Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230302e302f32342d3234203d3e20323033303631.roa
File: 38332e3137312e3230302e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier: 7O4gSgynOzZj1CLdNCzaHn6AKkJitBIUhhzecOp9bvs=
Subject key identifier: 3B:C8:81:5E:1C:03:26:73:8F:62:C2:D9:CE:BF:67:26:91:E3:CC:95
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 05DF66ED6DD2165437C0EEC901D96784F5BEA057
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230302e302f32342d3234203d3e20323033303631.roa
Signing time: Sat 22 Oct 2022 04:33:36 +0000
ROA not before: Sat 22 Oct 2022 04:28:36 +0000
ROA not after: Sat 21 Oct 2023 04:33:36 +0000
asID: 203061
IP address blocks: 83.171.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:df:66:ed:6d:d2:16:54:37:c0:ee:c9:01:d9:67:84:f5:be:a0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:36 2022 GMT
Not After : Oct 21 04:33:36 2023 GMT
Subject: CN=3BC8815E1C0326738F62C2D9CEBF672691E3CC95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:d3:85:f8:74:a1:65:10:a7:f3:22:03:d3:
70:79:f2:88:28:fe:84:43:24:5f:ee:ef:bc:a7:ea:
91:d5:91:ab:f1:68:40:eb:e2:93:c3:33:2a:9f:ef:
cc:8a:4e:df:44:0a:e8:18:a8:6b:11:14:d1:28:19:
6e:24:e1:9a:2f:45:c9:7c:5f:5d:c8:15:0d:67:3a:
92:1c:32:3e:2a:dc:42:35:7d:cf:ef:88:0d:1d:1c:
15:63:71:47:dd:6c:19:a0:95:bc:ae:eb:14:ee:4d:
df:6d:9b:00:ca:0b:62:7e:02:c7:fc:4e:72:d2:e6:
fe:de:9d:d8:c2:52:e0:2a:c5:62:4e:72:65:d1:6c:
69:14:16:1d:ad:a3:58:7b:c9:0d:b6:ec:93:0f:8e:
c9:41:c1:98:a6:17:33:2a:a0:15:81:50:4a:3f:14:
b6:a1:de:6a:7c:35:9b:be:12:a1:8c:b3:14:d6:be:
ec:c7:ed:b4:66:b8:af:94:ee:0f:84:d4:bb:ec:35:
dd:38:83:90:5e:2a:08:b6:66:25:d2:9a:e4:0c:3f:
e5:da:56:05:82:41:fb:7a:2d:a7:c3:0f:d5:58:51:
0b:35:05:05:0a:12:08:f4:77:be:cd:e0:70:15:c1:
3f:34:72:9b:49:52:3a:db:ad:30:ba:b8:9d:50:1e:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C8:81:5E:1C:03:26:73:8F:62:C2:D9:CE:BF:67:26:91:E3:CC:95
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/38332e3137312e3230302e302f32342d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5f:c3:27:d6:33:30:87:a6:78:ab:93:6f:fe:17:4b:37:61:
ba:f7:da:27:2c:0d:50:93:3a:c3:46:71:6d:0a:02:6c:71:8c:
b6:00:9e:5f:99:62:dc:b3:15:2d:27:e8:f3:73:e7:f7:2f:2d:
1f:5a:d0:80:c9:ad:d9:5b:f5:02:20:8b:b0:be:30:d9:18:31:
16:b1:99:b1:87:1b:a6:38:3f:f3:5e:92:99:f5:43:0c:23:6b:
44:ff:fe:4c:fd:91:14:8c:b7:0e:29:15:7c:a5:7f:90:c8:f5:
70:b2:87:a0:c7:fd:90:77:ba:ca:03:39:32:3c:6f:a4:ec:bf:
74:86:db:bc:bb:f9:08:e4:5c:67:7b:08:08:24:83:f8:2d:74:
7d:b3:3a:43:53:4e:20:ed:88:db:fe:6c:3c:e9:93:d4:ae:cf:
84:95:46:5a:44:11:18:66:7b:80:10:1b:c8:8b:8d:ac:b8:90:
90:55:b5:aa:d7:78:e1:b5:0a:f3:46:8a:8a:f8:8f:56:8f:05:
d8:8c:52:10:f4:b4:f6:6d:54:76:78:ae:f2:96:34:58:37:ae:
22:25:70:87:34:0b:de:63:8d:a9:26:19:2e:ad:7f:34:64:4d:
1e:6a:59:b2:8c:5a:55:bb:bd:4e:d4:48:4d:04:07:9d:61:80:
d0:e7:56:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org