Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135362e302f32332d3234203d3e203631333137.roa
File: 34352e31302e3135362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: GWv8wP0nXJbZs2VhM2/7ihfHw0H9ZHSEnidFoQodJ6U=
Subject key identifier: 2E:D6:03:A5:5C:8A:54:9C:96:A8:DD:DB:B3:C4:E1:94:5C:FC:D5:17
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 5694FA382F5697149001F87028EDC7F24DC0F3F7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135362e302f32332d3234203d3e203631333137.roa
Signing time: Sat 22 Oct 2022 04:33:35 +0000
ROA not before: Sat 22 Oct 2022 04:28:35 +0000
ROA not after: Sat 21 Oct 2023 04:33:35 +0000
asID: 61317
IP address blocks: 45.10.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:94:fa:38:2f:56:97:14:90:01:f8:70:28:ed:c7:f2:4d:c0:f3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:35 2022 GMT
Not After : Oct 21 04:33:35 2023 GMT
Subject: CN=2ED603A55C8A549C96A8DDDBB3C4E1945CFCD517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:db:6b:2f:8f:fa:ed:e6:82:bc:a6:5b:d8:
8f:2a:2e:6f:29:a3:5f:73:f1:c0:58:cf:7f:c2:57:
6f:20:c3:0c:ea:f4:a2:af:0b:2f:04:cb:f0:bb:bb:
84:ed:5b:6c:ff:82:b2:a0:96:51:6a:27:d8:8a:3b:
ef:49:30:ba:5d:f1:ff:aa:e2:43:d3:94:02:ae:01:
7c:2f:43:6b:2b:7f:d6:37:ea:55:53:34:ee:db:4d:
af:39:1d:c4:b8:96:16:83:a6:54:d1:93:1e:8d:28:
ee:39:18:52:ec:98:83:e1:32:a7:95:ad:a1:ee:7d:
98:7a:cf:07:f0:67:27:e8:98:06:54:99:cc:b5:ac:
8f:9c:2d:82:34:07:53:26:8f:00:a6:6d:67:18:e8:
71:a2:4c:a6:86:2e:64:58:90:06:d4:d4:e2:e7:43:
7d:ca:40:3d:cf:4d:46:4a:88:fe:26:00:93:2f:e3:
7f:04:5e:99:c9:a8:96:2f:74:d1:4a:a1:d0:fc:45:
48:08:df:27:84:f1:d8:82:24:87:da:0a:a7:f5:41:
30:a9:b8:62:c8:8e:99:fd:b8:29:d9:6f:d0:88:59:
cf:6b:2c:dd:21:14:0a:03:ac:99:c7:45:a6:8c:55:
aa:62:34:73:a1:76:60:5c:8a:1a:0d:13:ee:a6:19:
62:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D6:03:A5:5C:8A:54:9C:96:A8:DD:DB:B3:C4:E1:94:5C:FC:D5:17
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135362e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.156.0/23
Signature Algorithm: sha256WithRSAEncryption
58:81:74:cc:58:28:9c:a6:8a:2c:c7:a2:ea:e7:3b:90:6e:0c:
0b:23:ac:9d:d9:21:41:7d:40:db:8c:a6:be:ab:47:0b:e1:77:
b4:7c:0c:9d:e4:60:b0:7c:03:24:de:de:e2:57:d8:59:8d:82:
33:96:d5:e5:3a:2f:d8:4d:10:ba:c0:6b:3c:12:d5:e1:13:7f:
d7:97:bb:0f:6e:d2:ea:94:d4:cf:d7:0c:f4:13:83:10:c2:91:
de:55:36:bd:63:28:c9:51:57:d8:61:a3:a8:c8:ef:ab:c6:dc:
0e:32:24:29:51:1f:1b:6e:ec:1a:ca:71:b4:7e:03:db:81:f1:
d1:11:95:fc:b1:4e:d4:55:8b:dd:33:94:ed:b8:55:20:bb:df:
b8:e3:b3:7b:3c:95:39:ab:ad:f6:2f:97:f1:1d:c3:a4:01:d7:
58:20:aa:cf:f5:aa:0a:21:c3:3e:e5:6a:07:14:63:e3:65:e6:
39:8a:d0:96:57:2d:ee:f6:2a:eb:af:9c:d9:03:58:30:03:08:
bc:ea:40:14:fb:ac:c6:56:5f:e7:0d:f9:b1:d3:39:5d:26:fa:
03:f5:a0:75:c4:7f:53:79:fe:d5:d8:94:47:f4:3a:96:36:b8:
d3:00:77:cc:2e:5a:4f:03:56:21:fe:fa:bb:ef:a7:2f:10:10:
00:11:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org