Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232322e302f32342d3234203d3e203631333137.roa
File: 34352e36372e3232322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: kL84Aj43h/mtMwX63jUcMlJQeYxuNK0Q3PATcpXfMUQ=
Subject key identifier: 08:4C:BD:C3:65:A2:F2:B7:D1:A2:1D:AA:25:1E:95:84:0A:7F:25:46
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 3B8012C142555053383690BAF4A1FC6602A12041
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232322e302f32342d3234203d3e203631333137.roa
Signing time: Sat 22 Oct 2022 04:33:27 +0000
ROA not before: Sat 22 Oct 2022 04:28:27 +0000
ROA not after: Sat 21 Oct 2023 04:33:27 +0000
asID: 61317
IP address blocks: 45.67.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:80:12:c1:42:55:50:53:38:36:90:ba:f4:a1:fc:66:02:a1:20:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:27 2022 GMT
Not After : Oct 21 04:33:27 2023 GMT
Subject: CN=084CBDC365A2F2B7D1A21DAA251E95840A7F2546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:3a:1c:23:22:93:a5:44:6f:ae:2e:9d:de:
e3:e2:46:10:1f:43:49:8a:20:50:bc:b9:5c:95:7c:
1a:f6:af:79:66:f0:4d:51:88:d1:db:98:32:be:06:
05:4e:4a:00:8b:d9:d2:0c:db:a9:12:b7:95:c8:26:
55:1c:e5:b0:55:8c:fd:ba:96:8d:d2:42:61:5d:cc:
1f:98:73:52:07:f6:7e:b7:30:0c:8c:24:e4:9a:75:
88:c1:08:81:21:e7:63:0c:3c:63:8f:a5:a6:fa:d5:
df:b3:88:0a:b5:53:14:4a:c9:44:38:43:b0:65:1f:
e4:fe:2d:e5:d1:7e:76:5b:eb:b0:a4:c7:57:06:04:
92:f2:7a:5a:88:d6:71:05:51:34:73:f7:0a:7a:9c:
5d:e9:92:38:a5:ba:83:31:5b:fd:48:74:1b:fe:e9:
2b:9f:b8:11:57:59:3f:25:21:ba:80:f4:34:9f:7b:
8b:a8:75:d7:31:0c:47:ec:8b:9c:4f:ba:14:e7:70:
ee:d2:09:60:7f:94:b0:0e:4a:a1:3b:16:c9:87:aa:
45:f7:5b:60:ec:d4:2f:a3:87:e2:6f:65:7c:ae:47:
b6:24:c5:9e:be:77:20:2d:82:da:0b:60:2d:ba:c4:
f2:d6:1b:bd:75:a7:d3:24:f7:8c:4d:74:71:f4:4e:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4C:BD:C3:65:A2:F2:B7:D1:A2:1D:AA:25:1E:95:84:0A:7F:25:46
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.222.0/24
Signature Algorithm: sha256WithRSAEncryption
22:21:49:6f:b4:2a:7b:02:2f:a5:e0:c3:de:16:c3:4a:21:68:
35:0e:f7:60:e9:90:64:82:ef:27:91:62:60:c7:98:08:eb:df:
bb:33:bc:37:a4:80:06:ce:74:44:7a:79:5d:dd:e1:0a:44:16:
a4:82:31:6d:cf:6e:01:9c:e3:29:78:48:59:54:d1:c8:df:61:
31:95:cd:08:72:05:b4:f9:19:fd:96:ed:39:aa:3b:6a:7c:e5:
43:1b:47:fa:9a:ea:1f:86:1f:00:68:99:65:5a:62:e5:17:ee:
c9:99:bf:a2:2f:59:1a:ef:58:17:fd:0d:de:21:93:fc:84:9d:
36:b7:a2:63:79:d6:d8:fe:f6:eb:77:61:b0:46:81:6a:87:36:
85:2a:82:56:aa:ce:30:d1:d4:fd:de:01:b8:a8:c5:c6:56:08:
90:1d:f4:10:87:42:98:d1:8e:95:78:4b:79:c4:57:af:d5:6e:
8d:f6:24:95:79:92:bc:22:a9:6a:2a:a6:7d:8d:75:f8:17:81:
f6:e7:70:99:b5:ea:ff:18:aa:00:cd:62:9e:aa:aa:10:85:be:
40:fb:c5:2e:7d:73:69:68:79:80:18:24:be:cb:22:e1:8f:10:
e5:00:b0:48:b7:cd:2c:3a:38:74:01:48:2c:07:e4:82:96:d2:
93:4e:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org