Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa
File: 3139342e3234322e35362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 2B0e5exZiI3ryjemUqg7bw/iRScbQ9bYOsnQX2PEqxA=
Subject key identifier: B9:90:3C:8B:A7:5D:5F:EC:58:FF:51:8B:8D:1A:F9:27:A8:B3:ED:A4
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 14890A3EAAD542C8818C9E216059084C172C0054
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa
Signing time: Sat 22 Oct 2022 04:33:26 +0000
ROA not before: Sat 22 Oct 2022 04:28:26 +0000
ROA not after: Sat 21 Oct 2023 04:33:26 +0000
asID: 51167
IP address blocks: 194.242.56.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:89:0a:3e:aa:d5:42:c8:81:8c:9e:21:60:59:08:4c:17:2c:00:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:26 2022 GMT
Not After : Oct 21 04:33:26 2023 GMT
Subject: CN=B9903C8BA75D5FEC58FF518B8D1AF927A8B3EDA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:b2:3a:52:79:1f:9e:12:dd:04:79:91:00:
f8:0b:ac:8f:b6:a4:e2:37:c5:1c:f7:a2:4d:40:15:
ac:94:40:1c:8b:53:65:52:c5:0d:b2:a9:85:73:4e:
8f:fa:a1:30:f7:4c:a9:a8:5a:cf:39:4a:b2:7d:d7:
bf:f6:53:15:f2:fb:aa:c9:cd:d2:a8:ec:0d:8c:11:
3a:f7:e7:4b:58:81:48:41:a9:b7:13:67:0c:67:9f:
b0:00:ab:24:49:09:7c:ed:bb:1d:06:2e:a8:ec:bc:
3d:b6:38:de:99:89:a9:aa:47:30:fd:c8:46:a4:85:
e4:26:f9:c8:1f:16:1d:3a:a0:9f:e4:1b:7d:7b:f3:
bd:44:bf:a7:71:41:f6:64:b9:5f:12:21:50:60:3d:
06:82:37:c0:13:34:77:c6:cd:39:09:24:30:f7:2a:
d8:75:3c:cb:4a:38:6f:f6:66:9a:ba:5b:0f:fb:fb:
27:f6:5e:33:54:9a:d2:1c:d9:46:3a:57:7f:a0:dd:
8e:3c:f2:6e:06:3f:39:8e:1f:a6:c0:8b:e6:cd:bc:
7b:9b:f9:41:c5:20:18:07:93:85:e7:9b:8e:1e:41:
2c:c5:14:c1:16:88:a7:51:a4:60:d5:b6:ba:0d:40:
02:02:27:15:57:49:00:3c:d8:81:54:41:9f:95:14:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:3C:8B:A7:5D:5F:EC:58:FF:51:8B:8D:1A:F9:27:A8:B3:ED:A4
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:72:26:45:84:0e:95:00:ba:80:75:a1:36:1b:02:2c:5c:4b:
34:4a:d3:fe:fc:0f:c9:74:24:3b:b0:d7:0a:8f:3d:35:f1:be:
2b:21:f0:a5:21:77:36:dc:f9:78:eb:a0:eb:ab:50:6c:59:13:
16:20:c3:b1:17:f9:e1:b8:a7:75:ce:06:52:34:c2:d6:60:3d:
40:9e:be:ad:78:ef:c5:f5:58:5e:ee:4d:54:46:73:37:dc:05:
6c:bd:47:dd:9d:79:d2:e3:93:cf:50:47:64:ad:e2:60:93:ee:
db:23:fd:e7:14:40:2b:c7:3d:fc:34:83:3d:19:f3:0b:f9:aa:
35:2c:f9:7e:69:ed:d2:84:90:8a:73:16:37:bb:eb:f3:dc:1a:
7d:27:eb:f7:e5:db:da:c4:28:36:4a:55:47:37:e0:61:fe:89:
b6:6a:64:50:42:02:8f:15:48:48:06:94:0f:59:0e:8e:c1:ee:
c1:bf:fa:84:38:93:87:12:92:fe:c0:0a:17:d1:2e:19:05:f6:
1f:22:ec:d3:1c:30:83:5a:c4:b3:e7:1a:41:eb:72:80:9d:95:
bb:64:4f:d7:4f:d0:c9:bb:bf:d3:2c:64:8d:a6:ab:48:25:bc:
49:b0:03:ae:b6:ae:5c:af:bc:d8:82:e8:f4:9f:56:af:e5:69:
79:fb:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:56:30 2025 by rpki-client