Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323132363330.roa
File: 3139332e34322e39372e302f32342d3234203d3e20323132363330.roa (raw, json)
Hash identifier: ngxx1ETjKibPiccgGFGLZc2VMGoACCYkrr1aYRajFy8=
Subject key identifier: DD:E0:6E:13:47:9B:02:56:D7:0D:4E:77:1B:AD:F7:C0:1C:AA:9D:45
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 43402A5BB48BB5FDE5E331C263AC4199311A7D91
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323132363330.roa
Signing time: Fri 27 Nov 2020 15:10:20 +0000
ROA not before: Fri 27 Nov 2020 15:05:20 +0000
ROA not after: Fri 26 Nov 2021 15:10:20 +0000
asID: 212630
IP address blocks: 193.42.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:40:2a:5b:b4:8b:b5:fd:e5:e3:31:c2:63:ac:41:99:31:1a:7d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Nov 27 15:05:20 2020 GMT
Not After : Nov 26 15:10:20 2021 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:93:8b:4f:e7:0a:38:f7:6f:80:8d:a9:12:
22:5c:16:c6:81:31:aa:4b:69:6a:f3:24:35:70:b5:
b9:ad:60:f8:86:f7:d5:0b:a8:94:c9:f9:23:45:23:
16:42:19:8c:81:11:c2:35:ce:80:1b:6d:d8:0b:81:
48:b2:2b:73:ce:a9:66:f1:fc:6c:0b:ff:fe:ec:e2:
28:80:e7:40:be:90:a5:d1:16:d0:10:f7:5a:e2:4e:
7a:b4:d5:f4:3f:81:ba:ac:e8:8b:36:ec:e5:81:4f:
1a:61:62:ab:97:b0:46:7a:27:d9:0b:bd:be:c9:41:
13:19:e3:d5:b1:37:d3:e2:b5:95:d2:73:76:4c:98:
51:e2:d8:ec:4a:f4:66:68:e3:3b:1a:10:e4:1f:ed:
f0:87:44:3d:7c:73:e9:ff:76:8b:d2:f9:6b:89:e0:
51:09:3b:56:a0:40:5e:5d:17:d5:ce:49:3e:6f:79:
47:8a:c4:2a:3e:61:8f:ec:00:21:e1:b4:f5:12:d5:
ff:98:86:b2:67:2e:7f:58:72:cf:6b:db:2c:21:2c:
96:cf:c3:db:5a:30:1d:50:fe:51:27:83:47:e3:2f:
db:f4:aa:2f:44:63:34:48:e9:54:18:68:e6:b8:08:
c1:89:35:0c:8e:b0:ee:d1:38:f3:d4:8e:3e:f3:9b:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E0:6E:13:47:9B:02:56:D7:0D:4E:77:1B:AD:F7:C0:1C:AA:9D:45
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323132363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.97.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:21:66:bc:ac:54:15:e4:04:9f:e6:61:38:cc:5a:a1:ee:66:
1d:6f:b3:38:19:3f:ec:19:2c:89:f2:c3:d7:3b:35:9e:9d:7c:
5d:00:31:43:c7:13:7e:a4:20:ec:fa:15:8a:59:0b:79:a5:45:
ce:7c:4c:c4:98:78:64:70:a6:4f:f6:de:e4:8c:54:2a:40:b7:
e5:70:19:d4:fe:9d:c1:8f:6d:0e:86:41:78:b5:4f:83:44:ea:
bb:3a:34:36:67:72:a7:63:3a:bd:bf:8e:2e:29:17:0d:fa:c9:
e5:26:d5:84:97:12:fc:8b:db:92:7d:99:d8:4b:f9:c9:6a:9b:
28:84:28:f1:cb:23:e8:e9:47:eb:cb:b7:d2:78:85:c6:45:89:
1c:c0:f7:87:54:ef:75:50:48:64:91:c8:51:fc:09:1c:52:a8:
eb:ef:af:92:76:4a:32:9c:d9:2b:22:de:26:31:03:40:fa:78:
30:35:7b:53:e5:b4:b9:b6:d3:4e:1d:7b:d0:ec:bc:6a:94:e2:
5b:66:60:25:bb:c7:69:d0:e6:e6:74:98:de:1e:2a:6d:18:22:
7a:b4:aa:ff:db:98:1b:76:e8:7f:1e:f8:0b:e6:77:b6:b2:15:
6c:5d:7d:bb:b2:52:a3:73:05:d1:6c:1c:55:2d:a3:b4:ac:12:
d2:d6:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:09:37 2025 by rpki-client