Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3135312e302f32342d3234203d3e203131383738.roa
File: 34352e382e3135312e302f32342d3234203d3e203131383738.roa (raw, json)
Hash identifier: TG5pRfsYRUxEfapWsEACqm3N/liq1Fwz9rsNRpeNucA=
Subject key identifier: D8:0A:EA:C6:A3:EF:B6:EB:CF:D8:15:32:49:87:C7:EB:20:22:F3:A0
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 7D7A1856E398D90BD9EB13492AC15093975ECE99
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3135312e302f32342d3234203d3e203131383738.roa
Signing time: Sat 22 Oct 2022 04:33:32 +0000
ROA not before: Sat 22 Oct 2022 04:28:32 +0000
ROA not after: Sat 21 Oct 2023 04:33:32 +0000
asID: 11878
IP address blocks: 45.8.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7a:18:56:e3:98:d9:0b:d9:eb:13:49:2a:c1:50:93:97:5e:ce:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:32 2022 GMT
Not After : Oct 21 04:33:32 2023 GMT
Subject: CN=D80AEAC6A3EFB6EBCFD815324987C7EB2022F3A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:33:64:12:cd:1f:42:e6:58:b5:76:30:d3:
c8:5c:f5:3c:7f:49:ba:9c:be:6b:8b:e0:fc:d5:f4:
ec:75:cb:1e:9d:8c:2c:90:64:45:d3:a8:39:58:0a:
d8:23:1c:ba:95:48:92:77:f4:0a:55:38:c8:c0:81:
06:91:60:7e:1b:74:b9:48:a9:61:a7:54:7a:81:34:
6b:7c:cf:19:1e:e3:35:11:68:79:c4:dd:5c:8c:1b:
df:57:3f:e2:1f:a4:3a:9d:df:84:7f:ce:7f:8d:59:
18:92:8b:75:18:0b:c7:d6:10:d1:f5:e6:d0:35:6e:
f2:26:6d:1b:b1:41:84:60:da:83:46:6c:ff:a4:95:
c3:1a:e1:dc:75:9d:25:6a:22:20:19:e6:ba:84:16:
ab:c9:99:20:7a:0e:ee:7a:dd:ea:8c:4d:25:6a:e8:
86:b0:a0:a4:d8:43:32:cb:e3:3d:f1:36:6c:df:4c:
84:03:1e:69:74:3a:80:d9:5f:83:09:6b:77:a3:cb:
36:2a:5a:b6:1a:1e:22:43:c9:18:57:45:68:0e:aa:
d0:93:96:ab:ef:0d:ee:08:65:e3:47:4f:a9:0d:a5:
82:cb:94:7a:a9:21:68:99:cc:94:cf:cd:ca:50:1f:
f2:39:b3:ff:40:92:de:f6:e0:71:9c:77:3d:da:b5:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0A:EA:C6:A3:EF:B6:EB:CF:D8:15:32:49:87:C7:EB:20:22:F3:A0
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3135312e302f32342d3234203d3e203131383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.151.0/24
Signature Algorithm: sha256WithRSAEncryption
29:25:57:c9:03:cd:1f:42:6d:b5:16:d6:99:81:b3:8b:d4:4e:
9c:3e:90:7b:40:f5:f0:b2:ae:36:a4:52:30:2d:9b:b8:1a:b9:
ea:65:38:00:28:b1:42:98:27:00:0f:4c:3c:ff:8a:bf:47:af:
95:e9:36:f2:f8:c4:20:54:33:3c:c6:32:1c:6b:cc:98:89:19:
a5:93:9f:e8:ed:14:7a:51:90:be:c9:be:1f:f4:6c:d1:5c:e1:
1f:4e:83:fb:21:73:30:3a:30:98:77:51:3f:bc:89:7b:16:9f:
7a:66:86:d2:ce:59:a7:48:72:55:84:69:e2:b7:b8:20:ef:3f:
68:26:65:79:09:18:38:b9:c2:d0:a4:c8:c0:d0:ca:2c:93:4d:
d8:89:3c:e4:71:9b:c5:86:48:62:1d:09:1f:00:27:5a:7d:65:
38:41:14:f1:33:72:8f:fa:2b:b4:58:d8:bb:99:21:03:29:a5:
c9:5d:2a:22:3b:2f:ef:83:63:b0:08:6b:1c:dc:6c:4f:2e:b8:
dd:08:02:7d:7d:93:ac:5a:3f:ba:d1:82:9e:1b:dd:49:56:84:
73:4e:d3:df:3a:d5:bd:eb:f9:97:fd:90:1f:cb:fa:69:01:ec:
51:84:ed:69:a1:23:5a:c8:32:23:47:f4:65:d7:08:c7:e4:cb:
09:e6:49:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org