Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e33322e302f32312d3231203d3e2030.roa
File: 33312e3232302e33322e302f32312d3231203d3e2030.roa (raw, json)
Hash identifier: eBDcHTFT7fkKyQw9sJRi8UdjE1yDK5hKNPUSvNUURiU=
Subject key identifier: 69:E2:53:02:FC:03:F2:7A:B1:FA:10:D0:07:E8:4A:88:DF:B3:D2:A4
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 7052E5320D7E3C2BD17E050A13FB124FC1E9D221
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e33322e302f32312d3231203d3e2030.roa
Signing time: Fri 03 Mar 2023 17:51:30 +0000
ROA not before: Fri 03 Mar 2023 17:46:30 +0000
ROA not after: Fri 01 Mar 2024 17:51:30 +0000
asID: 0
IP address blocks: 31.220.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:52:e5:32:0d:7e:3c:2b:d1:7e:05:0a:13:fb:12:4f:c1:e9:d2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 17:46:30 2023 GMT
Not After : Mar 1 17:51:30 2024 GMT
Subject: CN=69E25302FC03F27AB1FA10D007E84A88DFB3D2A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:ef:8e:0b:9d:87:8d:fd:56:c2:23:29:89:
25:a8:c1:d7:aa:cd:2e:ae:ef:ff:f2:32:f6:d4:38:
82:af:b9:83:78:18:14:78:10:d4:91:4c:a1:b2:95:
9a:86:aa:53:86:0e:03:dc:76:db:ea:da:0f:9c:fb:
be:96:31:2a:65:51:43:1b:84:6b:ae:33:7b:aa:a5:
64:b0:dc:ee:0b:22:c4:16:3e:29:88:ef:49:08:4c:
d6:d1:68:34:14:5d:5f:7e:35:2b:3f:6d:af:e5:59:
c7:5a:6d:b2:8f:b5:ec:ff:c7:ca:ea:a4:12:63:00:
d8:88:67:fb:69:67:80:55:37:7a:37:18:29:7d:cc:
d1:2e:0a:28:99:8f:ce:37:3c:30:4e:bb:d7:df:31:
52:79:02:94:61:9e:49:17:aa:29:99:da:dc:d5:36:
76:c4:e0:e1:8a:9a:fc:48:1a:9b:bd:37:c8:37:42:
e1:0c:67:e2:20:58:e4:7a:92:4d:53:0b:7d:d9:44:
14:53:8d:b4:16:75:6c:db:19:61:79:86:45:cf:82:
58:5c:57:89:b9:6f:51:55:00:0e:1e:49:ad:e2:f6:
8e:e2:d9:0c:8e:1c:6f:c6:ad:96:55:fb:49:e7:c2:
97:31:ef:f7:0e:39:11:f9:6b:bc:86:7b:32:21:b6:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:53:02:FC:03:F2:7A:B1:FA:10:D0:07:E8:4A:88:DF:B3:D2:A4
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e33322e302f32312d3231203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.32.0/21
Signature Algorithm: sha256WithRSAEncryption
56:8a:fa:6c:9a:b3:32:1e:73:09:4a:5b:f8:08:73:c1:ba:94:
40:d6:01:5a:44:7b:df:cc:97:c9:55:75:41:d9:e0:57:f4:7a:
ce:7d:ad:12:96:ce:6f:88:47:69:73:30:68:6e:8e:7e:16:16:
2c:be:ad:57:fc:0a:17:0e:6d:0c:5c:ec:ed:10:be:f0:ff:9a:
e9:33:77:cf:55:bb:b6:10:95:90:f9:1f:f5:3e:90:6b:68:c7:
7e:97:9a:15:ac:f9:e9:82:dc:22:69:f2:42:f7:29:df:67:61:
6c:6b:e5:5b:1b:4d:b3:2f:40:bf:ca:a2:de:ce:5b:c4:8a:85:
65:44:58:28:1a:ef:1c:1b:2c:3e:19:d7:1b:b9:4c:64:0f:a2:
d8:11:b5:25:fb:5c:ae:28:e3:3b:6d:fe:38:40:f8:27:f4:63:
5a:9c:a4:23:a6:9c:74:44:43:c3:10:68:63:56:ad:b9:35:53:
db:29:90:1e:e7:06:a4:b8:5a:71:5c:39:cc:61:bc:a4:47:3b:
5c:2c:26:0d:45:e3:17:a3:38:f8:b7:bf:6f:8a:45:df:e7:b2:
13:8c:e5:aa:57:e8:c7:4a:ba:73:42:53:e1:dd:0c:4c:b7:6f:
af:4c:b4:a9:79:1c:c4:c2:9a:36:e4:ba:11:7f:01:07:45:48:
af:a2:58:2e
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUcFLlMg1+PCvRfgUKE/sST8Hp0iEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAzMDMxNzQ2MzBaFw0yNDAzMDExNzUxMzBaMDMxMTAvBgNV
BAMTKDY5RTI1MzAyRkMwM0YyN0FCMUZBMTBEMDA3RTg0QTg4REZCM0QyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCO+OC52Hjf1WwiMpiSWowdeq
zS6u7//yMvbUOIKvuYN4GBR4ENSRTKGylZqGqlOGDgPcdtvq2g+c+76WMSplUUMb
hGuuM3uqpWSw3O4LIsQWPimI70kITNbRaDQUXV9+NSs/ba/lWcdabbKPtez/x8rq
pBJjANiIZ/tpZ4BVN3o3GCl9zNEuCiiZj843PDBOu9ffMVJ5ApRhnkkXqimZ2tzV
NnbE4OGKmvxIGpu9N8g3QuEMZ+IgWOR6kk1TC33ZRBRTjbQWdWzbGWF5hkXPglhc
V4m5b1FVAA4eSa3i9o7i2QyOHG/GrZZV+0nnwpcx7/cOORH5a7yGezIhtgMBAgMB
AAGjggHmMIIB4jAdBgNVHQ4EFgQUaeJTAvwD8nqx+hDQB+hKiN+z0qQwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJy
c3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80
LzMzMzEyZTMyMzIzMDJlMzMzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMwLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDH9wgMA0GCSqGSIb3DQEBCwUAA4IBAQBWivpsmrMyHnMJSlv4CHPB
upRA1gFaRHvfzJfJVXVB2eBX9HrOfa0Sls5viEdpczBobo5+FhYsvq1X/AoXDm0M
XOztEL7w/5rpM3fPVbu2EJWQ+R/1PpBraMd+l5oVrPnpgtwiafJC9ynfZ2Fsa+Vb
G02zL0C/yqLezlvEioVlRFgoGu8cGyw+GdcbuUxkD6LYEbUl+1yuKOM7bf44QPgn
9GNanKQjppx0REPDEGhjVq25NVPbKZAe5wakuFpxXDnMYbykRztcLCYNReMXozj4
t79vikXf57ITjOWqV+jHSrpzQlPh3QxMt2+vTLSpeRzEwpo25LoRfwEHRUivolgu
-----END CERTIFICATE-----
Generated at Tue May 13 21:07:49 2025 by rpki-client