Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/352e3138322e31362e302f32342d3234203d3e20313336373837.roa
File: 352e3138322e31362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 3m0ESxiXJzVjgkOrCWUQC1VJfTTkZWmQwGkJ5nK58CM=
Subject key identifier: 38:F9:F4:2B:E8:19:4B:8A:E1:F4:28:71:D7:DA:A2:CB:02:ED:C8:81
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 47F69BBA0A31BDFF63D8EBAA5483EDACF93552DC
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138322e31362e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 07 Nov 2022 11:19:47 +0000
ROA not before: Mon 07 Nov 2022 11:14:47 +0000
ROA not after: Mon 06 Nov 2023 11:19:47 +0000
asID: 136787
IP address blocks: 5.182.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f6:9b:ba:0a:31:bd:ff:63:d8:eb:aa:54:83:ed:ac:f9:35:52:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Nov 7 11:14:47 2022 GMT
Not After : Nov 6 11:19:47 2023 GMT
Subject: CN=38F9F42BE8194B8AE1F42871D7DAA2CB02EDC881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:db:b0:c4:66:30:25:c1:22:ed:04:fc:f5:
2c:3f:f0:21:32:1c:25:08:c3:b8:a0:e2:5b:17:51:
6d:d7:92:38:9f:33:58:3e:9f:6c:42:a3:b5:59:cc:
a1:f2:90:dd:b6:70:15:46:1b:8b:f1:ee:2d:ce:53:
99:bc:16:75:ef:81:d8:36:1b:39:9f:ec:8f:c1:c6:
65:43:69:97:16:0c:7e:6d:b6:83:52:3b:93:98:ee:
e9:04:f6:47:0e:4d:a2:ad:ae:cd:a1:57:7b:22:5c:
85:5d:f9:6b:d3:89:a3:02:6d:b3:8c:87:2f:8b:70:
2e:11:54:3a:3b:a3:24:48:c0:3b:cc:01:be:9f:59:
df:ec:76:0c:bd:47:85:fb:e7:a2:c2:5e:f6:22:15:
8e:9e:bd:12:a6:a4:1f:df:32:2e:ff:56:30:92:5f:
a6:ea:17:93:56:5e:fb:af:bd:e4:7d:b2:88:79:85:
02:1f:12:52:0c:53:af:de:c4:67:b5:dd:47:a7:ac:
e0:54:a2:8c:e7:ed:04:18:89:04:00:76:57:31:ad:
46:22:30:db:a1:8b:2d:f6:90:fe:3f:3b:83:45:66:
03:ee:c0:1c:8b:73:a3:d9:92:da:c8:14:ce:58:41:
58:b3:84:df:4c:6d:cd:98:6f:98:9f:8f:e4:12:f7:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F9:F4:2B:E8:19:4B:8A:E1:F4:28:71:D7:DA:A2:CB:02:ED:C8:81
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138322e31362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:72:2b:b9:51:a4:bb:09:d4:fa:d9:66:90:26:58:6f:cc:dd:
67:80:ac:7d:5a:d5:b3:76:62:2a:93:13:c2:f9:c9:49:3f:b7:
f6:ee:6b:68:5c:75:7a:5b:9e:55:60:a5:fb:f9:a6:fe:fc:47:
10:c7:fa:82:bf:23:37:0b:77:96:31:7b:7d:b2:b7:e9:9c:dd:
00:fa:06:0f:b3:b8:f9:cc:ea:cc:51:8d:f8:5b:df:5f:95:9e:
0e:10:32:a7:fd:42:92:a7:06:67:18:b0:80:a1:b8:a8:d1:e5:
82:cb:be:50:db:91:76:f4:2e:8a:d9:95:d6:f8:9d:5a:f2:3c:
12:bc:dd:e3:0c:c0:71:02:a6:6e:f3:dc:63:1a:39:bb:b4:fc:
7b:db:10:21:cb:96:b8:9b:55:bc:08:53:41:82:55:45:a1:6b:
f5:f0:fc:28:92:b5:b9:da:a5:6e:bb:15:f3:ad:98:a2:04:fb:
f9:e7:31:df:c0:d2:1e:94:ca:04:96:52:86:7f:c3:53:a4:7c:
10:89:b5:d4:ec:65:2e:b2:72:33:07:86:e1:29:98:be:f2:88:
80:c2:bd:1b:da:4b:5f:a4:95:9a:3f:56:7c:2a:7b:fd:01:59:
1e:a0:a2:ef:61:42:94:c7:ce:11:50:97:44:e2:0d:f5:51:81:
f5:5e:4d:92
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUR/abugoxvf9j2OuqVIPtrPk1UtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjExMDcxMTE0NDdaFw0yMzExMDYxMTE5NDdaMDMxMTAvBgNV
BAMTKDM4RjlGNDJCRTgxOTRCOEFFMUY0Mjg3MUQ3REFBMkNCMDJFREM4ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSNuwxGYwJcEi7QT89Sw/8CEy
HCUIw7ig4lsXUW3XkjifM1g+n2xCo7VZzKHykN22cBVGG4vx7i3OU5m8FnXvgdg2
Gzmf7I/BxmVDaZcWDH5ttoNSO5OY7ukE9kcOTaKtrs2hV3siXIVd+WvTiaMCbbOM
hy+LcC4RVDo7oyRIwDvMAb6fWd/sdgy9R4X756LCXvYiFY6evRKmpB/fMi7/VjCS
X6bqF5NWXvuvveR9soh5hQIfElIMU6/exGe13UenrOBUoozn7QQYiQQAdlcxrUYi
MNuhiy32kP4/O4NFZgPuwByLc6PZktrIFM5YQVizhN9Mbc2Yb5ifj+QS9/HtAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUOPn0K+gZS4rh9Chx19qiywLtyIEwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNTJlMzEzODMyMmUzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2
MzczODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQABbYQMA0GCSqGSIb3DQEBCwUAA4IBAQBsciu5UaS7
CdT62WaQJlhvzN1ngKx9WtWzdmIqkxPC+clJP7f27mtoXHV6W55VYKX7+ab+/EcQ
x/qCvyM3C3eWMXt9srfpnN0A+gYPs7j5zOrMUY34W99flZ4OEDKn/UKSpwZnGLCA
obio0eWCy75Q25F29C6K2ZXW+J1a8jwSvN3jDMBxAqZu89xjGjm7tPx72xAhy5a4
m1W8CFNBglVFoWv18PwokrW52qVuuxXzrZiiBPv55zHfwNIelMoEllKGf8NTpHwQ
ibXU7GUusnIzB4bhKZi+8oiAwr0b2ktfpJWaP1Z8Knv9AVkeoKLvYUKUx84RUJdE
4g31UYH1Xk2S
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org