Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20323037313337.roa
File: 38352e3230322e38312e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: WC/eijQ3HgdHsG9O9Ca2W89PRSRw2MtusSyaHLfGNIY=
Subject key identifier: 9D:27:F3:7A:22:2C:CA:05:52:BB:E9:7F:D9:96:81:53:16:26:90:5E
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 5082B4AD9A9ADFD1A21068F38DF36AA56B9C0850
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20323037313337.roa
Signing time: Tue 06 Dec 2022 09:51:10 +0000
ROA not before: Tue 06 Dec 2022 09:46:10 +0000
ROA not after: Tue 05 Dec 2023 09:51:10 +0000
asID: 207137
IP address blocks: 85.202.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:82:b4:ad:9a:9a:df:d1:a2:10:68:f3:8d:f3:6a:a5:6b:9c:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Dec 6 09:46:10 2022 GMT
Not After : Dec 5 09:51:10 2023 GMT
Subject: CN=9D27F37A222CCA0552BBE97FD99681531626905E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:56:b9:e5:39:bd:69:6d:1b:d7:c7:28:4d:
da:d0:42:c8:b8:d3:de:3d:50:cf:b4:23:f8:53:86:
b1:5a:e7:e9:75:fc:ed:44:4b:f3:f0:2c:d7:17:c3:
bd:79:81:0d:f2:8b:3a:0d:97:91:67:62:08:a3:84:
6b:2d:29:33:7a:51:8a:53:d6:be:d0:26:49:8e:74:
e1:cf:34:33:06:1a:65:0f:81:db:9b:9b:65:52:68:
a7:d3:8f:8b:2a:7f:96:02:30:8a:51:ed:6a:51:f3:
b4:6f:7d:35:b3:89:32:5e:30:ff:c7:df:51:6b:a6:
53:40:d0:6a:65:83:4b:8d:73:21:73:06:d6:15:72:
63:10:23:be:66:a3:b5:87:c7:58:cd:42:55:61:11:
c8:7d:93:21:87:b2:83:4f:f6:07:96:9b:7c:6e:af:
ae:3a:6e:d2:92:37:bd:8a:1e:75:b8:7c:d3:a6:d6:
22:09:de:4c:e3:89:b2:28:9b:3c:ed:62:42:d5:17:
5d:55:a7:4d:b3:49:34:8e:22:84:12:51:25:0d:01:
14:f5:76:12:33:f1:fb:91:33:a5:85:10:04:41:ae:
fb:4d:65:dd:bb:6b:83:41:20:68:53:d5:a0:bb:04:
24:76:7d:c6:72:2a:58:64:18:17:bd:0a:4e:d4:95:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:27:F3:7A:22:2C:CA:05:52:BB:E9:7F:D9:96:81:53:16:26:90:5E
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.81.0/24
Signature Algorithm: sha256WithRSAEncryption
64:23:60:0a:42:75:f6:86:dc:ab:0b:37:c2:6b:92:b0:d0:20:
2c:41:b0:c4:f3:b9:05:ad:e0:cd:cb:4a:d7:e5:13:c3:68:29:
f6:1f:d5:a5:a6:5b:03:67:b0:e8:74:46:f0:73:c3:df:e4:63:
dd:b1:e5:c0:63:8a:64:14:e7:78:2e:1b:ff:9e:18:48:53:14:
b6:ee:45:dc:30:12:4e:99:5c:d7:f8:00:d8:d6:88:17:91:51:
fc:18:f4:70:f1:a5:f4:e4:d3:82:d6:a9:9a:ed:02:18:5d:78:
57:73:ac:f2:51:45:ae:7d:71:fe:aa:d5:76:86:1d:1b:d8:d0:
a5:78:6e:17:74:b4:bc:08:57:b6:c2:58:49:37:77:98:17:17:
48:49:1d:9e:25:30:b2:95:06:dd:10:ef:f3:12:07:39:d4:29:
7b:b8:c2:e8:42:73:14:1f:9e:b0:79:0c:61:ef:8d:7e:b9:5c:
6f:31:fd:9e:f8:66:64:27:e6:4a:4d:26:f3:5d:76:f0:82:32:
bb:e6:34:63:a9:49:f8:1e:ee:c5:5d:09:83:f4:2d:54:eb:99:
b4:47:92:29:fe:5d:6c:13:4e:35:20:4f:e4:a7:9e:9d:c4:9c:
46:71:79:fa:b2:81:26:f8:ab:ec:ad:5e:62:66:6a:05:a2:b9:
19:32:08:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org