Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e20323132303737.roa
File: 3138352e3138372e3137302e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier: SztN/iQt6Cfg49eZNWJLhZcBlFHGcW+pzf0uGj+ZPYg=
Subject key identifier: 9A:93:36:44:B5:B0:45:D5:A1:21:51:98:A7:A2:5E:0E:AF:94:E3:4D
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 636D0B7E7E83ACBAA6AAA3BFE6FFC5C7C2CD22FC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e20323132303737.roa
Signing time: Thu 02 Dec 2021 19:00:00 +0000
ROA not before: Thu 02 Dec 2021 18:55:00 +0000
ROA not after: Thu 01 Dec 2022 19:00:00 +0000
asID: 212077
IP address blocks: 185.187.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:6d:0b:7e:7e:83:ac:ba:a6:aa:a3:bf:e6:ff:c5:c7:c2:cd:22:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 2 18:55:00 2021 GMT
Not After : Dec 1 19:00:00 2022 GMT
Subject: CN=3082010A0282010100DD7EA4CB4C3244B67FEBEC162D19DBCFC2E9587272207DBCF7F6FA07EE6B5CC8EA428991B7AABEC68A280F2472F99BA0625E51CEA1A7FEC9C6B07C6CE5C08241DB160E766B52D4159C32A33849A70375112AF61A831D90DC38C186E777D5B18A2694D30C292CEDDF722C438BD2C098C99C99A0BE9A8AB0553AD328CC1D6884887A7F82B7A1E07C56516CECDC1AB14EA10CC218E539192CC817B25125420169935200833DBF49565D6726DDFB62C71093A80C8FE12A95FAACFB388EEC933923934E0B007B46E71C33A397372D7EE6AE20A7948D3FD32392A34CDA129E39BA2151A478C0FA2BA9516071FB131E10449E7C09EFD5B2310177B00F68DFA1C44C92BF0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:a4:cb:4c:32:44:b6:7f:eb:ec:16:2d:19:
db:cf:c2:e9:58:72:72:20:7d:bc:f7:f6:fa:07:ee:
6b:5c:c8:ea:42:89:91:b7:aa:be:c6:8a:28:0f:24:
72:f9:9b:a0:62:5e:51:ce:a1:a7:fe:c9:c6:b0:7c:
6c:e5:c0:82:41:db:16:0e:76:6b:52:d4:15:9c:32:
a3:38:49:a7:03:75:11:2a:f6:1a:83:1d:90:dc:38:
c1:86:e7:77:d5:b1:8a:26:94:d3:0c:29:2c:ed:df:
72:2c:43:8b:d2:c0:98:c9:9c:99:a0:be:9a:8a:b0:
55:3a:d3:28:cc:1d:68:84:88:7a:7f:82:b7:a1:e0:
7c:56:51:6c:ec:dc:1a:b1:4e:a1:0c:c2:18:e5:39:
19:2c:c8:17:b2:51:25:42:01:69:93:52:00:83:3d:
bf:49:56:5d:67:26:dd:fb:62:c7:10:93:a8:0c:8f:
e1:2a:95:fa:ac:fb:38:8e:ec:93:39:23:93:4e:0b:
00:7b:46:e7:1c:33:a3:97:37:2d:7e:e6:ae:20:a7:
94:8d:3f:d3:23:92:a3:4c:da:12:9e:39:ba:21:51:
a4:78:c0:fa:2b:a9:51:60:71:fb:13:1e:10:44:9e:
7c:09:ef:d5:b2:31:01:77:b0:0f:68:df:a1:c4:4c:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:93:36:44:B5:B0:45:D5:A1:21:51:98:A7:A2:5E:0E:AF:94:E3:4D
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e20323132303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.170.0/24
Signature Algorithm: sha256WithRSAEncryption
86:26:09:c4:b5:68:58:43:6f:d2:6d:2e:6b:42:7e:3c:55:00:
1a:78:7b:ea:72:11:9c:94:9b:bf:28:98:54:78:9c:5e:43:a3:
31:bf:d8:17:a6:74:66:c5:bc:29:a4:8c:8a:44:c9:90:a4:82:
