Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e39342e3230382e302f32342d3234203d3e2030.roa
File: 34352e39342e3230382e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: aAKySfLMaSqDiOkR2QL7QZoVFAduUyttSWdpILPm8Jg=
Subject key identifier: F5:38:C8:C8:BC:31:13:DA:7B:AE:4F:09:50:B3:6D:A3:39:4F:A0:25
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 1DB444B3B196FD9AB52FB60A2DCEEF68761E759D
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e39342e3230382e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:02:00 +0000
ROA not before: Fri 03 Mar 2023 15:57:00 +0000
ROA not after: Fri 01 Mar 2024 16:02:00 +0000
asID: 0
IP address blocks: 45.94.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b4:44:b3:b1:96:fd:9a:b5:2f:b6:0a:2d:ce:ef:68:76:1e:75:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:57:00 2023 GMT
Not After : Mar 1 16:02:00 2024 GMT
Subject: CN=F538C8C8BC3113DA7BAE4F0950B36DA3394FA025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:c4:f6:34:6c:19:73:18:21:50:59:9c:e0:
9d:f9:5d:36:4f:41:ae:9b:68:87:39:c5:23:a4:ee:
a7:cf:66:6d:83:bc:1a:75:be:68:76:9b:cd:77:7c:
11:eb:ef:fb:91:04:de:9c:26:52:82:4f:f2:0a:a3:
ae:01:18:17:a4:5a:bc:55:5e:6b:d2:a3:5f:5e:59:
6d:e0:a7:76:d0:e0:c2:c1:47:63:b3:16:e5:2f:b5:
9e:5e:3e:a3:54:fd:e1:92:68:8b:c2:60:35:1a:c8:
19:bb:dc:4a:6c:9c:71:ba:0f:a5:4d:1f:94:02:6d:
29:71:09:f2:34:e0:1f:b9:86:96:42:3c:eb:7a:81:
8a:ce:69:6f:3d:47:8f:e5:b9:f8:64:f7:d1:42:26:
ac:d8:e2:f1:62:76:60:70:58:ac:76:bb:0d:d5:ec:
ee:82:89:d6:08:f0:24:0e:4b:f3:90:cd:ca:ee:05:
1b:85:3f:5c:0d:85:8f:32:d4:ed:1b:3c:f1:fa:8e:
f7:1f:8c:4a:68:af:9d:cc:7f:95:8e:41:d5:71:46:
e1:25:8a:f5:7d:04:7a:08:4b:38:bf:05:24:ea:f4:
42:3e:f4:12:56:46:b6:b7:81:fe:bd:66:ee:7a:b2:
0c:99:cb:a3:b9:cd:21:b2:3a:6c:14:4e:50:c4:2f:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:38:C8:C8:BC:31:13:DA:7B:AE:4F:09:50:B3:6D:A3:39:4F:A0:25
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e39342e3230382e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.208.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5d:91:33:fc:ec:8b:8f:b9:bd:0f:97:15:ca:ba:7a:ca:d1:
1e:ba:73:a3:98:0b:2f:c8:22:24:4c:de:0c:7d:87:4e:25:e1:
98:89:47:ab:33:fe:aa:3e:09:e8:2b:b3:1a:8c:68:0c:67:6b:
01:e0:c0:ff:c2:ea:fd:29:79:81:f1:03:a5:80:f9:53:86:a1:
e7:00:24:68:ce:20:c6:33:ce:dc:b5:23:28:6d:5e:3d:19:3e:
50:e9:cc:fd:5e:06:a3:e6:fe:4a:85:87:19:88:35:b1:9a:df:
74:bc:14:d1:23:f2:e6:c3:b1:bb:11:3b:4a:c0:b8:26:f6:7a:
1c:bb:6b:3c:54:83:07:0f:09:12:2d:64:2a:25:d6:ad:2a:fb:
7d:84:3b:f9:8a:a5:6b:1a:5e:f3:cc:11:09:52:db:8f:cb:67:
8e:70:8a:20:3d:2e:39:d0:c7:80:d9:e8:34:b5:1e:23:c0:21:
f2:bc:e5:49:0a:9e:9e:6c:37:f8:86:29:a8:fc:cb:7b:53:14:
3e:51:a3:4b:27:31:f9:fe:0e:0a:3e:c3:d9:52:31:29:b6:cf:
aa:e4:21:ac:e1:96:af:89:ba:9a:ac:7a:ff:35:89:c1:95:83:
c1:d3:1d:50:53:f9:06:ac:9b:69:6c:e4:88:8f:77:89:b2:42:
99:17:8a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org