Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3232203d3e203236363336.roa
File: 3135322e38392e38382e302f32322d3232203d3e203236363336.roa (raw, json)
Hash identifier: 69hpOU0VQZbaEbSdW7VXy7b/kTMj9m1nRxH4OToBGHI=
Subject key identifier: CB:D0:20:E6:A2:4E:9C:0E:6A:2D:AF:C8:1D:D2:43:A9:15:B4:59:9B
Certificate issuer: /CN=170584c3c22a791b9369e669afe83ce83dacc0ea
Certificate serial: 2A14B4EC13CDB5498B46DF2C69D48910E18C21C2
Authority key identifier: 17:05:84:C3:C2:2A:79:1B:93:69:E6:69:AF:E8:3C:E8:3D:AC:C0:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwWEw8IqeRuTaeZpr-g86D2swOo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3232203d3e203236363336.roa
Signing time: Fri 27 Nov 2020 15:10:25 +0000
ROA not before: Fri 27 Nov 2020 15:05:25 +0000
ROA not after: Fri 26 Nov 2021 15:10:25 +0000
asID: 26636
IP address blocks: 152.89.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:14:b4:ec:13:cd:b5:49:8b:46:df:2c:69:d4:89:10:e1:8c:21:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170584c3c22a791b9369e669afe83ce83dacc0ea
Validity
Not Before: Nov 27 15:05:25 2020 GMT
Not After : Nov 26 15:10:25 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:df:d5:ea:84:44:4b:2e:a2:5c:3c:ba:0b:
9e:d0:bd:99:e8:a3:a3:3c:27:8d:6e:ae:bd:7f:ee:
aa:bf:c7:05:04:d1:d9:5b:fa:92:39:d4:46:f5:4a:
f9:53:bb:0f:0b:d9:e5:d3:b3:49:66:57:4c:de:60:
61:7f:6b:38:8a:97:62:39:e4:7f:aa:b5:fd:8f:ac:
52:84:8e:84:91:17:73:da:4a:53:94:17:b7:77:1a:
4b:f3:f1:cb:32:4d:7a:02:b9:45:c2:15:2c:4f:00:
72:4d:a8:ce:54:19:b6:80:85:8c:d0:ca:0d:50:45:
96:88:42:89:9b:90:11:dd:1e:5b:77:44:e1:56:c2:
0c:53:41:f5:45:5f:e0:f6:00:03:65:f3:29:88:19:
f1:75:bd:17:d8:12:f3:6b:7c:0f:68:6c:aa:2b:08:
ec:4a:87:be:7c:5f:b7:29:8d:b2:f8:6c:c1:e8:fd:
b6:98:e8:a2:24:bc:2c:d8:12:a0:8e:cd:a2:1a:77:
ec:7c:2b:c9:f0:26:3e:14:72:f6:8b:e0:06:84:be:
6f:cf:27:8a:b0:3d:34:99:18:b7:fb:3f:19:98:45:
23:75:59:14:49:14:b0:25:3b:bc:18:d4:0d:24:8e:
3f:7a:58:1f:02:25:88:45:12:f5:1e:40:21:d4:39:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:20:E6:A2:4E:9C:0E:6A:2D:AF:C8:1D:D2:43:A9:15:B4:59:9B
X509v3 Authority Key Identifier:
keyid:17:05:84:C3:C2:2A:79:1B:93:69:E6:69:AF:E8:3C:E8:3D:AC:C0:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/12/170584C3C22A791B9369E669AFE83CE83DACC0EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwWEw8IqeRuTaeZpr-g86D2swOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3232203d3e203236363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:5c:09:fb:d1:f0:7d:61:14:14:02:d7:31:bf:c8:cc:aa:af:
22:2d:7a:e0:f2:5a:d8:97:91:c4:72:20:83:be:e9:23:bb:fa:
7d:1c:46:03:57:4f:ab:de:c3:bf:43:e0:18:4c:9f:98:ff:f0:
38:c0:ba:a4:b3:53:44:8c:e6:4e:40:d2:a3:91:41:14:7b:ea:
a1:80:05:d4:ad:40:ef:8f:50:ae:84:4b:82:33:1b:06:be:71:
b6:16:5d:8a:54:28:7e:38:64:92:20:85:7d:26:ae:64:0b:83:
6c:7c:29:b9:49:d4:50:56:99:d0:d8:7c:40:b6:2a:16:a7:9c:
d1:81:53:22:5b:1d:f7:be:a8:e2:d2:0c:6b:69:d3:6e:55:5b:
b3:5b:34:01:57:41:d2:06:b8:c3:18:71:1d:1d:dc:3a:ec:ce:
c0:9a:5d:d4:87:e6:52:e1:e7:d7:b2:67:09:26:83:a2:d4:ea:
3e:14:83:4f:3e:77:70:e9:e7:60:20:33:69:c1:a5:ad:ea:14:
60:65:cc:94:80:ee:8a:a4:91:e0:66:71:a3:ba:34:cb:b8:21:
92:69:10:4b:8f:79:0d:dc:4e:c9:c9:06:16:a0:18:f8:34:82:
5c:94:4c:b0:ef:4c:1b:ca:e2:4c:85:df:a9:20:8f:6d:e9:2d:
4c:c5:76:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-fra.rpki-client.org