Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3332203d3e203531313637.roa
File: 3139342e3139352e38372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: thehOVMKPuFQ8E0IoMJ+UD+g80r4kTXyQido/gN3HX8=
Subject key identifier: BF:42:8F:D9:50:52:D0:84:6E:80:E5:82:E7:20:77:F4:F7:FF:08:DB
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 2A6D72790B04F7E11F220494F46532861659209D
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3332203d3e203531313637.roa
Signing time: Sat 22 Oct 2022 04:34:13 +0000
ROA not before: Sat 22 Oct 2022 04:29:13 +0000
ROA not after: Sat 21 Oct 2023 04:34:13 +0000
asID: 51167
IP address blocks: 194.195.87.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6d:72:79:0b:04:f7:e1:1f:22:04:94:f4:65:32:86:16:59:20:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:13 2022 GMT
Not After : Oct 21 04:34:13 2023 GMT
Subject: CN=BF428FD95052D0846E80E582E72077F4F7FF08DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:62:1c:ff:fb:1d:38:0c:8c:6d:61:5b:31:
69:bb:a2:9e:cb:ed:69:df:3c:dd:77:3f:e9:5f:f5:
67:70:ff:71:8f:bf:87:30:ad:bd:43:fa:e1:89:13:
e9:d8:22:2b:ad:ec:45:6e:cd:be:bd:c8:78:f6:20:
cd:df:c3:b8:a5:90:95:8f:f9:e6:14:f3:7a:cb:ff:
50:dc:b9:b5:8d:6d:c1:7d:3e:95:5b:5b:12:24:88:
23:8b:54:1e:37:f5:7e:4e:d3:e4:d2:db:9d:a1:91:
eb:41:1f:b7:72:2c:3d:aa:32:e6:59:97:2c:0e:ba:
14:2b:64:48:49:95:2e:67:6f:69:e8:bc:4f:b1:05:
ed:94:b5:fd:4c:42:32:d2:79:9f:e4:e3:42:8b:82:
8b:26:8a:76:8a:3c:44:e6:77:5e:97:96:79:49:85:
b8:f6:d6:a9:27:e8:be:d3:2b:3c:91:5e:19:43:7f:
49:70:64:6b:aa:18:4d:40:24:21:cd:b7:c8:d2:f7:
64:c6:2c:c8:a5:57:2d:1d:30:b9:81:30:a5:6a:c0:
d2:f8:1c:5e:09:df:9d:d6:57:eb:20:74:d8:e8:b2:
7c:d4:95:df:66:8c:06:68:96:72:b8:a5:8f:d3:4e:
8e:a0:c4:e8:a0:0e:94:90:3e:17:4a:74:38:8c:32:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:8F:D9:50:52:D0:84:6E:80:E5:82:E7:20:77:F4:F7:FF:08:DB
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.87.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:83:05:62:4b:58:c7:38:de:bc:3f:ff:c4:03:eb:05:bd:3d:
f5:5a:1f:16:d0:8e:74:9c:af:ce:95:b6:fc:de:a7:29:08:ff:
25:0e:38:1b:c8:4d:ed:22:49:c6:70:1f:ce:06:c1:4f:e5:4e:
6f:b6:9d:4d:03:25:e5:10:b9:87:0a:92:cf:08:13:87:4c:fa:
88:ea:39:eb:ef:6b:a2:84:90:4a:f4:b0:e5:05:b9:bd:14:5f:
26:8f:1f:e7:31:d9:f6:f3:24:96:ff:9a:aa:2d:b4:68:98:b8:
ed:ec:a6:62:95:f5:c2:bc:b7:01:07:5c:63:64:9b:7a:86:fb:
29:98:13:e4:03:dd:c2:18:05:e0:ea:2b:30:cb:15:0e:0d:95:
4c:f3:31:fb:4b:42:78:ee:77:81:12:8e:bb:3d:50:56:b7:3f:
00:52:30:81:65:50:7f:a0:2a:6a:c1:fa:0d:2b:0f:d9:fc:c8:
17:0d:28:c3:dd:a2:f1:26:e0:b5:d1:62:9c:07:0b:43:3e:63:
75:f8:3a:9a:54:98:20:3e:cd:07:75:b8:69:ef:4e:60:05:a8:
c0:02:8d:dd:2a:b3:d6:21:2a:5d:8a:89:cd:51:00:c5:63:0d:
8c:e4:c1:73:7d:3c:83:19:5c:8c:7f:23:be:c7:2b:26:b1:4b:
70:6c:c4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:14:46 2025 by rpki-client