Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231352e302f32342d3234203d3e2030.roa
File: 33312e34302e3231352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: npP4O25zOUrNAB0Uz7kX7dT1qsRiAhbM3m/6jP8dWYk=
Subject key identifier: AC:C2:D5:E8:0F:AA:31:F4:97:42:E8:AC:38:5E:A4:76:E6:BB:52:41
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 31405E4A566FBEDD20B350A24136927B641741F0
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231352e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:51:01 +0000
ROA not before: Fri 03 Mar 2023 15:46:01 +0000
ROA not after: Fri 01 Mar 2024 15:51:01 +0000
asID: 0
IP address blocks: 31.40.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:40:5e:4a:56:6f:be:dd:20:b3:50:a2:41:36:92:7b:64:17:41:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:46:01 2023 GMT
Not After : Mar 1 15:51:01 2024 GMT
Subject: CN=ACC2D5E80FAA31F49742E8AC385EA476E6BB5241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:56:09:1c:f3:8e:cc:dd:98:5d:ce:8f:05:
a7:16:01:b8:c3:12:ae:60:c5:62:d5:e0:d3:28:a5:
04:7c:60:67:80:96:ae:cd:c9:51:59:6a:1c:2c:8b:
00:85:82:54:6e:b3:14:7d:1e:38:82:be:fe:7b:57:
74:08:4c:be:a2:17:c3:02:1d:74:63:8f:7a:79:0f:
44:c2:a6:7e:73:a7:b6:cc:c4:84:e8:a4:72:58:68:
73:c5:3d:40:f8:74:49:3f:8c:06:e0:5d:05:1d:94:
2b:71:71:22:b9:93:26:12:45:fe:bb:fc:08:91:af:
41:13:43:26:48:bc:2a:7e:fa:37:15:0b:9c:74:60:
34:ad:87:99:e5:a6:7a:dd:c5:7b:3d:27:83:0c:05:
e3:5b:ec:84:dd:86:a5:cb:17:89:c8:d8:65:7b:09:
d8:54:95:95:6e:56:0b:34:af:58:9a:52:d8:80:36:
64:20:48:fe:08:0a:8f:58:c2:9e:93:c2:16:f3:22:
b4:90:ec:7e:ae:e9:da:af:47:c6:1a:5b:da:8c:a0:
cc:a9:a3:93:00:20:62:a4:5d:43:de:13:c7:0d:e8:
bc:be:c4:35:6b:69:4d:c6:20:59:00:1b:de:bc:e0:
14:bf:4b:9b:24:cd:44:ab:3d:4e:82:18:94:10:a4:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C2:D5:E8:0F:AA:31:F4:97:42:E8:AC:38:5E:A4:76:E6:BB:52:41
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:0f:f4:c6:4d:2a:92:83:e1:6c:48:f6:f0:36:ca:9f:6d:e6:
b4:12:a6:80:63:6a:42:10:24:90:16:9c:91:1d:03:60:1d:c5:
5b:84:66:19:f6:00:63:c4:26:d8:d5:84:dd:d0:75:2c:55:41:
0e:ec:19:4f:f2:9d:a5:94:a7:c2:60:51:9a:93:a8:d1:af:36:
6f:ce:3c:0d:04:3b:a8:1c:ae:77:14:db:18:7c:ac:50:67:b1:
06:7a:9c:bf:c9:bf:04:53:96:45:dd:46:b3:f3:cc:db:43:91:
bd:36:8d:61:a8:74:be:2c:c7:25:5a:2f:76:09:92:78:d8:f6:
6f:53:ad:f7:73:1f:8a:65:30:9c:49:0e:60:d4:9d:2a:58:e6:
df:a9:3c:78:e9:bd:2c:a3:51:0a:b4:8b:dc:19:11:4c:7b:ed:
8f:ed:b8:1c:89:68:07:93:bf:54:4a:b9:cb:95:89:6d:19:28:
ce:e2:22:1a:16:ab:74:bc:31:5e:1e:53:8b:fc:b8:ef:da:38:
71:97:00:db:1d:44:ff:7b:13:6b:ea:45:c9:a1:a6:5b:fb:35:
34:c4:b6:91:16:0f:77:c4:4d:e2:9a:90:3d:9c:7b:b0:99:ae:
10:eb:af:74:7d:98:26:1a:4e:f9:f8:c9:ec:00:7c:b7:aa:b8:
25:c8:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org