Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3134372e3137322e302f32322d3234203d3e2030.roa
File: 34352e3134372e3137322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: dkdrBIDy/uzAC7dpyRayPeNVHNFDLNSvH8mm0KWmgOk=
Subject key identifier: 35:60:43:0A:4E:57:E5:D2:1F:C3:79:D7:03:59:BB:B7:01:44:19:6A
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 34C8448E25BA35690473FB231C4047C3F704667E
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134372e3137322e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:53:34 +0000
ROA not before: Fri 03 Mar 2023 15:48:34 +0000
ROA not after: Fri 01 Mar 2024 15:53:34 +0000
asID: 0
IP address blocks: 45.147.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c8:44:8e:25:ba:35:69:04:73:fb:23:1c:40:47:c3:f7:04:66:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Mar 3 15:48:34 2023 GMT
Not After : Mar 1 15:53:34 2024 GMT
Subject: CN=3560430A4E57E5D21FC379D70359BBB70144196A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:a9:03:c4:af:bc:08:f4:2e:73:c9:ad:71:
07:67:ed:5f:ba:01:7a:d9:3d:b5:c4:1c:08:ff:37:
aa:de:ab:3f:4c:44:eb:c0:06:f4:19:d9:f6:bf:43:
2a:dc:4c:6a:a8:50:31:e5:85:3c:55:e7:80:fa:ec:
92:be:30:83:69:f2:a0:f4:1a:61:a6:fe:38:b4:f5:
00:a1:25:e9:97:10:83:93:d0:9a:47:cd:8d:8b:30:
32:a9:ce:8a:62:7c:a1:8f:44:f8:d1:32:0e:4b:1a:
4b:17:94:04:1f:28:fa:92:f9:c6:96:56:c8:c4:b6:
7d:f9:82:13:18:98:63:54:59:4f:b8:72:a8:cc:19:
0b:05:a5:9f:29:89:bf:5e:f9:39:09:34:ad:6d:a4:
d1:fb:12:9c:bd:7e:26:b4:8a:95:51:5f:4f:93:b3:
45:c8:5b:9e:2c:8e:1f:87:76:08:c1:72:35:f6:7d:
07:19:1f:22:2a:27:7b:cd:f8:24:b1:55:9d:15:ef:
7f:a3:37:a7:10:9d:ab:d2:42:1c:3b:f2:4f:93:b0:
38:18:4f:a4:bf:0c:85:74:29:ed:ab:26:2a:f7:96:
cb:e3:c4:80:60:24:44:c6:15:4a:04:39:b2:99:a4:
38:f5:0c:2f:ee:a4:3c:de:66:86:96:74:df:8a:7a:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:60:43:0A:4E:57:E5:D2:1F:C3:79:D7:03:59:BB:B7:01:44:19:6A
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134372e3137322e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.172.0/22
Signature Algorithm: sha256WithRSAEncryption
44:3e:97:d2:9b:69:a2:75:78:9e:79:50:0a:7d:d8:e1:aa:d8:
dc:dc:34:69:7e:c5:e0:e9:56:8b:5b:37:c7:74:7a:0a:b7:41:
ec:4d:25:10:f4:02:e4:95:60:1d:b7:0a:ec:d7:e4:ac:d6:58:
25:b9:df:8d:6e:98:e2:8f:34:fa:fa:8d:e3:1f:de:44:1c:56:
6d:db:44:b0:f9:42:3d:fd:85:c5:53:7d:e9:e7:7a:21:90:aa:
f2:19:bb:ee:3a:8a:c5:f4:3a:30:b6:1a:18:85:09:4f:5b:fd:
c8:e4:d7:62:17:b8:ed:8b:01:78:8d:63:24:cb:92:63:dc:c3:
b6:a6:93:a7:ab:60:72:e6:5e:8b:17:25:8d:a8:d5:8c:59:11:
02:fc:21:52:3b:00:b1:dd:1d:c6:17:c1:58:02:1e:76:40:4b:
6f:1a:af:58:6b:6e:fe:cc:b4:f1:aa:36:cd:3a:08:bb:9f:8c:
83:23:84:0c:b3:b8:7c:1a:8b:89:cb:26:bc:6d:13:0d:0b:da:
33:c6:2e:41:ae:da:9c:52:09:53:b8:d4:f5:d2:e1:ed:80:5f:
32:ff:37:bc:40:25:2b:1f:7f:1d:60:ea:67:9f:a1:9a:da:c6:
13:13:67:61:d4:d4:4c:99:fc:7c:77:03:76:d4:44:c3:7a:c2:
2e:28:01:90
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUNMhEjiW6NWkEc/sjHEBHw/cEZn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMzAzMDMxNTQ4MzRaFw0yNDAzMDExNTUzMzRaMDMxMTAvBgNV
BAMTKDM1NjA0MzBBNEU1N0U1RDIxRkMzNzlENzAzNTlCQkI3MDE0NDE5NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSeKkDxK+8CPQuc8mtcQdn7V+6
AXrZPbXEHAj/N6reqz9MROvABvQZ2fa/QyrcTGqoUDHlhTxV54D67JK+MINp8qD0
GmGm/ji09QChJemXEIOT0JpHzY2LMDKpzopifKGPRPjRMg5LGksXlAQfKPqS+caW
VsjEtn35ghMYmGNUWU+4cqjMGQsFpZ8pib9e+TkJNK1tpNH7Epy9fia0ipVRX0+T
s0XIW54sjh+HdgjBcjX2fQcZHyIqJ3vN+CSxVZ0V73+jN6cQnavSQhw78k+TsDgY
T6S/DIV0Ke2rJir3lsvjxIBgJETGFUoEObKZpDj1DC/upDzeZoaWdN+Keg8ZAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUNWBDCk5X5dIfw3nXA1m7twFEGWowHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTM0MzcyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLZOsMA0GCSqGSIb3DQEBCwUAA4IBAQBEPpfSm2midXieeVAK
fdjhqtjc3DRpfsXg6VaLWzfHdHoKt0HsTSUQ9ALklWAdtwrs1+Ss1lglud+Nbpji
jzT6+o3jH95EHFZt20Sw+UI9/YXFU33p53ohkKryGbvuOorF9DowthoYhQlPW/3I
5NdiF7jtiwF4jWMky5Jj3MO2ppOnq2By5l6LFyWNqNWMWREC/CFSOwCx3R3GF8FY
Ah52QEtvGq9Ya27+zLTxqjbNOgi7n4yDI4QMs7h8GouJyya8bRMNC9ozxi5Brtqc
UglTuNT10uHtgF8y/ze8QCUrH38dYOpnn6Ga2sYTE2dh1NRMmfx8dwN21ETDesIu
KAGQ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org