Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38382e3139302e302f32342d3234203d3e20313437303439.roa
File: 34352e38382e3139302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: D90osi85BFOXtEEe0kPmrqMpX6HGTu8IMK0x7wR4j/o=
Subject key identifier: A2:11:3E:A4:86:FC:B9:71:1B:E7:B3:15:6C:FC:FA:11:76:42:94:38
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 69EC3858683594CD4D3E17EF0FCF26216614F00A
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38382e3139302e302f32342d3234203d3e20313437303439.roa
Signing time: Sat 22 Oct 2022 04:33:30 +0000
ROA not before: Sat 22 Oct 2022 04:28:30 +0000
ROA not after: Sat 21 Oct 2023 04:33:30 +0000
asID: 147049
IP address blocks: 45.88.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ec:38:58:68:35:94:cd:4d:3e:17:ef:0f:cf:26:21:66:14:f0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:30 2022 GMT
Not After : Oct 21 04:33:30 2023 GMT
Subject: CN=A2113EA486FCB9711BE7B3156CFCFA1176429438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:92:78:3b:d5:2b:93:89:72:4f:bb:47:e8:
5d:a8:d6:ff:5d:77:78:24:be:b7:10:21:cf:28:17:
a8:55:77:32:f0:18:32:af:91:05:99:35:b4:ab:ac:
21:19:6e:86:79:ac:33:bc:ce:1d:6f:ed:91:1e:8c:
83:74:f5:6c:4c:09:e9:a9:d3:2f:e0:3f:30:96:2a:
b0:43:89:f2:0f:91:41:4a:95:d1:c9:c8:99:2c:c5:
73:32:7d:94:86:61:62:0c:02:2d:f8:a8:8d:ce:92:
2b:0e:c1:47:e8:7f:7c:2d:14:24:60:f1:77:2e:a2:
ed:fb:e3:3e:8a:03:56:30:c5:c3:ae:5a:f1:e4:4b:
dd:38:48:0d:b1:b3:8d:48:95:e0:9b:b9:46:7c:cd:
83:6f:fa:7b:fe:b3:ab:34:77:a7:3b:e9:a3:64:31:
78:11:9b:2b:0d:72:a5:44:04:3a:2d:99:37:b1:24:
8c:a5:e1:d8:96:4d:0b:c8:4a:7b:c5:6e:42:ee:fb:
e4:96:e9:db:f3:14:0e:db:77:7d:c5:ba:83:17:b5:
41:ca:01:f6:04:a2:77:58:d2:80:2d:60:ec:a4:5b:
ec:4a:fa:6e:f3:a3:a9:6e:c6:4f:0d:84:c9:4b:06:
c9:4a:55:d1:5d:ec:e1:06:36:d8:d6:5a:ac:bd:cc:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:11:3E:A4:86:FC:B9:71:1B:E7:B3:15:6C:FC:FA:11:76:42:94:38
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38382e3139302e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a9:52:5d:85:e7:c6:6a:99:05:10:ad:65:d5:ef:cc:b5:e4:
69:1e:c8:3e:3a:f3:bb:c9:04:97:77:2e:9f:0b:68:ec:47:41:
ad:ba:53:3f:6d:86:8c:99:22:3f:fa:e6:ab:51:34:d3:b6:17:
61:19:e2:2a:97:ca:79:a0:b3:64:1c:c4:be:ba:8e:5a:38:79:
5c:64:aa:25:b9:0a:44:3a:1d:03:59:dc:2d:e5:fa:aa:4a:d2:
de:d8:2d:80:db:b4:81:c3:03:27:8d:d8:e4:a2:e9:43:b2:ac:
7a:2f:15:62:78:72:49:2b:7c:84:d5:ce:59:b5:98:0f:2b:11:
23:38:e4:c2:c6:88:c0:2d:5e:5f:fb:71:4f:50:0a:cb:59:97:
d1:47:4c:74:d9:d3:3d:6b:19:64:da:19:c2:98:17:59:75:f0:
35:4e:45:2b:b4:67:5e:81:3b:0e:80:44:7d:1d:39:39:37:4f:
4a:76:c3:6d:6a:5c:8b:1a:0a:e3:c8:57:77:7d:b3:15:fe:ca:
c4:da:c3:6a:26:13:2f:51:54:4d:16:e6:48:8a:55:59:3d:9f:
04:77:46:0d:90:21:bf:21:80:8c:04:dc:3c:d3:2e:98:ef:54:
0b:6d:50:19:48:15:1f:3d:2b:07:ca:84:50:38:c6:4d:23:e6:
8b:d0:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org