Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e38342e3133362e302f32332d3234203d3e2030.roa
File: 34352e38342e3133362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: eZzyCHHc3rCr5plI/8m/KsDo2ZwBEcpFrsob9FAIihM=
Subject key identifier: 12:D9:0C:79:4F:21:F8:0F:CB:91:8A:D7:B6:34:B7:8D:88:44:35:E0
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 546806AAECF9DF9956F48968C84A22A8C9407247
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e38342e3133362e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:01:05 +0000
ROA not before: Fri 03 Mar 2023 15:56:05 +0000
ROA not after: Fri 01 Mar 2024 16:01:05 +0000
asID: 0
IP address blocks: 45.84.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:68:06:aa:ec:f9:df:99:56:f4:89:68:c8:4a:22:a8:c9:40:72:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:56:05 2023 GMT
Not After : Mar 1 16:01:05 2024 GMT
Subject: CN=12D90C794F21F80FCB918AD7B634B78D884435E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:19:03:5e:8e:fa:66:62:18:12:85:1d:f9:4d:
17:22:8c:fd:ac:5e:53:27:b3:df:d4:95:7b:0b:50:
63:9e:4e:df:6b:32:40:eb:46:73:06:5a:bd:34:d0:
c5:33:45:a0:64:e6:95:fe:cd:9b:aa:99:fd:61:8c:
31:f2:55:15:99:fa:c6:5c:16:6c:dd:e8:23:0b:71:
3b:b1:e0:57:5b:8c:b8:ae:ae:a6:da:89:db:4c:93:
62:ec:52:47:18:22:bc:e7:a8:9a:8b:7b:27:2c:af:
4c:b7:ec:a3:1f:21:88:4f:67:f1:bb:a9:ba:07:2b:
92:8c:eb:66:11:27:60:9f:b1:25:e4:ae:bb:be:85:
b2:6a:b5:df:ba:71:4e:00:d6:fc:d3:ee:e1:0e:18:
e9:31:66:1d:25:55:24:04:a4:c3:ca:60:35:65:0f:
ea:05:ec:39:80:3c:09:19:a7:c6:b0:77:1f:31:f3:
30:bb:72:9a:c1:81:38:9b:b5:a0:ad:4c:ad:2c:ca:
d5:e6:cc:d2:1f:d8:31:66:05:cb:8c:6c:4d:d1:4f:
82:5b:63:f1:69:1a:a3:83:56:16:dc:95:21:8f:d2:
b1:d1:a8:09:e9:c2:4c:07:b9:55:13:02:64:a4:49:
dd:22:ac:30:cb:49:13:af:9a:81:ab:88:73:88:04:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:0C:79:4F:21:F8:0F:CB:91:8A:D7:B6:34:B7:8D:88:44:35:E0
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e38342e3133362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.136.0/23
Signature Algorithm: sha256WithRSAEncryption
73:3f:0f:83:48:5c:89:bf:b8:fe:6c:a3:aa:26:26:ea:0d:b4:
a3:8c:47:d6:0a:31:87:73:ee:85:e0:57:b7:b2:78:5a:97:88:
2c:b7:4f:b1:fe:15:19:a0:84:c6:e4:2c:35:67:c6:a2:8a:dc:
a1:92:10:7c:a5:39:10:5a:1f:0b:f3:a7:54:9b:bd:6e:4c:a9:
d7:33:4e:6a:d5:0a:93:17:5e:d2:d5:4e:75:52:24:85:9a:d6:
4c:65:ca:28:8e:e2:be:cc:63:dc:e4:8f:d0:12:58:63:7a:07:
89:67:a9:91:04:41:18:d2:4f:d9:d5:81:86:33:a4:d1:df:f1:
93:5b:73:84:0b:16:82:12:72:bd:10:43:26:d0:b0:7c:60:6f:
d0:24:5e:fd:dc:42:5d:50:55:a7:ea:b8:1c:2a:4b:97:ef:61:
e4:f9:9c:7c:06:0e:e6:69:81:e9:46:74:b1:21:df:71:6b:e6:
dc:b5:11:3e:8f:f2:dd:d1:1c:3c:86:42:77:79:cf:ff:15:a4:
c1:99:38:3d:7a:f3:9e:56:ab:e8:37:43:de:9b:a1:b9:c3:08:
ad:8b:58:ca:f3:fe:ec:2d:ea:64:08:fe:81:09:66:08:65:f9:
06:2b:8e:29:a0:22:f8:e8:33:ab:4b:ba:84:26:ae:0e:66:6a:
07:f0:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org