Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3234203d3e20323037373837.roa
File: 38352e3230382e35312e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier: PTti0vEgcx2yIWESuurLd6qI0U46E1OB3ev0G99+lYA=
Subject key identifier: 43:08:F3:1A:0C:91:97:D0:23:23:E1:EB:54:B3:4B:DC:36:FB:71:AD
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 1701DA113CBC6B1AAF3917CEAF20F9B8836BE269
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3234203d3e20323037373837.roa
Signing time: Fri 27 Nov 2020 15:10:12 +0000
ROA not before: Fri 27 Nov 2020 15:05:12 +0000
ROA not after: Fri 26 Nov 2021 15:10:12 +0000
asID: 207787
IP address blocks: 85.208.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:01:da:11:3c:bc:6b:1a:af:39:17:ce:af:20:f9:b8:83:6b:e2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Nov 27 15:05:12 2020 GMT
Not After : Nov 26 15:10:12 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:7b:6c:a2:ae:6a:ab:89:4f:c1:0a:a8:fc:
04:84:17:c7:60:a6:2c:61:16:31:5a:73:27:87:5c:
89:f6:b1:1c:89:06:e1:09:bd:86:0d:ba:25:0f:42:
50:84:87:27:3e:cf:d2:c1:b1:42:48:be:c5:28:7e:
b3:90:e8:71:16:62:3a:c2:b3:d5:7f:1d:ce:54:87:
dd:c6:cf:03:73:8f:55:c3:59:91:b4:fc:f9:b3:a9:
a8:61:3c:83:3a:e8:ee:8a:e6:44:1e:55:5a:f2:d9:
57:ac:6c:14:01:44:00:58:d0:ad:ff:83:0b:51:4f:
78:9a:b9:ff:52:70:3c:5f:97:06:97:bf:e7:0c:36:
1b:f2:1e:4c:be:ad:99:34:a9:57:e6:91:1c:58:e8:
49:dd:d6:21:34:53:d9:68:b8:ca:77:95:13:32:a5:
43:08:d9:d2:83:bc:e5:b0:6d:16:0b:4b:7c:55:f4:
65:42:79:33:ce:88:5c:34:7d:89:5a:2d:dd:dd:42:
45:0a:6e:bf:59:43:ee:d3:64:54:04:b4:05:27:e5:
c1:e9:f0:2e:b2:d9:c6:a4:6e:4c:2d:89:6d:93:ea:
75:db:d5:fe:dc:8d:1d:f0:3e:ab:97:28:e2:74:2f:
89:22:d2:82:a1:0d:bb:08:e8:6b:3c:4b:29:88:36:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:08:F3:1A:0C:91:97:D0:23:23:E1:EB:54:B3:4B:DC:36:FB:71:AD
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3234203d3e20323037373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1c:9e:aa:48:2b:d8:19:b1:d8:46:1b:14:01:00:2a:c5:7a:
bf:0b:a5:e2:68:f5:e7:13:08:d8:b7:f9:c6:a9:ae:f5:75:49:
d2:14:47:66:1c:a8:ef:43:18:e6:5b:8e:8b:84:9d:5e:12:e3:
c6:a5:74:6a:bf:58:0b:f3:c3:50:c6:39:cb:8e:c8:a5:40:c4:
f3:65:9a:08:c0:ee:83:1f:bc:19:fc:d3:0a:ea:25:1b:d1:7c:
62:d9:b4:e6:83:22:e9:09:e0:d6:74:63:f1:b0:e6:f9:68:d4:
3b:8f:60:d6:22:92:47:53:2c:7b:aa:ab:f0:5b:51:7e:13:d4:
46:f2:c1:88:1c:47:c0:a1:4c:b7:75:84:f4:df:f6:7b:0c:8e:
e9:3d:e8:c6:c0:f9:41:96:e3:4e:06:18:52:58:b4:a2:06:44:
58:59:a9:23:0b:62:1f:ed:aa:55:0f:39:d8:be:d0:58:a6:3b:
5b:8a:80:fd:0e:db:d3:a3:15:80:77:77:b3:a4:24:16:ca:ad:
cf:0a:d3:ce:72:6d:f2:d0:58:e1:3f:13:0c:03:be:77:93:03:
19:86:bb:28:46:cc:18:de:08:b5:08:95:1d:73:45:bc:e7:ee:
6c:69:4d:cf:f9:5d:a0:d6:ee:b4:97:96:b2:14:2d:c8:e6:64:
c8:96:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org