Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136392e302f32342d3332203d3e203531313637.roa
File: 3138352e3138372e3136392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: eqUybN+NQfBI8PsJ/eZaKePURkt5ExBFBB/8/ZB9gtQ=
Subject key identifier: 8C:42:BF:04:41:A1:36:54:E8:DF:9B:03:FF:4E:3E:70:6E:9C:12:D4
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0E1DB1D6F451ACFC8A91128E77B349A03C99C5D5
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136392e302f32342d3332203d3e203531313637.roa
Signing time: Sat 22 Oct 2022 04:34:28 +0000
ROA not before: Sat 22 Oct 2022 04:29:28 +0000
ROA not after: Sat 21 Oct 2023 04:34:28 +0000
asID: 51167
IP address blocks: 185.187.169.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1d:b1:d6:f4:51:ac:fc:8a:91:12:8e:77:b3:49:a0:3c:99:c5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:28 2022 GMT
Not After : Oct 21 04:34:28 2023 GMT
Subject: CN=8C42BF0441A13654E8DF9B03FF4E3E706E9C12D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:3e:88:ec:09:f1:5f:4a:ba:60:54:8a:e9:
ae:0d:71:28:1e:ca:be:7e:77:64:a5:0c:d9:2d:0f:
2b:75:c3:b2:45:b1:2c:05:32:27:e1:46:82:08:4c:
d6:76:6f:ef:e3:bb:b0:3f:be:36:50:ba:12:5f:7b:
62:90:b9:a9:e1:b9:e7:d3:54:79:83:3e:4a:9f:56:
30:d2:9d:30:3f:aa:cb:81:24:cd:0b:94:e6:aa:68:
9c:79:6e:94:a7:10:e5:37:69:4e:5b:12:fc:6a:ae:
76:07:47:30:e1:e2:62:0d:31:0b:c0:5d:c9:5e:00:
01:01:d7:17:52:b7:e9:1e:71:d5:55:91:da:ae:28:
9a:f2:8c:65:8b:0f:6b:68:c8:80:1d:69:11:09:51:
c4:0b:46:55:37:9a:66:44:73:86:2b:46:fc:e2:40:
6d:12:a7:50:1c:53:99:44:2e:52:de:8c:ee:7c:30:
77:82:2f:80:5d:3f:92:79:07:58:5f:3e:44:6e:cf:
07:7f:8f:3b:d0:f4:10:56:c7:24:95:21:0b:28:fe:
9a:b0:0f:be:7e:03:1d:22:07:28:b1:f6:7a:a6:95:
29:81:bb:fc:bc:16:37:a3:6c:46:40:3c:6e:c2:13:
93:36:82:1f:a1:63:93:44:72:96:b9:43:6f:e2:70:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:BF:04:41:A1:36:54:E8:DF:9B:03:FF:4E:3E:70:6E:9C:12:D4
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.169.0/24
Signature Algorithm: sha256WithRSAEncryption
14:73:3b:92:24:ec:fb:8f:93:9d:9c:d3:12:67:98:5f:7a:62:
a0:9b:18:0c:96:27:69:93:39:33:72:c0:5e:08:50:b5:48:98:
6b:a5:7f:f1:67:1e:b7:20:e3:6f:69:88:82:e6:ca:3f:ab:b8:
ba:90:23:0a:15:27:f9:4c:8f:1e:92:e0:b5:a8:2d:7d:91:ba:
ff:13:1c:38:f8:d8:35:1a:73:7f:36:ec:29:69:9c:f5:44:d5:
26:61:a5:90:0b:8e:13:01:81:ec:48:e4:5e:82:4f:11:04:5f:
23:6b:b5:c3:d1:07:0e:cd:33:e9:c3:7f:80:25:a5:cf:0b:6e:
5a:4a:99:34:02:8f:3d:d5:51:e4:64:b4:c5:6a:55:f9:d6:dd:
c2:ae:11:1b:e2:2c:70:d0:38:06:1f:90:0a:c1:72:0d:03:08:
5d:37:91:cc:3c:e7:c0:d9:11:4c:ab:99:0e:e3:26:21:14:28:
66:ec:92:65:54:b5:c2:2b:3e:7e:f0:7e:19:57:bc:5a:13:67:
7c:2a:8b:04:98:81:c8:d9:0c:31:9e:81:89:d8:60:dc:cf:23:
de:1f:1f:28:16:87:e1:e4:97:10:24:13:09:98:79:83:75:80:
55:8b:3c:c4:19:71:c6:2a:b8:11:2d:8a:6e:ef:72:5c:6a:ef:
98:bb:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:08:10 2025 by rpki-client