Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e392e302f32342d3332203d3e20313336373837.roa
File: 38362e34382e392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: d8kWelQtRlw/RybKFvppGsMLc74QtB7UXzdb0fdzQ10=
Subject key identifier: BA:49:C4:72:4F:96:0B:BE:F6:8B:E8:B9:14:C6:AF:34:E3:E5:74:59
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 583485D428ECEC12ABEFAA529AF55137B63D9419
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e392e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 28 Dec 2022 09:44:26 +0000
ROA not before: Wed 28 Dec 2022 09:39:26 +0000
ROA not after: Wed 27 Dec 2023 09:44:26 +0000
asID: 136787
IP address blocks: 86.48.9.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:34:85:d4:28:ec:ec:12:ab:ef:aa:52:9a:f5:51:37:b6:3d:94:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Dec 28 09:39:26 2022 GMT
Not After : Dec 27 09:44:26 2023 GMT
Subject: CN=BA49C4724F960BBEF68BE8B914C6AF34E3E57459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:fc:85:f3:b4:9e:2e:54:26:7f:e4:ec:6c:
3f:16:ba:eb:df:22:b8:c5:4a:cd:f0:34:3c:69:b5:
6f:66:11:dd:b0:68:f8:a7:5e:24:1d:3e:57:ef:88:
9f:ea:80:f3:5b:86:18:7f:92:a5:ee:9b:28:2b:55:
59:f0:0a:0e:0c:6d:60:23:fb:87:89:0b:45:ec:4c:
d0:41:81:e4:c4:1a:bb:d5:e5:73:e6:7d:dd:f9:c2:
a7:e1:06:0f:0b:68:91:e6:e9:f1:50:d9:d8:a8:54:
5b:31:61:13:47:b3:50:9d:00:90:69:c7:b6:20:dc:
48:c7:3c:e0:6f:67:8a:5b:05:17:72:3d:4b:40:e1:
d7:e7:8f:76:07:c0:29:55:2b:d2:65:55:ad:ef:2b:
e2:8e:50:31:f8:e2:56:7b:aa:6a:e8:0e:cc:78:59:
ff:d0:fa:7a:ed:49:82:27:0c:17:ba:82:d8:71:18:
a8:9b:59:bf:d2:c4:5b:96:33:40:40:ef:d2:3a:32:
ce:94:a7:f5:72:e8:a8:65:24:07:30:f0:67:9d:bc:
37:84:62:07:44:61:e3:8d:b5:d9:d0:14:a6:e5:3a:
d6:a3:ae:bf:55:74:99:87:5a:06:79:4b:43:bf:99:
18:54:ac:05:b1:01:64:fb:d9:c1:9a:ed:b3:6b:56:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:49:C4:72:4F:96:0B:BE:F6:8B:E8:B9:14:C6:AF:34:E3:E5:74:59
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a9:17:5c:1f:ef:87:e1:a5:23:94:41:cb:6b:a5:a6:58:bb:
9d:2c:d4:84:fb:dd:81:d9:0a:4f:91:06:cf:95:4a:cc:98:ce:
27:02:c4:ae:c8:6f:dc:98:2b:4e:32:8f:e7:68:68:3b:eb:f3:
fb:e9:9d:7e:43:30:b6:93:7a:82:0a:af:8f:9a:c3:a2:08:d1:
60:31:78:a9:d0:60:0c:18:95:ef:71:46:82:dc:1f:a5:d4:7d:
31:24:a7:29:d0:a5:86:d5:e1:33:7a:92:9a:b7:74:1a:c7:f1:
19:96:7c:4a:e7:84:62:85:7a:de:54:a0:70:fb:dc:a5:b8:ff:
ef:48:3a:49:ae:59:0d:06:d7:f2:f6:86:1e:72:0d:83:5d:12:
cd:dd:21:a8:92:ef:a2:a6:66:69:e2:8c:e0:90:46:36:55:83:
d6:0d:cf:a7:ae:03:67:2d:36:c5:e6:e3:47:94:62:8d:40:22:
18:77:0b:43:8c:4a:c1:09:82:8d:fa:89:d5:a7:a4:bc:49:24:
0c:3a:0d:b5:21:34:77:66:f7:9f:eb:47:5f:22:cb:47:18:10:
0b:15:50:52:b7:d8:b8:6f:7a:fb:fa:47:66:f7:6f:b5:68:06:
c5:c4:4c:b8:ab:34:61:9e:ad:03:fa:f1:74:9d:30:28:33:73:
4d:ac:72:0d
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUWDSF1Cjs7BKr76pSmvVRN7Y9lBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEyMjgwOTM5MjZaFw0yMzEyMjcwOTQ0MjZaMDMxMTAvBgNV
BAMTKEJBNDlDNDcyNEY5NjBCQkVGNjhCRThCOTE0QzZBRjM0RTNFNTc0NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZePyF87SeLlQmf+TsbD8Wuuvf
IrjFSs3wNDxptW9mEd2waPinXiQdPlfviJ/qgPNbhhh/kqXumygrVVnwCg4MbWAj
+4eJC0XsTNBBgeTEGrvV5XPmfd35wqfhBg8LaJHm6fFQ2dioVFsxYRNHs1CdAJBp
x7Yg3EjHPOBvZ4pbBRdyPUtA4dfnj3YHwClVK9JlVa3vK+KOUDH44lZ7qmroDsx4
Wf/Q+nrtSYInDBe6gthxGKibWb/SxFuWM0BA79I6Ms6Up/Vy6KhlJAcw8GedvDeE
YgdEYeONtdnQFKblOtajrr9VdJmHWgZ5S0O/mRhUrAWxAWT72cGa7bNrVgi7AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUuknEck+WC772i+i5FMavNOPldFkwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODM2MmUzNDM4MmUzOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3
MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAFYwCTANBgkqhkiG9w0BAQsFAAOCAQEAG6kXXB/vh+Gl
I5RBy2ulpli7nSzUhPvdgdkKT5EGz5VKzJjOJwLErshv3JgrTjKP52hoO+vz++md
fkMwtpN6ggqvj5rDogjRYDF4qdBgDBiV73FGgtwfpdR9MSSnKdClhtXhM3qSmrd0
GsfxGZZ8SueEYoV63lSgcPvcpbj/70g6Sa5ZDQbX8vaGHnINg10Szd0hqJLvoqZm
aeKM4JBGNlWD1g3Pp64DZy02xebjR5RijUAiGHcLQ4xKwQmCjfqJ1aekvEkkDDoN
tSE0d2b3n+tHXyLLRxgQCxVQUrfYuG96+/pHZvdvtWgGxcRMuKs0YZ6tA/rxdJ0w
KDNzTaxyDQ==
-----END CERTIFICATE-----
Generated at Tue May 13 18:01:18 2025 by rpki-client