Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138372e302f32342d3234203d3e203332373830.roa
File: 34352e3134302e3138372e302f32342d3234203d3e203332373830.roa (raw, json)
Hash identifier: 3ZexavLsnIk7KYSKWqU0bEfTUg1+Roh3ZHv/HUMWFCg=
Subject key identifier: 9C:C6:FC:4C:59:02:DB:82:49:F3:F1:7A:6E:A9:A9:1C:3B:3D:AC:92
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 6E33EF1D32D75A94F53613659E146BC90EAB68DA
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138372e302f32342d3234203d3e203332373830.roa
Signing time: Tue 21 Feb 2023 17:21:35 +0000
ROA not before: Tue 21 Feb 2023 17:16:35 +0000
ROA not after: Tue 20 Feb 2024 17:21:35 +0000
asID: 32780
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:33:ef:1d:32:d7:5a:94:f5:36:13:65:9e:14:6b:c9:0e:ab:68:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Feb 21 17:16:35 2023 GMT
Not After : Feb 20 17:21:35 2024 GMT
Subject: CN=9CC6FC4C5902DB8249F3F17A6EA9A91C3B3DAC92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:c4:66:05:bf:5c:f0:21:a4:71:6d:b3:1d:
e3:5d:88:0f:71:b7:44:18:be:77:57:f8:f9:54:aa:
68:18:b3:ad:77:17:2d:ce:09:4a:ff:1b:5f:33:05:
9f:c2:9c:4c:4e:64:88:df:b1:c3:2a:25:cf:02:19:
71:31:0f:81:38:34:b1:a3:c6:ed:85:3a:ea:79:cc:
21:ab:ba:71:0f:1b:38:4f:fe:38:79:14:15:7e:c8:
d0:58:de:aa:54:ad:97:aa:c8:88:a2:43:2e:70:09:
72:b9:d7:ae:4f:91:6a:60:bc:61:09:2b:8e:69:ab:
bd:87:50:56:f7:01:0e:1c:1b:b1:2f:0e:3e:6d:75:
31:45:0a:78:0c:89:1c:1c:bb:ab:b4:d5:53:75:15:
74:28:d2:8d:5a:f8:03:a5:e2:79:78:78:d6:61:c8:
27:36:25:a9:43:0f:4b:b4:19:5e:99:41:7a:6c:9c:
0c:e3:fd:6a:a7:ff:33:9e:64:18:0e:cd:6f:05:52:
68:82:09:15:1a:b4:e1:a7:6b:82:40:72:52:25:ab:
6b:4d:7a:5a:64:45:8c:f5:d6:4b:13:da:13:3d:94:
45:11:48:17:fb:b2:23:20:f5:fb:e4:25:85:8e:4d:
4a:d9:43:d9:9a:66:a3:79:fa:33:99:8e:e1:06:47:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C6:FC:4C:59:02:DB:82:49:F3:F1:7A:6E:A9:A9:1C:3B:3D:AC:92
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138372e302f32342d3234203d3e203332373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:bb:38:b6:75:4b:65:a2:9d:d4:24:09:15:d8:38:d8:81:04:
3f:3f:4c:96:41:61:5f:12:0a:47:82:6d:c0:b9:f2:70:7b:51:
5d:61:45:e0:1f:22:ed:57:24:ab:ef:6b:e2:aa:5e:37:d8:ce:
19:b3:02:51:e8:cd:b3:b9:b7:52:d0:ec:8e:88:68:bd:50:a2:
e5:4a:7f:14:da:2d:76:14:17:46:e8:cf:d2:fd:ff:8b:81:d3:
d3:15:ee:92:81:d4:2a:77:e4:f5:b4:c6:23:9b:c4:1a:2e:04:
aa:85:c9:1f:d3:af:bc:5e:36:c6:8f:29:99:a6:32:de:85:76:
be:3a:94:0e:bc:63:29:5b:67:c6:ab:83:47:0f:ef:83:2a:d0:
d0:52:eb:cd:d7:48:0f:ab:91:2f:49:16:84:9a:0a:1e:ed:71:
2e:5d:ad:ca:35:95:d1:51:c8:e5:65:f3:b9:c6:26:d2:a1:32:
98:76:b5:7a:fa:56:2d:05:82:1b:1c:19:49:55:49:40:b4:5c:
88:9f:5b:1e:68:92:b9:39:45:81:ef:10:51:76:21:be:44:c7:
65:fc:fc:1b:91:44:e9:8f:de:1b:5a:e1:ed:d0:fe:04:3c:25:
f0:fa:9f:6e:59:25:d6:96:3e:34:69:5d:29:68:b0:1d:36:80:
f3:a0:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org