Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e20323031383832.roa
File: 33312e34302e3231322e302f32342d3234203d3e20323031383832.roa (raw, json)
Hash identifier: 7W5FC/JpDqLgDbLPyjhJTK4tPb3/FdREtS13p+LWGU8=
Subject key identifier: 4D:B2:D2:FE:E5:71:34:CF:30:42:CC:87:99:B4:CF:6A:B7:44:DE:85
Certificate issuer: /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial: 342545069789963CC127BD1A562A83AA753F27CF
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e20323031383832.roa
Signing time: Sat 22 Oct 2022 04:33:33 +0000
ROA not before: Sat 22 Oct 2022 04:28:33 +0000
ROA not after: Sat 21 Oct 2023 04:33:33 +0000
asID: 201882
IP address blocks: 31.40.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:25:45:06:97:89:96:3c:c1:27:bd:1a:56:2a:83:aa:75:3f:27:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Validity
Not Before: Oct 22 04:28:33 2022 GMT
Not After : Oct 21 04:33:33 2023 GMT
Subject: CN=4DB2D2FEE57134CF3042CC8799B4CF6AB744DE85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:43:ac:d0:b1:88:1e:11:d1:65:42:87:ef:
2c:9b:c3:66:c5:df:3c:99:99:66:5e:65:62:43:dd:
07:77:c7:6c:50:3a:38:2f:46:55:c3:8e:36:b7:e3:
6e:64:56:59:3a:93:d4:81:af:63:aa:e4:13:77:2b:
3d:cc:55:64:d4:0e:56:bd:53:02:a0:0f:ff:dd:e6:
e7:8b:e5:d1:90:d5:97:62:f5:f0:ac:a6:55:bf:0e:
60:fd:c6:2c:9c:05:cf:c6:52:7c:d7:c6:4a:58:66:
9d:59:01:25:e3:47:a3:4f:f1:bc:79:b2:88:03:07:
59:51:1e:6c:0f:a9:6c:10:32:59:9a:73:b7:84:f0:
b3:a4:d5:74:5b:13:43:ff:98:e3:41:36:2a:00:d2:
99:06:18:8a:2f:f2:bf:0f:e3:61:e8:cb:a6:df:c9:
5a:e4:52:11:69:1d:dc:41:35:87:91:f7:4b:c5:c9:
61:07:a5:08:80:fa:29:eb:68:ee:49:90:ea:90:b1:
8e:e7:21:eb:e3:3b:9f:f5:ca:1b:84:af:62:ed:0a:
9b:69:98:ee:ea:15:eb:76:c9:e5:aa:51:22:d9:dd:
9a:f9:0e:d4:3a:1b:52:69:e6:46:f5:c5:7f:f6:f1:
cf:eb:9c:b5:44:b8:12:1f:1e:d3:62:54:b1:26:ce:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B2:D2:FE:E5:71:34:CF:30:42:CC:87:99:B4:CF:6A:B7:44:DE:85
X509v3 Authority Key Identifier:
keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/33312e34302e3231322e302f32342d3234203d3e20323031383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.212.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d8:7d:cb:04:73:f2:f6:ed:da:af:6f:f2:48:37:84:9b:d3:
dd:b7:c5:52:37:76:b8:88:a9:14:4f:bc:15:ed:95:a9:91:de:
86:4d:e7:48:50:69:38:6c:82:fb:67:23:df:2a:80:83:7b:cd:
67:e4:71:58:02:ff:94:98:d0:42:fc:7f:a3:a9:6d:42:71:e7:
76:1b:49:ac:b3:49:5a:f1:d4:a6:a1:d2:9a:58:1f:8f:8a:fa:
0d:5d:d4:5e:4e:73:06:b6:a9:c2:6f:3e:8f:43:d3:88:b1:ed:
99:8c:f1:ff:71:54:dc:34:7d:b7:f5:86:0b:94:d7:0c:9f:8d:
99:53:2d:f4:6b:41:6a:fb:ea:11:89:1a:c6:bf:60:70:25:c6:
8a:b3:71:be:bb:7e:c7:08:77:8f:f3:15:a9:4b:9b:94:73:ae:
d5:69:21:7c:b9:69:aa:cf:18:2f:6e:4c:62:65:6e:5f:dc:f5:
40:68:0d:34:d7:e4:5a:22:19:29:80:09:7e:11:f3:3b:1f:04:
df:8c:b4:3a:67:b0:e5:2b:10:3f:b6:1d:5c:a9:cc:a3:9c:aa:
00:02:cd:cc:a1:b3:4e:34:e8:94:f5:3a:a2:98:b4:f1:08:cc:
68:12:fd:9e:4f:c7:30:66:4e:1d:b2:dc:8f:cf:d0:39:f9:3b:
b1:63:cf:ed
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUNCVFBpeJljzBJ70aViqDqnU/J88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MzNaFw0yMzEwMjEwNDMzMzNaMDMxMTAvBgNV
BAMTKDREQjJEMkZFRTU3MTM0Q0YzMDQyQ0M4Nzk5QjRDRjZBQjc0NERFODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzUOs0LGIHhHRZUKH7yybw2bF
3zyZmWZeZWJD3Qd3x2xQOjgvRlXDjja3425kVlk6k9SBr2Oq5BN3Kz3MVWTUDla9
UwKgD//d5ueL5dGQ1Zdi9fCsplW/DmD9xiycBc/GUnzXxkpYZp1ZASXjR6NP8bx5
sogDB1lRHmwPqWwQMlmac7eE8LOk1XRbE0P/mONBNioA0pkGGIov8r8P42Hoy6bf
yVrkUhFpHdxBNYeR90vFyWEHpQiA+inraO5JkOqQsY7nIevjO5/1yhuEr2LtCptp
mO7qFet2yeWqUSLZ3Zr5DtQ6G1Jp5kb1xX/28c/rnLVEuBIfHtNiVLEmzvyhAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUTbLS/uVxNM8wQsyHmbTPardE3oUwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMzMxMmUzNDMwMmUzMjMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMw
MzEzODM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAfKNQwDQYJKoZIhvcNAQELBQADggEBACbYfcsE
c/L27dqvb/JIN4Sb0923xVI3driIqRRPvBXtlamR3oZN50hQaThsgvtnI98qgIN7
zWfkcVgC/5SY0EL8f6OpbUJx53YbSayzSVrx1Kah0ppYH4+K+g1d1F5Ocwa2qcJv
Po9D04ix7ZmM8f9xVNw0fbf1hguU1wyfjZlTLfRrQWr76hGJGsa/YHAlxoqzcb67
fscId4/zFalLm5RzrtVpIXy5aarPGC9uTGJlbl/c9UBoDTTX5FoiGSmACX4R8zsf
BN+MtDpnsOUrED+2HVypzKOcqgACzcyhs0406JT1OqKYtPEIzGgS/Z5PxzBmTh2y
3I/P0Dn5O7Fjz+0=
-----END CERTIFICATE-----
Generated at Wed May 14 03:28:00 2025 by rpki-client