Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e31332e3233322e302f32322d3234203d3e2030.roa
File: 34352e31332e3233322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: IFEjLLoMwvK9u5+InGRoZdj3BNplnNq4mmEduD1rk5I=
Subject key identifier: 90:F0:FF:FF:4B:6A:92:41:65:FD:14:25:0D:BE:9E:2E:B3:02:43:75
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 06013DFE5DADFAB9D46B8D09579F89B60AE0C1DC
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e31332e3233322e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:00:29 +0000
ROA not before: Fri 03 Mar 2023 15:55:29 +0000
ROA not after: Fri 01 Mar 2024 16:00:29 +0000
asID: 0
IP address blocks: 45.13.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:01:3d:fe:5d:ad:fa:b9:d4:6b:8d:09:57:9f:89:b6:0a:e0:c1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:55:29 2023 GMT
Not After : Mar 1 16:00:29 2024 GMT
Subject: CN=90F0FFFF4B6A924165FD14250DBE9E2EB3024375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:ae:8f:1b:31:bc:35:fe:ee:50:55:7d:fe:
a4:f6:32:68:77:8c:18:08:8a:8f:88:d3:fe:20:0c:
44:6a:d2:18:b4:5e:93:36:72:85:ca:e7:10:ea:1f:
13:3a:78:b9:91:04:36:b9:57:33:d8:3a:3e:b8:0b:
03:92:f7:bf:00:be:73:3a:7a:15:c0:45:59:83:df:
80:43:ec:fb:08:17:ab:b1:6e:74:e6:76:42:70:b7:
13:06:e6:6b:92:3e:d3:e6:1b:0f:3f:a1:79:6b:f9:
9c:88:2a:99:33:b7:92:c8:bb:c3:a3:7b:96:44:59:
0a:76:d4:8d:9a:47:9e:7d:4b:98:04:09:01:92:5c:
20:9c:35:54:5d:77:32:fe:c1:58:04:ec:75:f1:40:
cc:0e:84:42:e7:2b:d3:9f:94:c6:7d:c0:17:3d:f4:
1a:f2:28:9c:37:29:f8:a0:22:ab:57:23:21:d2:94:
9c:c5:c8:cb:9b:68:fd:ff:98:39:66:de:23:7b:a0:
89:78:c8:03:87:3a:85:4f:e3:7f:91:48:bc:ba:79:
69:b5:91:67:2d:4d:2b:80:c6:07:79:b4:05:4f:9a:
96:2d:f4:2c:ce:7a:af:93:f9:a6:c5:a5:1c:26:bc:
2b:fe:af:b6:7d:4b:b2:81:a2:ba:34:0d:4e:96:d6:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F0:FF:FF:4B:6A:92:41:65:FD:14:25:0D:BE:9E:2E:B3:02:43:75
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e31332e3233322e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.232.0/22
Signature Algorithm: sha256WithRSAEncryption
28:58:95:a2:e7:e7:d5:be:f2:ba:d1:7b:97:31:ae:05:15:f9:
97:fc:da:ef:b4:a7:c1:19:f1:ef:75:fe:58:e3:6b:a2:41:5f:
95:dc:a3:bd:71:1e:6d:58:1c:ca:3a:7b:81:b1:73:14:34:8b:
96:97:45:61:27:74:47:ac:50:88:13:7f:91:37:ba:ce:18:6f:
7f:b8:ea:fd:0f:b6:93:ed:78:96:92:0a:b5:f6:c8:02:b0:af:
8e:86:55:91:27:05:4a:8e:4b:79:12:6c:32:d0:95:6e:26:4e:
b3:df:d2:f5:71:ae:68:9f:c0:86:80:0e:26:1a:e0:8d:50:b2:
76:9c:f1:8c:29:b7:4f:19:a2:33:b1:60:19:19:c7:4a:74:40:
b4:1d:ba:2b:b7:60:a9:68:4b:11:55:68:d2:45:a3:98:0b:f8:
fa:f8:31:d7:0b:25:0b:97:7a:3f:83:97:e1:15:b4:04:02:2d:
e9:79:45:10:ab:31:37:c3:c2:6f:3c:30:09:a0:88:54:a3:85:
06:fb:70:9b:fa:55:fc:cc:18:bf:4f:fc:f9:33:62:e0:a4:bf:
cb:af:21:b8:9c:15:a2:67:d1:bf:31:6d:7d:43:82:b2:76:c4:
7b:0c:ae:b1:7c:4b:4a:6b:eb:07:67:9a:6a:b9:1f:f2:77:9f:
f5:50:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org