This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134382e302f32342d3234203d3e2037373234.roa
File:                     34352e382e3134382e302f32342d3234203d3e2037373234.roa (raw, json)
Hash identifier:          E1kmCpjMpZPSy3n4CpqZbCGLWiRmgMeL2vleLzGt5+4=
Subject key identifier:   F7:2F:CA:5D:A5:28:6F:EF:48:E2:32:AD:2C:93:48:6F:92:2A:DA:5C
Certificate issuer:       /CN=00de5a79794df58205a4c7ab118447e34a5d743c
Certificate serial:       433081E14AAEAE57053BA0B753ED71A21437BC49
Authority key identifier: 00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134382e302f32342d3234203d3e2037373234.roa
Signing time:             Sat 06 Feb 2021 19:06:40 +0000
ROA not before:           Sat 06 Feb 2021 19:01:40 +0000
ROA not after:            Sat 05 Feb 2022 19:06:40 +0000
asID:                     7724
IP address blocks:        45.8.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:30:81:e1:4a:ae:ae:57:05:3b:a0:b7:53:ed:71:a2:14:37:bc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00de5a79794df58205a4c7ab118447e34a5d743c
        Validity
            Not Before: Feb  6 19:01:40 2021 GMT
            Not After : Feb  5 19:06:40 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:df:b7:10:c1:34:60:d6:d7:be:aa:b8:46:
                    9c:0f:c4:2a:9d:a7:3a:97:5b:02:a6:20:c0:fa:44:
                    03:ca:9f:de:b9:56:51:6d:ef:39:93:65:c1:99:03:
                    52:17:8d:35:9f:e6:55:aa:02:12:a3:c7:a3:16:b2:
                    03:77:0c:6b:fc:8c:84:7a:f5:28:71:eb:e1:d9:ec:
                    92:4a:e9:19:dc:f1:65:87:3c:b6:a5:c7:d6:f2:2a:
                    bc:c1:6d:08:72:5d:9e:80:a2:8f:38:fc:3a:55:0c:
                    98:7c:80:32:00:8c:c1:27:5d:97:3a:9f:11:9a:e0:
                    c4:da:ef:6b:fd:5e:cc:52:66:0d:45:4d:c9:90:ae:
                    65:97:8e:f7:16:f4:7b:18:79:5e:c5:f6:42:68:f7:
                    6b:b4:10:28:37:95:f5:ef:f5:a8:e3:c6:2b:b2:7a:
                    8f:75:e9:24:7a:50:0c:90:0d:4c:0e:02:00:91:24:
                    a9:30:77:31:e4:1e:e1:b4:ea:ca:30:29:f7:b1:0c:
                    da:8b:54:17:de:cb:9e:09:85:08:c8:53:18:b6:b3:
                    0d:1b:2d:e2:ee:11:4a:d4:e1:bd:df:fa:18:14:cc:
                    0c:c5:71:4c:af:85:8d:30:fa:ff:e1:32:f8:87:fe:
                    fd:f7:cb:af:62:35:bf:88:4c:1c:ec:c0:19:48:8b:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2F:CA:5D:A5:28:6F:EF:48:E2:32:AD:2C:93:48:6F:92:2A:DA:5C
            X509v3 Authority Key Identifier:
                keyid:00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/00DE5A79794DF58205A4C7AB118447E34A5D743C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134382e302f32342d3234203d3e2037373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:89:de:3a:ec:1e:ed:28:32:e4:69:2e:3f:76:48:c1:17:bb:
         69:70:a8:3c:e1:53:58:50:2e:68:a8:54:24:6f:b3:cf:c7:92:
         7b:17:6a:bb:39:89:bd:1f:43:6c:8c:bc:96:54:26:ec:7a:3f:
         c7:24:0c:da:1e:be:94:a4:0d:11:0f:22:10:c9:af:f2:87:6b:
         2f:ac:1b:b8:73:77:72:57:a9:23:31:a9:cb:19:c8:82:e5:a6:
         2e:7e:e1:b4:62:48:02:6f:f8:cf:9c:2d:dd:a7:a1:2d:ba:c6:
         4f:2c:8e:fc:3d:c3:3d:27:64:73:78:89:a2:d7:61:f6:ba:0b:
         09:c9:d9:20:c9:fd:30:11:f9:23:a1:de:36:a4:ca:92:e3:12:
         c6:a9:98:0e:6d:df:31:cd:d7:2f:12:bc:93:67:9e:0a:07:c8:
         e5:ea:87:4b:5a:ec:a1:6a:d8:a0:a1:a6:4c:ab:6d:b4:a7:d4:
         43:16:f5:d3:af:f1:99:23:f9:c8:43:ee:90:f1:14:ba:c1:4e:
         7e:c1:08:71:77:32:cc:ef:e5:cd:d9:14:89:f2:8f:6f:4e:42:
         0a:e7:3e:e0:a5:e7:1a:c7:f8:86:ad:5b:06:98:34:41:82:e6:
         35:57:bc:57:6d:ee:d1:b4:e7:85:fe:10:b8:e5:9b:2b:92:07:
         a0:f7:6b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----