Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3135352e34302e302f32322d3234203d3e2030.roa
File: 34352e3135352e34302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: ej4QMxS2w0bFqAvS5CezWgbFd6OuotuTor9gIZdjHPg=
Subject key identifier: 2B:C3:E4:3F:AE:8A:3F:24:F1:C6:87:D8:96:F9:68:8B:94:F2:3C:4A
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 7EC77C8A270E71B084CA0BDC19D526994CB574AB
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135352e34302e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:02:53 +0000
ROA not before: Fri 03 Mar 2023 15:57:53 +0000
ROA not after: Fri 01 Mar 2024 16:02:53 +0000
asID: 0
IP address blocks: 45.155.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c7:7c:8a:27:0e:71:b0:84:ca:0b:dc:19:d5:26:99:4c:b5:74:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:57:53 2023 GMT
Not After : Mar 1 16:02:53 2024 GMT
Subject: CN=2BC3E43FAE8A3F24F1C687D896F9688B94F23C4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:ef:23:aa:3f:14:d4:7e:a8:e6:0f:68:be:
9e:3b:72:f1:fb:19:f8:dd:c9:3b:5f:4f:db:08:0d:
b8:74:1b:1b:07:d4:d3:7d:7f:85:f8:6b:3e:6b:c2:
c7:9b:b2:8c:af:3e:0f:ac:ef:59:51:c4:ae:c0:1b:
bc:69:f1:e1:a7:bc:58:55:dd:d0:13:7a:7c:f9:95:
09:d5:9d:0d:15:a3:ff:12:21:40:13:c4:2a:c8:99:
e4:46:c0:b1:48:ed:de:d2:5e:c2:c2:67:c7:4f:b3:
f9:bf:ee:37:f7:de:3f:cf:d4:0d:d4:e8:3d:34:7a:
fd:d6:c9:34:b3:4c:8f:bb:d9:32:ef:c3:89:ac:1e:
7c:30:48:b8:3c:f7:b2:27:df:2b:a6:e7:14:aa:23:
73:51:4e:ce:92:0f:b1:26:5b:b0:08:ec:d6:7c:7a:
0c:c7:4f:d8:81:5d:98:e5:55:9e:a3:8f:b9:b6:28:
29:83:b0:7a:0c:81:a8:72:14:46:3e:8c:06:37:8a:
a2:e4:c0:51:8e:43:ee:e8:0b:81:f9:15:56:32:63:
97:86:1c:12:0b:a4:02:37:78:f0:92:db:e7:9e:4e:
dd:87:9b:a9:d1:dc:66:7e:ea:10:a8:cc:f8:85:f3:
42:1f:4d:fc:81:49:25:a3:94:b8:4b:09:d7:97:f9:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:E4:3F:AE:8A:3F:24:F1:C6:87:D8:96:F9:68:8B:94:F2:3C:4A
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135352e34302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.40.0/22
Signature Algorithm: sha256WithRSAEncryption
86:02:1f:12:15:1b:fe:33:0c:c4:30:ef:5f:17:78:d1:e3:04:
e0:9e:66:64:31:e0:ea:81:20:07:b8:be:c8:0d:1e:27:9a:1c:
ec:03:8f:79:e6:9c:99:55:3f:3b:92:46:60:c6:9d:0e:9c:4b:
ef:22:2b:28:26:fd:0e:ab:df:e0:b8:2a:3c:19:02:fc:cc:b7:
bb:9c:bc:bb:a0:74:67:cf:16:09:23:9c:e8:08:1e:48:ec:76:
f1:5b:a2:99:e2:bf:0a:34:1e:d8:af:ac:f2:c4:90:eb:8d:e3:
6d:02:11:8e:1a:a5:98:76:9b:35:6f:60:12:cb:00:65:f0:11:
e8:1f:05:2b:82:42:fa:b9:f6:f7:3e:f1:e3:09:70:b3:fd:b1:
44:c2:32:13:c8:6e:29:fe:81:e3:02:58:20:00:ba:d6:0c:e7:
09:af:15:ac:95:f1:69:12:b1:68:bd:aa:0d:0b:65:2a:fa:e7:
14:e6:7d:ba:c4:0f:da:df:7e:00:6e:cd:83:3f:34:5c:56:e7:
9c:f4:57:e9:2f:34:8f:30:13:25:b4:8d:7b:56:86:e1:4a:54:
3e:01:da:b2:ff:06:f0:af:24:2f:c8:ea:be:c6:ec:44:61:63:
d0:30:12:99:be:be:75:97:bd:fa:18:3d:19:09:91:e3:64:54:
47:4b:41:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org