Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234352e3235342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3234352e3235342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: /T2Umj4ZMRcbr+AuI3XankjUV5OOVCDLA32G2VRv2o4=
Subject key identifier: 32:03:FE:DF:06:A2:0C:BF:69:21:F7:C1:25:18:DB:4F:50:FE:FC:80
Certificate issuer: /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial: 43CA9C66177789D20F792B56F39E9C7E9C9A1CCC
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234352e3235342e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 22 Oct 2022 04:34:06 +0000
ROA not before: Sat 22 Oct 2022 04:29:06 +0000
ROA not after: Sat 21 Oct 2023 04:34:06 +0000
asID: 136787
IP address blocks: 185.245.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ca:9c:66:17:77:89:d2:0f:79:2b:56:f3:9e:9c:7e:9c:9a:1c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
Validity
Not Before: Oct 22 04:29:06 2022 GMT
Not After : Oct 21 04:34:06 2023 GMT
Subject: CN=3203FEDF06A20CBF6921F7C12518DB4F50FEFC80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:b1:fb:35:16:ad:fa:bb:3d:e4:44:75:55:
5a:54:68:46:c4:b6:e1:35:dd:15:80:5d:35:ca:20:
82:c7:82:cd:da:8a:d8:fa:20:59:1d:f3:a9:6b:06:
be:a4:2a:7d:c7:3b:21:c2:5a:68:34:27:31:dd:89:
0b:52:d5:87:fe:76:e6:e8:56:89:ec:69:14:03:3b:
5b:76:70:f6:a0:59:d4:73:c1:d1:52:7b:5f:cf:f2:
eb:b8:18:40:03:ad:07:8d:f9:d1:8b:d2:e5:90:da:
4b:0e:0c:2a:b7:78:6c:0a:83:fd:38:3d:90:18:1d:
52:59:c9:2c:4d:aa:3e:39:5c:b6:32:8d:10:b3:10:
fe:80:62:35:dd:b7:a2:9b:0b:2f:3d:79:52:45:17:
72:d5:88:2e:1d:d3:80:24:8a:79:77:58:e5:af:87:
a6:2a:bf:72:f1:6e:19:83:96:6b:ad:14:82:82:b5:
3c:cd:90:6a:ef:ad:04:6f:79:e0:57:b9:9d:5f:4d:
8f:45:98:b0:08:da:f9:2b:c1:f4:3b:ab:8e:c9:4d:
9f:21:b4:d2:3e:03:11:f2:30:ce:68:22:b9:3a:eb:
f8:f0:54:0b:00:f3:90:b4:b6:91:fe:e7:8e:44:f3:
fc:f1:93:0c:14:9a:30:59:c6:3b:93:4f:ea:fa:62:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:03:FE:DF:06:A2:0C:BF:69:21:F7:C1:25:18:DB:4F:50:FE:FC:80
X509v3 Authority Key Identifier:
keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234352e3235342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.254.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d8:23:95:cc:0f:47:68:5c:6e:59:21:10:eb:51:cd:32:cb:
f1:52:49:be:ed:b0:be:af:d7:b5:1e:41:a9:97:f9:a9:89:cc:
39:93:c6:8f:32:1d:65:fd:ee:a4:15:73:e5:44:93:fc:25:6b:
6d:11:81:7f:81:8a:3b:77:e1:3a:26:5f:c6:00:a1:47:54:1f:
79:59:82:22:7f:15:7f:0e:92:db:e9:18:cb:2b:6c:9d:10:23:
92:b5:e9:87:ac:12:0d:f5:ec:0a:4e:f8:21:6e:c9:c7:a4:e5:
b3:be:8e:52:0f:82:09:7f:20:61:61:77:17:40:c9:d5:43:71:
bc:29:e4:7b:e9:66:95:2b:32:29:73:2a:4f:be:c8:df:5e:a9:
73:52:76:cf:b1:03:52:35:9f:df:00:3e:dd:a0:fa:38:ea:00:
63:96:84:45:09:a2:4f:0d:db:7d:f0:b6:fc:14:6d:0b:41:51:
6d:e5:4c:5b:d8:5d:67:02:8e:7f:48:1a:30:76:d7:a7:86:9f:
bf:5f:41:24:33:ca:3d:41:ef:5f:9e:2d:68:36:09:dc:f3:47:
4c:ae:13:29:ba:87:49:48:90:c3:6d:e6:b8:49:f9:ef:24:28:
2b:45:2c:87:14:17:eb:2f:fb:a0:08:7e:e3:03:4d:60:5b:01:
78:01:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org