Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135392e302f32342d3234203d3e203632323430.roa
File: 34352e3133322e3135392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: SArNRu5mWxaca1x2y0Q2Nj/TxOF7Gm38KldUp/VeNqs=
Subject key identifier: 69:30:3A:9A:F3:1B:6F:80:FB:A3:BB:1C:52:E7:46:0A:2B:22:9C:71
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 746D5F28251B399B9996082A708D8E3CD97E78AF
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135392e302f32342d3234203d3e203632323430.roa
Signing time: Fri 17 Feb 2023 13:11:20 +0000
ROA not before: Fri 17 Feb 2023 13:06:20 +0000
ROA not after: Fri 16 Feb 2024 13:11:20 +0000
asID: 62240
IP address blocks: 45.132.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:6d:5f:28:25:1b:39:9b:99:96:08:2a:70:8d:8e:3c:d9:7e:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Feb 17 13:06:20 2023 GMT
Not After : Feb 16 13:11:20 2024 GMT
Subject: CN=69303A9AF31B6F80FBA3BB1C52E7460A2B229C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:a8:4d:37:80:35:99:c4:10:fe:fa:4a:b9:
d2:5b:e2:b7:16:96:c2:44:0d:c5:d7:0d:89:b9:26:
8c:dc:6f:07:db:61:9c:94:6d:14:26:1e:dd:86:7c:
07:cf:a1:58:f3:f2:dd:77:ec:d6:85:7a:0e:93:66:
73:08:89:3f:1c:a4:a0:52:0c:59:a4:1f:c3:2d:3c:
d4:5b:e6:e2:65:64:e4:f6:22:8b:d3:36:72:6c:94:
39:fd:4c:56:3c:59:7e:35:f6:b2:8d:c8:6d:6a:a1:
39:cf:db:e6:70:e4:bd:97:74:2d:32:36:1f:32:06:
78:a4:41:64:64:c4:3f:3f:27:3e:51:f5:c8:cc:cf:
39:20:06:a1:b6:01:22:f0:cd:fc:62:e4:ca:d2:c0:
f6:b6:5f:c9:3f:25:a4:b4:27:88:c3:2f:07:17:07:
2a:d2:3c:de:a3:0a:e2:3e:0b:be:1c:5f:34:46:8d:
2f:4c:1e:7b:a8:99:fb:b6:a5:38:0e:ce:b5:f6:37:
95:0e:f8:d8:f4:60:66:be:18:ff:e6:df:6e:c0:94:
e5:3f:92:5d:29:9a:92:bc:4e:e8:3c:8b:28:0d:74:
b9:02:c7:a8:94:cc:ca:b8:01:4a:20:a8:15:aa:9a:
32:fa:0f:8a:b2:30:95:b4:bf:1b:12:d3:91:77:c0:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:3A:9A:F3:1B:6F:80:FB:A3:BB:1C:52:E7:46:0A:2B:22:9C:71
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135392e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.159.0/24
Signature Algorithm: sha256WithRSAEncryption
91:45:a1:22:d7:14:94:e4:f8:2f:06:fa:ad:a1:b9:99:0e:1c:
d4:a5:27:b9:02:dd:b5:3d:f3:19:44:8f:c5:83:f4:33:24:c2:
c4:a7:31:7a:47:d2:25:d2:4f:26:3b:9e:ac:52:81:37:4d:aa:
65:90:1a:c8:21:19:85:07:6d:11:78:76:ea:39:b5:4c:ff:be:
a4:ec:5f:be:fc:a4:5e:4e:ee:98:29:db:5e:bd:95:80:2d:e0:
a5:3a:27:4e:66:c0:62:57:d2:12:bd:c0:33:d9:1a:72:ce:63:
62:1a:1f:f3:92:33:90:51:c8:76:07:c3:0c:87:bc:1a:ec:96:
3c:96:2c:b6:bd:98:5d:91:e5:42:6f:42:60:47:e4:00:80:f5:
88:ce:12:82:23:18:19:fa:38:b8:a7:c5:be:0f:91:03:e0:7f:
f3:8f:97:64:dd:34:ed:dc:fe:47:83:58:a7:6a:86:99:49:a9:
87:22:6c:37:85:04:c5:e3:01:d7:c0:b8:0f:01:85:9e:5d:fe:
68:d6:4d:93:a0:15:14:ea:45:8f:b6:27:3f:89:bd:13:d2:50:
14:c7:af:17:40:16:bf:fa:c3:18:ba:67:1e:2b:7b:76:86:19:
67:ec:13:92:f9:02:19:ef:ef:03:11:c2:04:a0:fa:aa:97:d4:
e5:8c:8b:07
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUdG1fKCUbOZuZlggqcI2OPNl+eK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMzAyMTcxMzA2MjBaFw0yNDAyMTYxMzExMjBaMDMxMTAvBgNV
BAMTKDY5MzAzQTlBRjMxQjZGODBGQkEzQkIxQzUyRTc0NjBBMkIyMjlDNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh/qhNN4A1mcQQ/vpKudJb4rcW
lsJEDcXXDYm5JozcbwfbYZyUbRQmHt2GfAfPoVjz8t137NaFeg6TZnMIiT8cpKBS
DFmkH8MtPNRb5uJlZOT2IovTNnJslDn9TFY8WX419rKNyG1qoTnP2+Zw5L2XdC0y
Nh8yBnikQWRkxD8/Jz5R9cjMzzkgBqG2ASLwzfxi5MrSwPa2X8k/JaS0J4jDLwcX
ByrSPN6jCuI+C74cXzRGjS9MHnuomfu2pTgOzrX2N5UO+Nj0YGa+GP/m327AlOU/
kl0pmpK8Tug8iygNdLkCx6iUzMq4AUogqBWqmjL6D4qyMJW0vxsS05F3wIMpAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUaTA6mvMbb4D7o7scUudGCisinHEwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTMzMzIyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzIzMjM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAthJ8wDQYJKoZIhvcNAQELBQADggEBAJFFoSLX
FJTk+C8G+q2huZkOHNSlJ7kC3bU98xlEj8WD9DMkwsSnMXpH0iXSTyY7nqxSgTdN
qmWQGsghGYUHbRF4duo5tUz/vqTsX778pF5O7pgp2169lYAt4KU6J05mwGJX0hK9
wDPZGnLOY2IaH/OSM5BRyHYHwwyHvBrsljyWLLa9mF2R5UJvQmBH5ACA9YjOEoIj
GBn6OLinxb4PkQPgf/OPl2TdNO3c/keDWKdqhplJqYcibDeFBMXjAdfAuA8BhZ5d
/mjWTZOgFRTqRY+2Jz+JvRPSUBTHrxdAFr/6wxi6Zx4re3aGGWfsE5L5Ahnv7wMR
wgSg+qqX1OWMiwc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org