Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135322e302f32332d3234203d3e2030.roa
File: 34352e31302e3135322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: vjxa8BsT9Kg2kyHmzXP5gvk32hiaJHCZ5Cs8fWtNG3g=
Subject key identifier: 43:2D:4D:3F:27:FD:6D:21:39:DF:B9:3C:2E:7F:67:33:C2:71:0F:51
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 62D9DE3FF38871C3B251BF9F0E26FC06658CF4AE
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135322e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:59:33 +0000
ROA not before: Fri 03 Mar 2023 15:54:33 +0000
ROA not after: Fri 01 Mar 2024 15:59:33 +0000
asID: 0
IP address blocks: 45.10.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d9:de:3f:f3:88:71:c3:b2:51:bf:9f:0e:26:fc:06:65:8c:f4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:54:33 2023 GMT
Not After : Mar 1 15:59:33 2024 GMT
Subject: CN=432D4D3F27FD6D2139DFB93C2E7F6733C2710F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:91:72:80:f7:a2:b2:0d:e6:5c:8e:8f:19:
70:f9:9d:75:c2:f0:c9:c4:6d:16:81:74:b0:3a:92:
19:62:a5:ac:8a:77:6c:fa:1c:35:b4:f9:f5:19:e5:
c6:99:77:6c:ee:a5:86:2a:9d:49:dd:2d:78:b1:20:
c1:33:09:e3:91:76:ff:18:3a:15:9d:b9:ec:95:0c:
f8:36:8a:3a:a6:98:94:c8:2e:6b:ff:d6:09:34:ea:
03:db:67:7c:bc:26:ee:33:99:c0:57:05:e6:bc:d9:
25:aa:ac:30:3c:3c:32:59:df:5e:85:8d:8b:2c:b5:
02:9c:66:bd:33:fd:49:6f:68:44:29:28:b5:02:62:
ce:24:4a:c8:af:31:9e:c1:5a:9b:20:df:71:d8:a3:
27:6b:94:28:14:8d:b7:dc:14:d2:25:6f:90:e1:84:
99:5f:7e:44:87:85:60:72:a1:17:1e:c7:41:f1:1d:
23:8c:cb:27:7e:92:23:a0:ab:d5:a4:58:70:76:32:
6d:7a:97:b7:b0:bf:68:1c:65:c9:5c:61:14:7d:71:
66:25:b9:f4:f4:86:5c:6e:27:21:38:a9:61:01:51:
34:99:4e:6f:38:85:c5:2e:6f:04:3f:7d:1a:eb:db:
75:f0:ff:73:64:dc:75:bf:70:4b:ab:8b:03:23:3c:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2D:4D:3F:27:FD:6D:21:39:DF:B9:3C:2E:7F:67:33:C2:71:0F:51
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e31302e3135322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.152.0/23
Signature Algorithm: sha256WithRSAEncryption
74:27:c3:e3:a7:97:1a:ee:e2:86:d1:fa:d9:d5:e3:69:63:cd:
cb:22:66:a4:42:48:4f:55:ef:ca:06:ac:c5:ff:fa:33:92:40:
5e:8b:4f:a5:c4:00:3c:ef:c7:42:e1:ac:83:2a:a5:52:eb:43:
c7:4c:a6:c2:45:eb:fc:b0:71:8c:18:49:11:57:12:61:e2:6d:
72:58:df:45:f1:8a:04:b2:17:39:c6:9e:0f:61:db:17:da:04:
de:39:56:d0:27:9a:4e:3c:8c:5b:d1:1b:a0:01:e8:5e:9e:73:
7a:63:57:08:ec:e1:cf:e1:d3:fd:ae:83:eb:96:03:63:3a:2b:
a7:1e:fe:33:5d:9d:f7:f6:00:6c:33:b8:34:ff:fa:d4:62:2f:
db:db:e0:91:51:d7:7b:08:1f:ca:71:50:01:54:40:6e:21:2a:
18:16:80:20:2b:6c:a1:1d:78:43:f1:12:b0:1a:f2:b9:da:c8:
39:10:d2:76:d1:cd:a1:7c:47:94:15:25:0a:4e:74:85:fe:ba:
ac:bc:75:41:8b:ad:2b:3e:c6:d7:2c:3e:e8:84:4a:a0:87:7a:
f6:0f:90:f0:42:c5:f9:40:10:7e:04:6b:4c:92:ea:c5:6b:fc:
77:05:94:2a:fd:dd:3b:cc:d5:7e:d4:a6:3b:dd:37:99:7c:1b:
3d:e9:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org