Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e38342e33382e302f32332d3234203d3e20313336373837.roa
File: 34352e38342e33382e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: So/sXlz0NOCjV+sLHSTFr1ROOrR5+/W+pZJRqNws9M8=
Subject key identifier: 31:49:B3:B9:D5:1D:B7:3A:36:DA:A4:43:CE:AC:FF:45:D8:99:F9:5F
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0F924113D523015AAAAD8183045E60D81E924C6A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e38342e33382e302f32332d3234203d3e20313336373837.roa
Signing time: Mon 07 Nov 2022 10:55:33 +0000
ROA not before: Mon 07 Nov 2022 10:50:33 +0000
ROA not after: Mon 06 Nov 2023 10:55:33 +0000
asID: 136787
IP address blocks: 45.84.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:92:41:13:d5:23:01:5a:aa:ad:81:83:04:5e:60:d8:1e:92:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Nov 7 10:50:33 2022 GMT
Not After : Nov 6 10:55:33 2023 GMT
Subject: CN=3149B3B9D51DB73A36DAA443CEACFF45D899F95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:a6:8d:dd:af:f5:fd:19:85:41:67:0a:2a:
93:5e:0a:7f:26:37:fd:cd:cb:a4:35:43:06:f9:45:
39:3c:7e:72:56:1b:45:9f:2a:1b:2b:f4:2f:14:31:
b0:39:2e:80:84:32:6e:1d:e4:58:b2:10:16:56:5d:
71:a0:47:a8:39:a3:77:2e:65:f6:bf:f4:cf:05:15:
24:6c:94:8e:73:3b:e0:7e:7f:9d:e8:b4:fa:1b:5b:
a3:20:7a:16:ea:06:07:5b:bd:76:c3:41:94:d5:dc:
59:69:cd:03:2c:54:cc:7c:0e:b7:a4:4e:04:ce:74:
98:e6:83:27:ae:1d:3e:4e:ae:5a:df:e1:95:7e:fb:
0f:3a:69:1e:0a:3d:49:f1:8b:b2:4a:2b:74:4b:98:
82:16:e5:02:ba:3c:fd:b0:74:6f:61:a5:9d:8a:97:
f3:b7:17:bf:12:6a:fe:15:6d:1d:4a:84:a8:e5:fd:
67:ca:80:be:75:8d:96:e8:4f:d8:e5:d5:0c:b7:da:
55:fb:ac:99:33:71:a2:15:12:0f:7a:b4:03:bf:58:
5e:4c:ad:20:bd:5b:2a:4e:ec:93:96:40:6d:af:8c:
ec:05:81:41:c7:1a:73:42:7b:4c:ca:0f:70:cc:c3:
d1:12:a1:63:dc:d6:68:16:ae:1a:6c:08:14:8f:fb:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:B3:B9:D5:1D:B7:3A:36:DA:A4:43:CE:AC:FF:45:D8:99:F9:5F
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e38342e33382e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.38.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:e0:ad:79:13:5e:f2:ce:04:2e:47:5e:19:09:be:e4:ee:fa:
93:fb:d7:59:dc:ef:0d:67:9d:97:65:ae:49:47:2e:c3:17:78:
bb:94:dc:a5:e6:a0:cd:dd:ca:74:aa:de:ec:4d:ff:da:3e:92:
d3:10:5f:dc:df:07:67:d4:32:42:b6:f6:86:03:18:9d:1a:aa:
0e:8f:6e:d4:ed:49:21:17:d3:ce:d2:6b:04:a0:ef:03:25:18:
00:3c:d5:0e:73:29:76:71:b0:e9:b3:ac:a9:66:cc:ee:f0:29:
39:b6:f6:84:80:6e:70:38:00:9c:54:9c:10:4f:c6:1b:8c:77:
0d:c4:a9:0a:49:74:8b:a7:b4:f2:c0:3e:c0:a4:0f:ce:b0:a7:
ab:f1:20:9c:17:9d:45:5c:0c:73:62:b6:54:2e:f2:26:a7:70:
29:5f:ac:ba:4b:c4:39:6c:9c:53:43:fc:04:f3:d2:06:3e:c8:
f2:22:ce:36:f7:c6:3c:0b:d7:f5:61:ec:3c:1a:69:c5:16:3f:
14:30:a5:76:13:e4:68:ae:ee:3a:62:79:97:bc:0b:af:c9:64:
c8:73:01:74:d8:79:86:cf:ca:39:68:6a:87:fd:59:e9:91:63:
3c:98:6e:cd:4a:a4:d8:d6:54:65:55:9f:40:61:f1:34:44:0e:
e5:c6:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:00:30 2025 by rpki-client