Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34342e302f32332d3233203d3e203633343733.roa
File: 33312e3232302e34342e302f32332d3233203d3e203633343733.roa (raw, json)
Hash identifier: rDoNXHaUCFfZSNADzsuvWOgao3WYUkO33NMqC5lpmQA=
Subject key identifier: B8:2F:1F:37:20:07:29:1F:12:A9:28:B3:F5:BC:8F:54:B5:FC:BB:9A
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 5A381C9FEC7C18B8EDA860B9E8481D712B8BB31E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34342e302f32332d3233203d3e203633343733.roa
Signing time: Sat 22 Oct 2022 04:34:37 +0000
ROA not before: Sat 22 Oct 2022 04:29:37 +0000
ROA not after: Sat 21 Oct 2023 04:34:37 +0000
asID: 63473
IP address blocks: 31.220.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:38:1c:9f:ec:7c:18:b8:ed:a8:60:b9:e8:48:1d:71:2b:8b:b3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Oct 22 04:29:37 2022 GMT
Not After : Oct 21 04:34:37 2023 GMT
Subject: CN=B82F1F372007291F12A928B3F5BC8F54B5FCBB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:78:e5:d5:62:bc:3f:15:d3:92:59:75:4d:
35:53:bf:16:45:d4:a4:0f:9b:96:7f:99:c7:cb:0e:
dc:cf:66:e8:d3:b1:fc:18:3e:1f:fb:55:3e:01:5f:
1e:0d:36:17:06:7e:76:12:61:c5:bf:67:b9:33:0f:
be:8b:bb:03:16:b1:53:b3:34:54:e1:38:a3:b0:10:
0e:2c:71:23:4b:ba:f2:9f:e4:50:98:12:4d:1b:83:
15:8c:8b:f5:95:ba:6d:ca:aa:e3:52:8b:f5:6c:b4:
1e:5d:1f:4d:46:a3:fb:6d:cf:ee:17:3b:d5:a2:24:
e8:49:e4:84:6b:e0:37:71:03:73:89:fc:ed:1d:32:
55:32:43:88:48:20:23:9c:c4:44:d0:b5:78:4a:c8:
d6:84:ca:27:c3:1f:f0:40:5f:58:f3:71:71:25:11:
a6:28:db:d6:27:0a:bd:ba:c5:d4:0a:69:fc:ba:9c:
36:fc:15:0e:0d:ce:e0:1b:32:f1:36:6e:73:d2:29:
b5:06:c7:2d:56:94:d4:6c:0f:30:92:32:ba:cc:ca:
4c:8d:f7:13:10:85:49:a8:54:be:19:ff:7c:0e:67:
93:de:eb:68:32:b6:26:41:fb:fc:44:39:e4:8f:ab:
f4:be:a9:89:6d:77:91:a0:67:68:27:de:1c:a0:fc:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:1F:37:20:07:29:1F:12:A9:28:B3:F5:BC:8F:54:B5:FC:BB:9A
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e34342e302f32332d3233203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:18:4f:50:4a:16:7d:f5:29:2d:f2:7b:2c:25:21:06:83:89:
24:d9:0b:5d:10:f5:74:7d:54:2c:17:71:55:bb:cf:09:a4:18:
a9:91:58:fa:04:0d:8d:b9:97:77:ff:73:d8:1d:7c:e7:58:d7:
aa:d5:0e:8c:7a:91:1a:42:75:4e:59:22:68:14:fb:73:c9:6f:
8d:31:e8:17:80:dd:e7:f9:60:67:de:5e:55:2a:70:29:75:22:
4f:f3:64:66:ab:72:55:22:b3:27:bc:6c:35:c8:cd:b3:4d:9b:
62:d7:6d:2e:c8:ce:e5:d7:3f:58:ab:bf:cc:a4:76:49:ad:f4:
25:76:bf:41:29:ac:eb:c7:79:e9:80:51:76:f4:98:b3:cd:f1:
77:f0:91:0b:6c:e2:99:c6:9a:09:1f:29:0e:80:42:a9:1c:f4:
56:b1:7a:a5:f3:c0:61:d3:a3:c0:eb:1e:1a:81:62:9e:f2:6f:
8f:a8:18:72:b6:87:58:69:9d:34:56:2a:cc:0f:b9:3f:e5:dc:
39:ab:22:35:c5:f8:97:9f:e1:06:1e:04:6e:b0:1b:b3:88:66:
fb:15:74:96:44:77:d0:64:44:f2:71:23:b6:a7:5d:22:07:15:
c3:b9:56:26:e9:7e:fc:29:fa:41:1b:2c:ac:f9:6f:95:30:6f:
0a:24:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:48:36 2025 by rpki-client