bf:d1:df:06:f5:31:07:38:2e:a1:5a:a0:7d:e0:60:dc:3d:c7:
24:20:bd:4e:b8:ac:6a:ab:9b:f6:8e:9e:9d:6a:7b:ad:f5:6c:
e9:65:b7:5f:bd:cb:f3:8b:18:f5:8c:ff:96:6b:d6:5c:a6:b3:
a5:38:d0:f1:4f:13:e4:40:08:30:83:ce:6d:2d:6c:61:ba:f3:
f8:7c:64:89:5f:aa:91:69:fd:b2:f7:30:75:42:b9:6c:db:51:
ea:87:6a:a7:a3:e9:08:77:9b:54:e1:12:fd:04:7a:f5:7a:6e:
46:5a:3f:0c:cd:45:cd:70:c7:9d:e1:b5:8f:e9:cf:1f:06:02:
4b:1e:e1:63:b5:73:f6:8b:10:cf:c7:aa:a6:d7:54:5e:d6:b4:
4d:d4:9c:cc:96:d6:09:b6:32:cc:1c:f3:8a:df:e5:2f:4d:55:
56:1a:34:27:6c:d5:9b:d5:b0:56:81:f6:c0:a8:ae:77:a3:fa:
e8:38:cc:81:2f:fa:65:30:d4:e8:97:9c:ac:eb:d6:75:5e:e6:
00:6c:a9:7e
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUY20Lfn6DrLqmqqO/5v/Fx8LNIvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMTEyMDIxODU1MDBaFw0yMjEyMDExOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREQ3RUE0Q0I0QzMyNDRCNjdG
RUJFQzE2MkQxOURCQ0ZDMkU5NTg3MjcyMjA3REJDRjdGNkZBMDdFRTZCNUNDOEVB
NDI4OTkxQjdBQUJFQzY4QTI4MEYyNDcyRjk5QkEwNjI1RTUxQ0VBMUE3RkVDOUM2
QjA3QzZDRTVDMDgyNDFEQjE2MEU3NjZCNTJENDE1OUMzMkEzMzg0OUE3MDM3NTEx
MkFGNjFBODMxRDkwREMzOEMxODZFNzc3RDVCMThBMjY5NEQzMEMyOTJDRURERjcy
MkM0MzhCRDJDMDk4Qzk5Qzk5QTBCRTlBOEFCMDU1M0FEMzI4Q0MxRDY4ODQ4ODdB
N0Y4MkI3QTFFMDdDNTY1MTZDRUNEQzFBQjE0RUExMENDMjE4RTUzOTE5MkNDODE3
QjI1MTI1NDIwMTY5OTM1MjAwODMzREJGNDk1NjVENjcyNkRERkI2MkM3MTA5M0E4
MEM4RkUxMkE5NUZBQUNGQjM4OEVFQzkzMzkyMzkzNEUwQjAwN0I0NkU3MUMzM0Ez
OTczNzJEN0VFNkFFMjBBNzk0OEQzRkQzMjM5MkEzNENEQTEyOUUzOUJBMjE1MUE0
NzhDMEZBMkJBOTUxNjA3MUZCMTMxRTEwNDQ5RTdDMDlFRkQ1QjIzMTAxNzdCMDBG
NjhERkExQzQ0QzkyQkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3X6ky0wyRLZ/6+wWLRnbz8LpWHJyIH289/b6B+5rXMjqQomRt6q+
xoooDyRy+ZugYl5RzqGn/snGsHxs5cCCQdsWDnZrUtQVnDKjOEmnA3URKvYagx2Q
3DjBhud31bGKJpTTDCks7d9yLEOL0sCYyZyZoL6airBVOtMozB1ohIh6f4K3oeB8
VlFs7NwasU6hDMIY5TkZLMgXslElQgFpk1IAgz2/SVZdZybd+2LHEJOoDI/hKpX6
rPs4juyTOSOTTgsAe0bnHDOjlzctfuauIKeUjT/TI5KjTNoSnjm6IVGkeMD6K6lR
YHH7Ex4QRJ58Ce/VsjEBd7APaN+hxEySvwIDAQABo4IB9jCCAfIwHQYDVR0OBBYE
FJqTNkS1sEXVoSFRmKeiXg6vlONNMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGN
BggrBgEFBQcBCwSBgDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80LzMxMzgzNTJlMzEzODM3MmUz
MTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMDM3Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC5u6owDQYJKoZIhvcNAQELBQADggEBAIYmCcS1aFhDb9JtLmtCfjxVABp4
e+pyEZyUm78omFR4nF5DozG/2BemdGbFvCmkjIpEyZCkgr/R3wb1MQc4LqFaoH3g
YNw9xyQgvU64rGqrm/aOnp1qe631bOllt1+9y/OLGPWM/5Zr1lyms6U40PFPE+RA
CDCDzm0tbGG68/h8ZIlfqpFp/bL3MHVCuWzbUeqHaqej6Qh3m1ThEv0EevV6bkZa
PwzNRc1wx53htY/pzx8GAkse4WO1c/aLEM/HqqbXVF7WtE3UnMyW1gm2Mswc84rf
5S9NVVYaNCds1ZvVsFaB9sCornej+ug4zIEv+mUw1OiXnKzr1nVe5gBsqX4=
-----END CERTIFICATE-----
Generated at Tue May 13 18:52:33 2025 by rpki-client