Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e312e302f32342d3234203d3e2030.roa
File: 3138352e3136392e312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: vCVUWEuxA3k5VvhKE/u9EE0VqfXv19HJXSdLRRGf0bY=
Subject key identifier: 80:41:A2:D7:94:EC:81:13:36:82:CA:88:A7:DF:D4:E9:0A:10:C9:1B
Certificate issuer: /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial: 43B75E3C8072E2A3E15F87D4924244CCCB820C0B
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e312e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:32:37 +0000
ROA not before: Fri 03 Mar 2023 15:27:37 +0000
ROA not after: Fri 01 Mar 2024 15:32:37 +0000
asID: 0
IP address blocks: 185.169.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b7:5e:3c:80:72:e2:a3:e1:5f:87:d4:92:42:44:cc:cb:82:0c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
Validity
Not Before: Mar 3 15:27:37 2023 GMT
Not After : Mar 1 15:32:37 2024 GMT
Subject: CN=8041A2D794EC81133682CA88A7DFD4E90A10C91B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:a8:79:ae:4b:0f:15:9a:b2:29:21:63:1b:
56:06:68:6f:4d:47:f5:06:96:2c:7e:97:c5:bd:c1:
a4:26:7f:6a:06:6a:9b:1b:11:6e:b1:f1:87:66:bc:
1d:21:47:5b:91:b8:6c:2f:5d:ad:36:62:1f:41:8e:
6e:8a:05:d2:8f:51:4d:e0:4d:20:5b:82:2a:ae:45:
06:24:be:11:3d:ad:2e:ac:13:7a:31:9b:cb:ee:a3:
e2:95:b2:79:7f:76:6a:46:92:34:5c:57:db:97:cb:
61:cd:e4:81:09:ce:a4:29:65:c3:39:5e:44:7e:21:
15:e5:9a:ac:81:89:6e:16:64:43:ec:2e:89:ef:84:
cb:57:33:75:27:8d:35:27:b5:1c:e9:ba:e7:3e:a2:
21:27:c6:9b:71:7b:79:2b:57:c1:48:6a:f2:43:d9:
9c:81:d9:eb:8e:64:71:81:18:6d:4e:65:fa:7e:3b:
77:ba:71:b7:1b:b2:4d:a7:1c:88:88:a3:71:62:38:
1a:9f:d2:8c:23:3a:0f:6b:79:d3:c3:76:64:be:ab:
bb:3b:61:a4:e6:58:7e:02:88:12:d9:03:43:c1:69:
29:0f:c9:64:dc:77:df:02:cf:12:bc:c5:c6:7d:16:
e8:17:b9:f3:77:e8:20:04:24:29:19:29:25:a0:48:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:A2:D7:94:EC:81:13:36:82:CA:88:A7:DF:D4:E9:0A:10:C9:1B
X509v3 Authority Key Identifier:
keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.1.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:2a:5e:95:9a:0f:88:7e:35:3f:4d:9f:ca:6f:3d:9a:f9:50:
2b:21:3f:32:7b:05:56:0c:2f:23:29:c9:15:f7:db:ea:c0:9d:
af:86:4a:d0:d0:8b:a4:e5:74:79:91:a7:b8:25:37:70:b8:d8:
98:66:5c:43:c3:19:c4:3f:38:37:26:a4:5a:60:ad:7d:f5:38:
65:51:d4:4f:31:92:f8:1b:83:2d:54:17:af:e8:53:b4:d6:26:
a3:49:9a:c3:41:da:4a:f5:9c:ec:1e:56:50:a6:6e:e9:af:f2:
bf:09:e4:7f:f9:80:c6:c4:c1:bd:3c:90:a1:fc:94:29:5a:ca:
a8:c3:09:b0:fd:03:0c:72:52:c6:f3:3d:0b:a7:1b:84:d0:5c:
51:f4:56:29:07:43:59:2a:88:ba:b7:0e:6c:79:e3:fa:5c:f7:
f6:67:e5:e5:0e:2e:cf:06:77:00:4b:f0:08:d7:e2:6f:72:fa:
a4:8c:92:6f:94:b4:96:00:d3:5d:77:bf:69:a8:31:ef:8f:9a:
df:54:0c:cd:25:09:66:87:cf:46:21:3e:58:51:ff:d6:85:3a:
52:8c:02:42:7b:ab:c8:4f:09:e5:76:3b:15:62:5b:bb:d6:d0:
f5:77:06:6e:f9:0e:28:7c:f2:84:2e:d6:8a:d8:8d:61:c1:ed:
7d:79:2e:77
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUQ7dePIBy4qPhX4fUkkJEzMuCDAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA4NWNjZGVkMjhhNjhkODcyY2JmMTk3NTQzMTFlNmY2
MTY2NDliMTAeFw0yMzAzMDMxNTI3MzdaFw0yNDAzMDExNTMyMzdaMDMxMTAvBgNV
BAMTKDgwNDFBMkQ3OTRFQzgxMTMzNjgyQ0E4OEE3REZENEU5MEExMEM5MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdKh5rksPFZqyKSFjG1YGaG9N
R/UGlix+l8W9waQmf2oGapsbEW6x8YdmvB0hR1uRuGwvXa02Yh9Bjm6KBdKPUU3g
TSBbgiquRQYkvhE9rS6sE3oxm8vuo+KVsnl/dmpGkjRcV9uXy2HN5IEJzqQpZcM5
XkR+IRXlmqyBiW4WZEPsLonvhMtXM3UnjTUntRzpuuc+oiEnxptxe3krV8FIavJD
2ZyB2euOZHGBGG1OZfp+O3e6cbcbsk2nHIiIo3FiOBqf0owjOg9redPDdmS+q7s7
YaTmWH4CiBLZA0PBaSkPyWTcd98CzxK8xcZ9FugXufN36CAEJCkZKSWgSNFrAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUgEGi15TsgRM2gsqIp9/U6QoQyRswHwYDVR0j
BBgwFoAUIIXM3tKKaNhyy/GXVDEeb2FmSbEwDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzE3Ny8yMDg1Q0NERUQyOEE2OEQ4NzJDQkYxOTc1NDMxMUU2
RjYxNjY0OUIxLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvSUlYTTN0S0thTmh5
eV9HWFZERWViMkZtU2JFLmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzAL
hmRyc3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNp
dC8xNzcvMzEzODM1MmUzMTM2MzkyZTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC5qQEwDQYJKoZIhvcNAQELBQADggEBAKsqXpWaD4h+NT9N
n8pvPZr5UCshPzJ7BVYMLyMpyRX32+rAna+GStDQi6TldHmRp7glN3C42JhmXEPD
GcQ/ODcmpFpgrX31OGVR1E8xkvgbgy1UF6/oU7TWJqNJmsNB2kr1nOweVlCmbumv
8r8J5H/5gMbEwb08kKH8lClayqjDCbD9AwxyUsbzPQunG4TQXFH0VikHQ1kqiLq3
Dmx54/pc9/Zn5eUOLs8GdwBL8AjX4m9y+qSMkm+UtJYA0113v2moMe+Pmt9UDM0l
CWaHz0YhPlhR/9aFOlKMAkJ7q8hPCeV2OxViW7vW0PV3Bm75Dih88oQu1orYjWHB
7X15Lnc=
-----END CERTIFICATE-----
Generated at Wed May 14 02:48:27 2025 by rpki-client