Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e203631333137.roa
File: 38352e3230322e38312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: JYaD9xhT6sRCBVK63wTrf42DPLiAek8NE4F1xaeVqlQ=
Subject key identifier: 94:6C:53:9E:F3:C0:3F:5B:B9:BE:FA:EC:10:5F:59:B3:D8:50:90:CE
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 54C790CA4066BA8654DB26B458E2D838ACCA86D6
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e203631333137.roa
Signing time: Fri 29 Oct 2021 16:00:23 +0000
ROA not before: Fri 29 Oct 2021 15:55:23 +0000
ROA not after: Fri 28 Oct 2022 16:00:23 +0000
asID: 61317
IP address blocks: 85.202.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c7:90:ca:40:66:ba:86:54:db:26:b4:58:e2:d8:38:ac:ca:86:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 29 15:55:23 2021 GMT
Not After : Oct 28 16:00:23 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:53:4b:91:ad:7d:cc:62:70:bf:7e:92:de:84:
ae:5e:94:ef:10:d4:d0:7a:53:20:5d:f5:65:a9:eb:
27:cd:08:2b:70:cb:9f:e0:36:f6:aa:6d:c0:c7:55:
37:d5:1c:ec:37:ab:5f:df:a3:b5:ca:b1:70:32:d9:
8f:c9:c1:01:a2:8f:00:59:1b:82:44:f7:28:84:89:
84:b2:62:13:a7:70:ba:e6:fa:4b:a6:94:7f:6e:b3:
69:64:21:d9:9e:42:53:f5:21:13:2f:86:aa:3e:ab:
8a:0e:ee:3b:45:a4:47:d6:cf:a9:96:59:53:8b:ab:
cc:b5:f5:03:04:e2:b3:d7:91:df:39:23:35:40:41:
e6:0f:21:36:21:0b:37:4e:b8:a5:b3:0d:d9:8e:ca:
3e:0f:5a:81:f5:30:0d:e6:55:54:22:82:6d:75:06:
c3:a9:16:e1:55:f9:bd:f2:b4:04:56:53:28:05:77:
db:6d:cb:42:da:a8:0a:e9:75:0c:b4:88:fd:6f:ef:
0e:63:72:35:f4:0c:fc:27:0d:0c:72:04:11:0b:e9:
62:f1:4b:ab:9d:8d:f3:0e:e4:f9:68:29:22:f0:d8:
db:bc:e1:d8:0c:fc:58:34:32:bd:12:70:10:f2:4e:
78:e8:7b:09:b3:d2:c1:b5:5d:06:1d:a5:29:4a:26:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:53:9E:F3:C0:3F:5B:B9:BE:FA:EC:10:5F:59:B3:D8:50:90:CE
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:df:eb:53:d6:e0:8b:29:91:1d:aa:64:7d:47:d4:80:36:10:
20:30:c9:ab:6a:62:9a:2c:62:a5:13:5d:97:a4:41:6c:67:1b:
6d:80:60:79:2a:49:82:ec:aa:14:ac:92:84:52:9f:dd:5a:b1:
fd:44:ea:56:58:13:a0:cc:9a:a4:3c:1e:db:d9:c6:72:d2:3b:
b4:68:ed:ad:7a:ab:a2:a2:d1:33:45:ef:00:6c:e6:6a:0c:e2:
b8:8c:9d:7d:1f:bf:38:ed:b4:ef:74:a8:f0:29:c4:eb:49:41:
06:06:f2:79:83:99:88:c7:5c:54:78:9a:a7:91:94:5b:ac:65:
25:a7:22:08:d1:7e:ac:fb:c0:64:53:db:76:55:3b:ca:6f:af:
fc:f9:a5:da:15:cc:65:3b:8b:70:b1:a8:ee:fe:89:51:4e:86:
2f:6d:5d:78:89:9e:85:fb:29:59:d2:73:2c:3f:47:90:c8:05:
fc:d4:b6:12:7c:a8:bd:a1:da:11:3f:1d:ca:1a:3d:b7:48:3d:
3a:b9:e5:39:7c:46:b1:c3:cd:8c:2a:b2:b2:48:34:0f:d1:97:
7e:32:79:51:da:c3:d2:9d:cd:ad:21:83:0b:4a:b3:54:51:70:
cd:d3:04:e3:f8:f5:6b:4a:51:23:04:ec:31:2d:3d:29:08:86:
47:03:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org