Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138372e302f32342d3234203d3e203133323133.roa
File: 34352e3134302e3138372e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier: IETBFpOar+YnsBGqfo5Pnjdy1TnSU5yRA9+ODPloELo=
Subject key identifier: 8A:FE:AB:BE:D3:DF:89:B5:33:87:BD:91:A0:23:96:C9:17:C4:7E:C0
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 215A8BDAFFD241AFC75E4380D96472E6DC991D96
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138372e302f32342d3234203d3e203133323133.roa
Signing time: Tue 21 Feb 2023 17:20:56 +0000
ROA not before: Tue 21 Feb 2023 17:15:56 +0000
ROA not after: Tue 20 Feb 2024 17:20:56 +0000
asID: 13213
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5a:8b:da:ff:d2:41:af:c7:5e:43:80:d9:64:72:e6:dc:99:1d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Feb 21 17:15:56 2023 GMT
Not After : Feb 20 17:20:56 2024 GMT
Subject: CN=8AFEABBED3DF89B53387BD91A02396C917C47EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:7f:26:c3:33:58:ee:cd:d9:cc:6d:eb:42:
85:d4:f8:2d:f3:f3:ec:d6:8f:05:f1:96:34:64:c9:
2f:e3:e6:91:7e:f1:5a:78:26:03:af:a2:12:f5:9f:
8d:eb:c7:aa:27:18:7d:fd:bd:40:b4:d5:70:23:95:
cf:2c:8a:c6:aa:0c:f8:c9:cb:b5:41:93:7e:1d:15:
51:6e:44:ab:e8:32:1b:be:13:72:b3:2c:50:24:2d:
fb:6b:89:8e:5c:f9:2b:21:f3:fb:d5:c5:db:45:6a:
dc:ef:b3:df:24:90:13:7d:d7:48:61:73:d3:99:bb:
6f:64:5b:22:6b:9a:d4:ad:ee:05:32:96:bc:83:40:
30:e8:83:1b:b4:f6:74:5b:94:b3:52:d8:6b:f0:3e:
02:bd:8c:12:78:93:de:cf:41:71:6f:6a:20:d9:ba:
a6:d3:8a:0a:3b:31:ad:d7:f5:66:1c:b9:ce:7e:6d:
76:6f:2f:1d:53:e2:c1:6c:0b:e0:fc:78:1e:58:66:
71:66:78:28:94:36:a9:22:93:4f:1b:9a:1a:0d:11:
2a:94:61:8d:16:af:5e:07:6c:22:4a:6f:5c:d7:07:
53:cb:be:de:75:da:92:75:c9:3c:d4:d0:68:cd:93:
60:0a:e0:3b:24:88:8e:23:92:8b:06:a6:b0:c0:fd:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:AB:BE:D3:DF:89:B5:33:87:BD:91:A0:23:96:C9:17:C4:7E:C0
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138372e302f32342d3234203d3e203133323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:55:ff:31:b2:61:95:6b:f1:73:a2:8d:ae:4f:2f:40:f2:d3:
c8:9a:3a:79:70:ce:08:86:0c:23:ee:69:d6:a8:f5:14:0f:ff:
05:5b:b2:39:27:fc:10:cc:73:a1:fc:ae:b0:1b:a0:c1:ba:8c:
78:71:cb:85:a5:71:55:66:ce:e4:01:db:41:dc:29:e9:ea:9a:
8e:f4:58:b9:15:33:96:e0:6d:27:6c:f9:88:d5:c1:42:87:a2:
31:4f:b9:7e:75:d2:9b:72:c3:2b:67:67:a5:cf:3a:2f:14:ff:
ef:d8:f4:3a:10:d0:73:5e:2b:4b:87:e9:ec:da:40:47:a4:3b:
98:44:8e:21:72:fb:a1:cd:40:4a:c4:4c:eb:1c:29:cb:2a:fa:
58:41:ad:39:15:39:ed:5e:f5:a9:e7:8d:38:83:18:5f:f4:02:
d0:9d:36:54:66:1d:84:77:56:b4:54:d8:b8:18:61:8b:4e:96:
09:01:52:b7:d2:f0:a4:13:34:e3:66:b6:75:ee:14:b9:17:63:
26:0f:7a:e9:b7:c4:bb:58:67:90:29:ea:7b:61:42:f3:c2:2e:
c7:7b:e0:0b:05:02:0a:ee:55:5c:71:67:38:91:ec:da:03:3c:
4e:67:a7:3d:0f:df:7c:e5:bf:6e:2b:51:e0:3a:73:5e:80:55:
40:ff:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org