwNDQ4N0ZBNUNEMzRGRDIzRkM5M0YuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9ZWmxPNlR1cjVnd1Q0RVNILWx6VFQ5SV95VDguY2VyMIGI
BggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzYvMzgzNTJlMzIzMDM4MmUzNDM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzAzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
VdAwMA0GCSqGSIb3DQEBCwUAA4IBAQCC/GB9eMsKww4vdw8yF33Lk5Vf+HuyLuDl
NwWwSs55+fufmIsdJkW+PPdo+OmLm+qIa7mUujSY324Dq/En8cXfZO59J5ZRPkAj
7eNdkc5jhIXtR4y1geOJsnPS9MdQhavet3p+la0A+DutoVeNF/dJUZ7hnhsSoZOu
XpvOrdhEY7svfp3KzMfi1j8peuSYaqMh870jrEvv0KMSPHNyakXDKZ8BKGq2a4z9
EliNz/3/fO1MkjergMJkuIp4SmHqJdDggE1gTmoQLduLUtpUZb/ecNCwr99r+S4t
lcKJUjfc9oqPW2iOpNVPtlULJuT4UCkySFOzsh3uqexkWDuGtElG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org