Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3232342e302f32322d3234203d3e20313938303930.roa
File: 3139352e3137392e3232342e302f32322d3234203d3e20313938303930.roa (raw, json)
Hash identifier: BU+Mkn7gDAM0VopJO2Rf53zobeZNuKb1vJ+VAUgcMzw=
Subject key identifier: 86:84:49:A5:AF:39:EB:F5:6B:D2:34:08:AB:08:CF:4A:58:86:05:67
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 639156213CE3D0B7BEB90F78C6686BF39B3265A7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3232342e302f32322d3234203d3e20313938303930.roa
Signing time: Sat 22 Oct 2022 04:34:09 +0000
ROA not before: Sat 22 Oct 2022 04:29:09 +0000
ROA not after: Sat 21 Oct 2023 04:34:09 +0000
asID: 198090
IP address blocks: 195.179.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:91:56:21:3c:e3:d0:b7:be:b9:0f:78:c6:68:6b:f3:9b:32:65:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:09 2022 GMT
Not After : Oct 21 04:34:09 2023 GMT
Subject: CN=868449A5AF39EBF56BD23408AB08CF4A58860567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:6d:ef:f1:99:30:67:c4:44:db:42:4e:3a:
5e:bd:a5:0b:c1:56:02:f0:dd:9d:f1:b6:4a:79:86:
6c:53:f3:e8:58:33:12:00:2d:c1:81:1a:28:cc:6b:
08:44:54:ae:5f:89:4e:5e:4c:19:59:b6:6f:12:54:
a4:67:7e:ea:79:19:42:f2:b8:6b:1e:3d:7f:0e:c6:
4c:1e:b4:47:a1:f2:3a:6b:5d:79:0d:a5:f3:0e:83:
40:66:d5:45:63:92:3f:ae:cf:69:48:2a:18:61:1a:
9c:43:da:77:6a:00:36:5e:a9:3a:2e:e6:94:1f:30:
e9:aa:82:ec:2e:b2:e6:f7:88:35:b4:de:3e:f0:c8:
46:84:11:96:2b:ba:23:8b:4f:cd:05:0b:59:da:0b:
32:e5:38:41:72:ba:cc:39:68:24:ef:0a:e2:15:b3:
81:41:4c:86:78:f2:75:93:86:cb:25:a3:8c:9d:a9:
ec:3d:8d:55:3e:55:b7:ea:29:00:77:a2:86:3b:f3:
0a:f7:e5:8e:4f:13:1a:55:1e:03:7b:4a:41:31:58:
57:66:8f:33:5f:7c:7c:4b:c8:64:74:c7:e8:c6:e2:
e0:c2:07:6e:88:2d:ba:93:3b:43:5d:0f:16:30:b1:
a0:39:5d:70:70:42:66:be:b2:99:e6:52:58:70:da:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:84:49:A5:AF:39:EB:F5:6B:D2:34:08:AB:08:CF:4A:58:86:05:67
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3232342e302f32322d3234203d3e20313938303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.224.0/22
Signature Algorithm: sha256WithRSAEncryption
42:50:ed:ad:93:02:eb:07:38:83:57:e8:65:8c:53:05:3d:ea:
f0:f7:be:1b:d5:98:14:74:a8:6c:d1:ff:05:6f:13:c1:3b:6a:
28:25:d8:70:87:be:fa:be:2d:5c:ed:ca:97:21:58:28:1b:bf:
a1:45:47:b8:74:c4:0c:25:38:99:74:87:52:89:c2:6c:2b:93:
37:c7:a6:53:dc:89:28:87:3e:2b:e7:69:90:f6:00:27:7f:e5:
ee:92:27:2e:f3:40:c7:47:c8:56:30:20:81:6e:5d:d6:53:23:
63:e5:2f:4a:40:dc:20:57:b5:33:74:d7:eb:54:08:34:af:18:
c6:e4:72:27:eb:e3:33:08:b6:63:d1:78:7b:49:ab:be:30:53:
eb:10:93:7d:82:f5:5d:ec:cd:44:c2:3c:60:77:de:f0:90:75:
66:e4:c8:95:e5:e6:f5:ab:fb:50:24:33:58:e4:25:a5:91:3a:
da:1c:30:b4:40:63:aa:9a:24:fe:56:f5:03:40:ba:f4:5f:a3:
d3:cd:a8:57:24:3f:b2:ad:b3:28:89:1d:03:11:87:8d:71:41:
c0:21:f4:0c:e2:f8:d6:99:6b:88:af:bb:1f:78:28:f9:f2:0f:
88:3c:d9:8a:22:3b:9d:df:18:b2:1a:a9:c3:ee:8b:cc:06:15:
9b:7a:b8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:54:19 2025 by rpki-client