Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33352e302f32342d3234203d3e2030.roa
File: 34352e3132392e33352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: XmxwZmV/ZA2nnWHywXSDN8uKYDmUK6PgzI/WYCpoOuo=
Subject key identifier: 6B:0F:15:76:0E:2F:F2:61:32:27:0F:EB:6C:C2:F8:4C:FA:B3:64:4E
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 6C336C51051D00C5270841B270A62F00B861425D
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33352e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:53:16 +0000
ROA not before: Fri 03 Mar 2023 15:48:16 +0000
ROA not after: Fri 01 Mar 2024 15:53:16 +0000
asID: 0
IP address blocks: 45.129.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:33:6c:51:05:1d:00:c5:27:08:41:b2:70:a6:2f:00:b8:61:42:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:48:16 2023 GMT
Not After : Mar 1 15:53:16 2024 GMT
Subject: CN=6B0F15760E2FF26132270FEB6CC2F84CFAB3644E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:13:ec:f7:12:cc:8a:83:72:b7:bf:65:0a:
80:9d:89:e0:db:9c:8b:cf:64:3d:a2:11:ff:cc:a0:
02:e1:8f:ce:ab:cb:7e:ba:fc:c1:8f:d6:b8:ed:bb:
e4:df:e8:37:61:4a:88:0c:af:f2:96:bd:72:8e:2c:
d1:a6:cc:1b:a3:a8:ec:31:b9:67:6e:45:2a:76:8c:
aa:6a:2a:8a:37:82:e9:60:c3:b3:3f:61:38:62:e6:
c4:d4:bd:c7:10:01:a1:bf:e7:50:46:47:06:fc:7a:
72:06:f6:ee:7c:66:9f:c0:d1:e0:67:a9:53:5c:2f:
9f:9f:55:7b:76:ec:70:8b:da:16:b0:d8:65:78:16:
ba:a3:4c:e4:1c:2c:a8:4b:5a:51:60:05:39:13:70:
81:dc:6a:be:90:b5:39:95:38:fc:08:ec:98:18:1b:
a4:8d:3b:85:31:0c:c1:d6:b6:05:2d:1b:e8:a7:6d:
d9:3f:e5:56:ed:9b:7a:36:1a:9d:27:eb:f2:ba:62:
41:2f:80:1c:4d:9b:4b:2f:be:32:a3:96:d2:ea:34:
7b:d2:9d:e7:42:56:db:91:43:f9:4a:76:27:64:b2:
fa:8c:b2:04:da:02:8e:8b:e3:2d:3b:0f:8f:bd:f0:
28:47:b6:70:e6:49:02:59:3c:b8:61:fb:14:e3:b8:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0F:15:76:0E:2F:F2:61:32:27:0F:EB:6C:C2:F8:4C:FA:B3:64:4E
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.35.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c4:f9:26:a0:4b:71:8a:33:15:f4:ca:58:4c:1e:eb:d7:63:
89:6b:40:cd:da:cc:75:f3:60:24:95:60:12:c0:f5:86:90:ba:
e1:f6:6d:a5:ab:2f:82:7e:89:3e:f0:3f:61:35:a3:e4:08:5e:
97:53:30:47:6f:21:8b:e9:40:ff:49:b2:70:33:23:80:7b:0d:
05:52:69:a1:3e:64:95:b4:3d:67:7c:55:11:ba:f3:ed:ba:d1:
e2:8e:da:4e:f0:88:2e:3b:43:dd:cb:a8:0c:99:67:59:e0:cc:
55:d6:cb:d2:a2:b0:af:b1:7a:9f:05:fa:89:55:df:48:85:23:
02:d2:06:e2:e8:f0:e6:f7:06:53:48:9e:c9:19:b7:38:a8:53:
35:2f:5c:fc:84:3f:58:fb:b4:92:d1:e4:b3:8e:8e:d7:55:7f:
da:18:ca:cc:93:d1:3b:03:bf:97:52:f2:1e:ce:2a:47:2e:40:
79:ce:95:0b:30:b9:65:64:59:ea:4c:5f:07:a2:42:c0:10:1e:
fe:83:8e:03:4f:a1:3e:c5:cc:1f:5e:da:8c:b2:ad:cf:49:4b:
ce:6b:57:51:ff:10:ac:46:ce:91:33:87:12:f2:c4:87:b2:20:
de:dc:98:3b:cb:91:35:d5:18:47:35:a3:1d:46:81:66:f5:f2:
08:8a:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org