Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32302e302f32332d3234203d3e2030.roa
File: 38342e35342e32302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: 9/szgB0nIZyJDLQIeVIgHRLUE1HcVTAIMuqNVvoAb58=
Subject key identifier: E8:D4:57:DA:10:7D:4D:62:31:C5:91:AE:39:8E:A0:29:9D:BD:2F:04
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 027BA3F4E237D8E9D32F834206605B1BC0C35326
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32302e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:18:27 +0000
ROA not before: Fri 03 Mar 2023 16:13:27 +0000
ROA not after: Fri 01 Mar 2024 16:18:27 +0000
asID: 0
IP address blocks: 84.54.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7b:a3:f4:e2:37:d8:e9:d3:2f:83:42:06:60:5b:1b:c0:c3:53:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Mar 3 16:13:27 2023 GMT
Not After : Mar 1 16:18:27 2024 GMT
Subject: CN=E8D457DA107D4D6231C591AE398EA0299DBD2F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:32:5b:e8:fe:af:9a:b5:5a:e0:14:12:c9:
33:44:14:fc:62:30:19:a6:fc:5d:75:e9:14:d6:1a:
e9:d2:26:0d:39:fa:b3:54:92:ac:e3:88:2b:63:dc:
74:2b:4c:47:0c:a0:6b:07:85:fe:41:5b:e9:a4:16:
78:bc:34:ff:24:ee:3c:ff:72:7b:e7:e8:4f:fe:6d:
40:92:00:a1:6b:f3:62:e8:40:64:0b:d8:8d:b0:2d:
b0:bb:73:21:95:2b:62:53:cf:b4:be:83:16:cf:22:
a9:eb:93:20:f0:97:d9:fd:6b:98:88:dc:a3:e2:3b:
eb:17:b5:af:16:78:e5:c5:63:95:4e:77:d8:06:b4:
42:da:02:4d:38:5f:d0:10:c2:78:16:68:98:08:8f:
bc:25:09:ad:45:27:f9:9b:77:a0:9f:0c:39:31:2d:
11:93:90:91:7d:5d:92:49:9b:e5:f9:3f:69:8f:50:
b5:50:e2:23:03:0c:53:66:90:67:8d:c6:63:2c:a0:
d0:e0:79:99:57:95:6e:91:46:bf:e9:1a:56:55:3b:
f1:a1:a7:9f:65:ca:35:fa:1a:4f:97:79:06:b0:7b:
ef:36:de:89:a4:23:df:4d:5c:95:3a:1c:f5:e9:0c:
c8:01:cf:6b:48:28:19:6d:0a:95:14:f0:14:de:2f:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D4:57:DA:10:7D:4D:62:31:C5:91:AE:39:8E:A0:29:9D:BD:2F:04
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32302e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.20.0/23
Signature Algorithm: sha256WithRSAEncryption
ec:31:df:25:46:b1:a0:00:43:82:d4:ba:e6:9e:62:b2:34:1e:
a6:64:fa:bc:d1:86:e0:d3:24:f7:2c:ff:db:9c:0c:65:30:15:
5b:76:4c:d0:e7:18:93:e3:5f:2b:c6:72:47:3d:e5:7a:f8:95:
23:1e:45:b5:d3:ed:78:f3:2a:30:11:26:f3:cd:98:28:64:e7:
bc:3f:57:b3:6b:05:a4:df:70:51:2e:9c:b6:76:b4:20:f3:d0:
5a:a1:6f:49:e9:45:65:af:a7:1a:60:23:e0:58:95:28:33:f0:
c4:bb:2f:80:f2:e9:48:40:83:42:e9:c4:37:34:15:4a:d8:58:
73:35:41:65:29:e6:dc:57:ce:48:9c:51:5a:fd:d3:fe:0d:a5:
d2:f4:e0:c2:50:27:9b:9e:d3:fc:53:88:3d:62:84:60:56:e2:
83:67:20:13:65:2b:13:fe:6a:70:da:d2:1f:e0:97:ce:e7:71:
36:21:8a:bb:f6:75:75:de:f0:ef:ac:2c:43:c4:57:6d:e7:ee:
09:54:73:b8:8b:38:86:bf:71:7d:03:31:8c:86:9c:aa:18:9b:
b3:b9:92:f6:e0:9e:2a:be:4a:1c:b2:60:d2:07:0f:75:f2:b0:
1c:28:bf:5f:9f:d7:08:03:97:54:9e:b1:5a:f2:92:dd:21:12:
0f:c0:05:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org