Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e20313336323538.roa
File: 33312e34302e3231322e302f32342d3234203d3e20313336323538.roa (raw, json)
Hash identifier: wyI5Qiq6xbcal9fBLKfbc91CQTeo389FrkU+ufAT2+I=
Subject key identifier: 83:10:2D:6F:68:00:3A:BF:76:18:CE:0A:13:35:40:A2:76:69:0F:89
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 329E7293929B53F13C025E1F3A44E8D487ED3F61
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e20313336323538.roa
Signing time: Sat 22 Oct 2022 04:33:25 +0000
ROA not before: Sat 22 Oct 2022 04:28:25 +0000
ROA not after: Sat 21 Oct 2023 04:33:25 +0000
asID: 136258
IP address blocks: 31.40.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:9e:72:93:92:9b:53:f1:3c:02:5e:1f:3a:44:e8:d4:87:ed:3f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:25 2022 GMT
Not After : Oct 21 04:33:25 2023 GMT
Subject: CN=83102D6F68003ABF7618CE0A133540A276690F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:8e:4f:4d:a8:61:7e:c7:48:23:12:64:bf:
29:86:c1:30:3c:a5:aa:92:f2:46:5a:1c:15:b7:76:
3d:99:93:b2:b8:f4:67:e5:33:a5:65:62:4b:6b:d8:
38:d3:15:b5:ff:f5:e7:66:0f:4c:99:6e:a4:16:ca:
99:1c:28:e7:cc:98:c3:7b:14:dc:99:1e:7d:b4:59:
f0:5c:83:f6:ed:d2:06:2d:f9:91:e7:e5:3c:b0:6e:
5e:a7:2d:03:bc:bb:3b:5b:86:00:be:58:85:d2:bf:
03:d6:f6:b0:33:f2:9b:ec:d5:d6:69:0a:19:33:1f:
c6:40:1a:b0:58:20:bc:19:83:41:7d:95:25:3a:ef:
66:ff:d5:bf:8d:4f:20:02:9e:b0:7e:86:cc:f8:c9:
e9:4b:e8:f7:0b:c6:a2:3d:27:a5:17:11:de:ab:3e:
5e:91:0f:b0:ae:eb:be:29:0f:53:e0:56:e8:62:80:
d6:d6:d8:e8:6d:90:0d:f9:0e:b1:b1:2d:ce:ba:a2:
f4:44:ea:fe:d1:15:f1:d4:d6:86:6d:35:28:89:a1:
db:ff:f7:50:9c:29:70:89:51:3c:07:2c:b3:ee:fb:
2f:eb:5c:2c:c3:d4:e9:e2:a4:da:e3:25:6c:98:97:
f5:cd:c2:02:f7:2a:21:7c:e5:88:e1:42:cd:57:da:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:10:2D:6F:68:00:3A:BF:76:18:CE:0A:13:35:40:A2:76:69:0F:89
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e20313336323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.212.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2b:6c:b0:0d:cf:5b:60:ce:b4:5d:e5:37:ba:49:b4:0b:2f:
d7:51:6a:91:bd:32:78:63:1c:a1:bc:e2:62:97:d8:ad:c8:4d:
55:f7:a3:45:50:b9:40:01:77:85:ae:b3:57:56:7b:a1:34:c1:
41:42:1f:11:ca:33:83:0d:7b:16:c5:03:3b:29:af:69:30:71:
79:21:21:a2:50:ac:b6:fd:e9:9b:c8:6d:17:9d:4d:c4:74:4f:
1e:3b:ee:dd:b2:5f:27:c5:d0:aa:48:7c:fa:62:44:b9:73:69:
37:a9:8d:f9:67:d8:5f:6c:9e:b9:61:81:84:50:da:62:03:a6:
c3:90:f5:c1:25:7b:cf:c1:c4:54:f4:d7:22:e3:7c:d8:6b:7b:
d1:22:73:29:a9:f4:47:59:47:5f:bd:9e:d5:4d:6a:7c:25:ff:
e0:db:0f:87:14:2f:e5:ef:f1:a9:0e:3f:be:98:67:4e:39:6a:
07:e4:d7:66:d0:09:77:f3:36:ac:0d:a6:bd:85:ef:5e:8e:ae:
c5:c1:33:f6:cb:d1:bd:4f:a5:4b:03:ef:ec:bf:cd:7f:bb:b2:
2b:74:15:ad:50:5b:2a:f5:93:53:89:b2:ed:48:2f:89:a8:9a:
ac:8d:65:a9:70:fd:40:65:fd:fd:49:7f:02:74:5c:46:0b:74:
14:bc:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org