Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e32382e302f32342d3234203d3e20323031333431.roa
File: 33312e3232302e32382e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: pvsQxF3lA0LjlJHHngzrC5ywAJZ2tfFAEOmvmuMOhg8=
Subject key identifier: 88:9C:C3:5A:5E:F9:14:1A:A2:E2:A9:F7:67:2F:ED:63:94:46:66:15
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 5739916F35A20648D607C2254CA156150A827873
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e32382e302f32342d3234203d3e20323031333431.roa
Signing time: Sat 22 Oct 2022 04:34:29 +0000
ROA not before: Sat 22 Oct 2022 04:29:29 +0000
ROA not after: Sat 21 Oct 2023 04:34:29 +0000
asID: 201341
IP address blocks: 31.220.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:39:91:6f:35:a2:06:48:d6:07:c2:25:4c:a1:56:15:0a:82:78:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:29 2022 GMT
Not After : Oct 21 04:34:29 2023 GMT
Subject: CN=889CC35A5EF9141AA2E2A9F7672FED6394466615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:2a:3e:cc:c7:f2:5e:e9:d4:41:1d:1b:2f:
c8:05:5f:3e:42:dd:45:5d:44:2e:6f:8f:d6:42:c4:
29:57:26:17:95:49:46:77:4c:1d:f4:70:d6:e8:8a:
61:f8:3c:af:5f:64:4c:8c:24:61:24:01:8e:3a:c7:
f9:ec:70:bd:fa:59:f2:6f:63:90:bb:05:70:d4:f5:
e1:a8:ff:77:ed:82:ec:8e:68:b2:de:4b:55:d7:58:
8e:da:d3:58:9f:d0:d5:b4:be:d9:ae:9f:a7:18:08:
58:22:38:24:5a:d8:6d:6c:da:b3:15:d9:c6:cb:6b:
62:ee:07:f3:92:c0:c9:66:49:e8:66:0c:89:72:68:
b8:c6:29:29:ee:73:3d:6e:50:d3:ad:ac:11:29:1f:
99:c7:04:8f:0a:8b:54:c0:7b:56:98:59:4a:59:05:
38:f7:8c:81:ea:2c:16:e0:70:40:24:f3:60:b2:f9:
67:04:0d:da:45:e7:2d:cb:94:6e:9a:2a:bf:9c:6e:
a1:70:4a:bf:61:ec:79:e4:34:0f:fe:0c:04:99:bc:
d6:13:30:26:4b:f3:39:b7:75:7a:3f:dc:b2:be:8e:
63:d9:84:e7:85:aa:75:a0:90:4a:8c:ac:f1:a2:a8:
cb:18:ac:4f:79:ae:dc:ac:c8:b9:94:a6:c7:51:53:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9C:C3:5A:5E:F9:14:1A:A2:E2:A9:F7:67:2F:ED:63:94:46:66:15
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e32382e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.28.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e2:df:56:e9:ff:ba:a0:0c:5b:b4:c3:8c:82:c4:11:66:88:
e6:c4:70:c7:4e:7e:d6:2e:cf:54:66:2a:34:38:cc:e5:5a:36:
e8:d7:72:3b:1b:a3:b3:a7:4f:f8:80:2d:07:58:27:d5:f3:6d:
67:dd:6e:18:1a:fc:6d:6d:e2:24:5e:60:a4:ed:98:e3:a2:a7:
ed:4b:00:45:40:6e:1a:62:c1:c1:30:24:3f:a7:75:a3:d0:de:
94:7e:ba:c9:8d:fd:62:54:0b:0b:08:79:52:d9:79:b5:f7:bb:
72:55:bf:cb:b8:28:8a:5e:9f:79:ea:61:6f:f4:1f:73:76:1c:
1c:8d:cf:fe:da:71:0d:0a:89:e7:dd:d3:1b:19:ba:4c:5f:02:
1c:f2:5a:4a:4c:2e:76:a0:09:ca:2e:bc:66:1f:85:bb:cf:b0:
7d:9b:4d:f7:fb:8a:55:a0:8d:24:eb:d3:38:ab:aa:35:4f:aa:
30:ad:c5:f2:d2:eb:5d:c9:68:b1:5b:91:c2:49:63:da:66:eb:
13:fc:05:28:63:18:e6:03:76:a8:c8:47:1b:05:57:ce:86:16:
86:03:f1:8d:92:9b:a9:73:52:21:2d:a7:2b:9d:97:c8:1b:4d:
6c:26:40:8d:da:45:6a:fe:44:83:64:d1:a1:d7:4e:cf:c6:8b:
03:69:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:51:32 2025 by rpki-client