Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e38342e3133392e302f32342d3234203d3e2030.roa
File: 34352e38342e3133392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: uo1vLsZF2kkAxLxMmXe8duawiMgobUqB1BEXuOgEEtM=
Subject key identifier: 57:0E:57:D8:63:B1:DD:B7:45:A1:53:BB:5C:21:B1:AB:CE:20:84:4F
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 027089A160C9CB93698032A08132C62407A55434
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e38342e3133392e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:01:23 +0000
ROA not before: Fri 03 Mar 2023 15:56:23 +0000
ROA not after: Fri 01 Mar 2024 16:01:23 +0000
asID: 0
IP address blocks: 45.84.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:70:89:a1:60:c9:cb:93:69:80:32:a0:81:32:c6:24:07:a5:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:56:23 2023 GMT
Not After : Mar 1 16:01:23 2024 GMT
Subject: CN=570E57D863B1DDB745A153BB5C21B1ABCE20844F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:75:af:92:22:60:a0:a4:f1:d7:47:be:66:
b7:0e:47:57:df:62:c0:6d:84:0a:66:12:bc:dc:bf:
52:2c:8b:44:0e:2c:21:b1:1e:ca:d5:52:4d:f6:b2:
2e:80:8a:11:86:89:e3:3e:02:cf:cc:14:9f:26:e3:
5e:06:ab:41:16:7d:c3:7e:ac:b7:93:0a:c6:b1:ad:
53:e7:92:b8:ca:cd:e6:e0:16:eb:ed:27:17:7d:25:
55:1d:17:1c:89:4b:13:19:77:4b:c1:1e:b4:ae:70:
77:a4:1c:19:a2:8e:21:c8:90:e4:5f:10:d3:5e:0e:
d5:0a:f9:38:0d:fc:60:ac:4c:15:5f:3a:3e:3a:e3:
8c:d3:78:a0:54:f2:f1:24:73:29:d8:ff:25:d0:c9:
1c:ab:15:bd:a7:01:eb:2e:4a:2b:29:36:7e:84:7a:
6f:56:53:fd:a0:f1:25:0f:9c:64:39:44:5e:b4:d4:
ec:c0:20:ad:26:0d:7b:ca:62:4a:e0:f7:56:d9:f8:
eb:1b:5f:4c:09:f8:87:6a:18:a3:3e:bc:7e:79:24:
bf:6e:fc:b2:05:25:5c:32:40:63:8e:45:71:25:01:
82:41:f0:46:66:c9:51:fc:82:cf:ee:ce:2f:65:3f:
58:0f:80:b9:fc:dc:9c:04:a8:3e:f3:39:3e:cf:e0:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0E:57:D8:63:B1:DD:B7:45:A1:53:BB:5C:21:B1:AB:CE:20:84:4F
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e38342e3133392e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.139.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:aa:0d:d3:29:b4:2a:80:eb:29:27:4b:b8:9b:c5:08:ed:0a:
8f:ad:0e:c2:42:b8:ec:8a:62:c4:b5:ee:6c:61:87:95:0d:ec:
ab:0a:33:c4:ed:e6:ce:83:78:5d:56:f5:cd:a1:16:6d:4b:86:
8c:18:d9:74:f2:3b:93:8c:f6:5d:4c:c1:08:c8:5f:7f:6e:35:
53:09:f4:f5:d4:a8:9c:ab:34:c3:fc:8f:4e:28:25:82:30:fc:
9d:7e:41:ad:ca:c8:48:ff:56:3d:b1:1b:e1:2e:6b:01:00:b8:
01:4b:0c:19:eb:ad:c2:1a:72:d8:42:66:30:90:48:2d:2b:ec:
0d:08:f5:88:95:a3:52:30:50:50:55:84:7b:66:72:81:bb:64:
39:c4:37:0e:1e:43:fc:7a:3a:25:e4:7d:3b:d7:13:a2:a4:38:
a7:77:de:af:a7:00:fb:27:15:8b:fb:fa:b8:5d:a8:2b:f9:78:
b5:31:7b:cf:8d:c1:03:ed:f2:2f:31:b7:7c:2c:96:25:65:31:
a4:7c:fd:38:93:bd:c3:c7:fd:fc:fe:53:05:3c:e1:6f:1a:a8:
77:ea:b3:b4:7d:d0:86:f1:41:c8:b4:d7:22:2d:7b:a4:dd:2e:
d1:73:0f:36:3e:ba:09:d4:35:31:0e:6f:af:f9:5d:d9:66:16:
21:58:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org