Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232332e302f32342d3234203d3e203437353833.roa
File: 34352e39302e3232332e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: yaVihu1LErJqChrzCqmBF4wCTSYoamMeMQoREPqlmpY=
Subject key identifier: 4A:03:33:72:8E:B5:49:C8:32:36:AA:43:DC:DB:96:81:3B:98:79:4F
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 50B3D65A703A7076971B94EEACDAA6BBDA6F693A
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232332e302f32342d3234203d3e203437353833.roa
Signing time: Sat 22 Oct 2022 04:33:35 +0000
ROA not before: Sat 22 Oct 2022 04:28:35 +0000
ROA not after: Sat 21 Oct 2023 04:33:35 +0000
asID: 47583
IP address blocks: 45.90.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b3:d6:5a:70:3a:70:76:97:1b:94:ee:ac:da:a6:bb:da:6f:69:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:35 2022 GMT
Not After : Oct 21 04:33:35 2023 GMT
Subject: CN=4A0333728EB549C83236AA43DCDB96813B98794F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:b0:0f:28:a9:8f:a1:54:d4:21:39:b1:73:
ce:38:a6:98:9a:95:45:15:30:ea:5d:79:51:51:36:
44:9c:a8:8d:b2:72:a2:8a:cd:4b:2b:e6:68:67:69:
26:04:1c:97:4b:23:cc:c5:50:c3:66:40:15:2f:9e:
4b:10:5e:be:fd:60:74:43:f9:40:7f:73:2f:73:e8:
af:a8:fb:ef:4b:ec:b2:fd:ce:8e:0b:03:00:8a:0f:
39:03:76:a3:ce:8f:c4:76:0d:25:f4:fd:44:53:f7:
0e:60:a5:c1:0a:f7:2e:23:cf:36:6b:22:9f:9d:4e:
31:7c:fb:de:dd:f3:b0:41:f5:7a:03:25:1f:f0:ae:
62:e9:fa:51:ad:e4:f9:64:4d:36:3f:ac:91:fb:64:
f4:5d:60:7a:99:06:66:25:14:59:e2:a6:cf:c2:81:
fb:97:2c:fa:52:29:3a:d2:72:3a:99:d8:b6:c7:69:
13:48:2a:61:ee:54:2b:cf:4e:78:f3:49:51:31:93:
8b:18:70:b0:39:db:6b:5e:7f:1b:a9:b7:17:e7:af:
36:bd:e1:5f:c2:02:c6:60:b9:6b:aa:32:47:22:b3:
ef:09:24:4b:05:ed:5b:5e:d5:61:e0:a7:c9:ed:51:
13:26:1a:92:52:28:9d:37:11:82:a5:ac:6f:b5:80:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:03:33:72:8E:B5:49:C8:32:36:AA:43:DC:DB:96:81:3B:98:79:4F
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232332e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.223.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1f:e4:6c:e5:33:49:d5:70:31:72:cb:12:57:d1:96:87:a0:
27:bd:78:67:89:0d:38:8d:22:a6:c6:ff:04:a7:bf:63:9a:d3:
0c:77:91:bb:fd:ea:ec:c4:09:c8:c2:77:ac:7e:e3:10:b9:c5:
54:94:60:7c:4a:11:ad:a1:cc:1b:d9:ea:c4:cb:50:de:f4:b4:
c6:ea:4d:2f:9c:e1:b9:ad:bf:19:4c:ef:93:9a:71:84:40:cf:
64:e6:54:4e:a1:7b:f7:52:8f:d1:63:cd:b0:14:c5:a9:8f:ea:
19:7a:10:f3:0c:59:d6:00:98:ab:41:24:59:4d:92:e5:cc:e7:
13:4a:47:56:5c:1a:39:fb:49:91:ef:3d:a4:77:32:fa:6b:84:
6f:29:09:e1:11:96:f8:41:3b:34:45:d8:85:a7:5d:2b:e2:f4:
b4:e8:d9:30:b7:ca:69:08:7d:4f:13:93:d0:66:80:4c:d2:7b:
d9:bd:81:15:9d:cf:25:41:ce:58:26:4b:fd:a7:c7:72:87:b6:
ab:26:ce:5d:f9:a7:34:29:e6:ea:b0:18:aa:3f:2e:e1:88:1e:
21:94:52:91:fa:dc:1a:c0:39:5d:f7:e9:7a:2b:6a:90:47:2c:
21:b6:31:36:a5:50:f0:f2:0e:d9:1a:38:8f:4c:05:8f:46:f4:
dc:11:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org