Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31302e302f32342d3332203d3e20313336373837.roa
File: 38362e34382e31302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: KXNtMN7Xu6VGe8woEIhmHAq5DRYUlibOvdkcO8edUJQ=
Subject key identifier: A1:25:5E:06:8D:B0:13:F7:CB:39:06:E7:29:D9:A5:A1:1E:27:74:CF
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 518D6141AC6C0FBDF15FDCE012283C0BB4FBB500
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31302e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 28 Dec 2022 09:44:43 +0000
ROA not before: Wed 28 Dec 2022 09:39:43 +0000
ROA not after: Wed 27 Dec 2023 09:44:43 +0000
asID: 136787
IP address blocks: 86.48.10.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:8d:61:41:ac:6c:0f:bd:f1:5f:dc:e0:12:28:3c:0b:b4:fb:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 28 09:39:43 2022 GMT
Not After : Dec 27 09:44:43 2023 GMT
Subject: CN=A1255E068DB013F7CB3906E729D9A5A11E2774CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:2c:5b:dc:9d:65:74:54:22:b7:9f:e1:3f:
ba:1c:00:2a:ef:b6:25:3c:92:fa:4d:e1:50:4b:87:
82:77:71:cf:27:ba:45:96:d3:5c:74:99:58:c0:82:
7d:13:78:d2:ee:33:a0:e9:aa:14:81:93:5f:9c:1a:
5e:ec:04:03:31:ad:39:7c:e1:d1:0f:10:18:ad:58:
54:45:70:d4:48:81:3a:50:a9:13:5a:ed:f0:6e:c0:
72:ef:ab:e2:ca:d2:b1:d4:3f:11:4e:3f:e0:21:7f:
35:8a:3c:2a:30:df:3e:48:70:7d:8b:36:fa:22:39:
90:fe:f7:84:d5:fc:ed:9c:7d:cc:1a:2f:fd:32:98:
bd:9a:3f:21:a6:73:33:f6:6d:5a:29:8d:c9:58:3b:
ba:19:54:b6:04:02:ed:94:76:3a:f8:a7:93:a0:b0:
d7:b1:74:af:23:b8:ba:86:f9:4d:da:6a:45:3b:94:
03:61:4d:0d:49:4a:05:66:3e:06:b8:32:46:d3:c6:
a2:d9:ce:d1:95:42:ed:7e:7f:3b:78:30:ad:90:ed:
4d:ff:94:03:98:59:59:c5:db:58:2c:c5:f2:ba:4b:
58:9f:7c:0c:0d:e9:9a:44:99:81:82:5a:00:c0:78:
d1:ae:f9:d7:95:04:00:a9:ba:c6:2a:cb:0c:4c:c6:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:5E:06:8D:B0:13:F7:CB:39:06:E7:29:D9:A5:A1:1E:27:74:CF
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31302e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.10.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9b:3b:9a:f4:45:5c:cc:83:54:3a:dd:42:3a:8b:9c:11:b3:
0e:d7:9e:88:3b:65:1a:a4:f9:01:ac:0f:0f:2c:1b:0d:9b:05:
a2:09:2b:e9:8e:d1:28:d9:8d:31:43:5c:b6:b0:9f:fa:27:e5:
38:a1:54:d8:58:84:29:d2:bf:23:c2:d5:d3:9f:d1:a9:93:dd:
5e:9f:db:09:80:89:45:de:6d:ab:5d:0a:5b:49:57:9e:6d:fa:
be:4e:5e:f1:8e:7a:20:93:56:76:f9:96:3c:fa:6b:76:c1:e5:
7f:10:9b:15:77:86:33:e9:76:f0:c0:46:4c:54:41:2b:c2:81:
0f:fa:9b:98:ad:9b:47:e5:37:3b:54:bf:1b:78:6b:6a:c3:85:
be:af:99:4f:25:2c:78:21:03:3b:d9:a7:7f:fc:16:ad:94:87:
b2:e8:49:22:81:77:1b:08:b7:cb:65:26:85:f5:d2:f4:e9:7c:
b4:93:ed:a2:5a:e6:d0:9e:57:c9:3d:a1:f4:14:b9:8c:1d:75:
d4:02:a1:38:2f:c3:46:fc:7b:00:ab:37:d1:0d:9f:e8:6c:79:
67:9b:71:f8:6e:51:65:b2:ca:9f:ef:e3:c9:a4:ed:bf:aa:5a:
fc:86:cc:db:82:8a:eb:fa:87:6a:e6:5d:3c:6b:9e:59:f4:58:
15:30:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:19:35 2025 by rpki-client