Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e3134362e31352e302f32342d3234203d3e2030.roa
File: 3139342e3134362e31352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: RJxtt4r2CJ7p3kJcFZ8gqeE/rCewO7nRaDKVr85CfdA=
Subject key identifier: C5:60:64:A2:20:28:F9:7A:A8:C6:AA:EE:EB:B1:09:90:18:8F:5E:15
Certificate issuer: /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial: 4621474A9B753AFEC0055E90D91980ACF144CCC3
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3134362e31352e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 16:04:05 +0000
ROA not before: Fri 03 Mar 2023 15:59:05 +0000
ROA not after: Fri 01 Mar 2024 16:04:05 +0000
asID: 0
IP address blocks: 194.146.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:21:47:4a:9b:75:3a:fe:c0:05:5e:90:d9:19:80:ac:f1:44:cc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
Validity
Not Before: Mar 3 15:59:05 2023 GMT
Not After : Mar 1 16:04:05 2024 GMT
Subject: CN=C56064A22028F97AA8C6AAEEEBB10990188F5E15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:12:e7:5c:4d:6f:b5:01:69:6e:97:6a:dc:
57:69:9a:59:e5:c3:f4:83:b0:93:d9:8b:1f:51:7a:
44:da:66:2f:b5:03:1b:a2:48:82:d1:86:f1:7a:18:
d7:26:37:03:b9:44:cd:d3:e0:a5:ee:66:f9:58:68:
99:8a:25:d3:77:d9:73:1e:4d:c6:bb:22:d5:61:bf:
2d:a7:2c:7e:74:23:a3:aa:c1:3d:e2:6e:34:34:04:
10:60:37:be:0f:81:5a:78:b4:61:0e:ea:cc:35:59:
e5:df:59:ae:8c:04:1f:1a:da:53:2f:f8:3d:79:80:
7e:4c:4b:08:71:10:ef:ba:34:ce:bd:c9:2a:02:2e:
fb:74:9b:38:c0:b8:b5:ea:2f:36:bc:62:cf:0c:f3:
f4:b2:95:2b:9c:ed:28:f9:37:7e:c2:f4:4b:9d:4b:
cc:cd:51:c3:9d:96:74:cf:34:0e:ee:36:54:9f:9c:
78:84:0c:a2:84:5b:08:33:8e:a5:60:32:eb:b4:16:
41:e5:33:8c:85:63:2c:cd:09:b2:90:d0:65:b3:d4:
ca:62:6a:63:c6:72:fd:82:3d:12:7c:e7:8c:76:e0:
ca:d2:2f:2c:f4:5d:5d:e0:98:2d:f3:a2:f4:41:69:
27:d9:f7:62:47:59:2c:00:c1:2f:c8:6a:99:1c:33:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:60:64:A2:20:28:F9:7A:A8:C6:AA:EE:EB:B1:09:90:18:8F:5E:15
X509v3 Authority Key Identifier:
keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3134362e31352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6e:3c:de:17:e9:f1:a0:d5:03:b9:c9:2c:ce:12:6c:40:d7:
96:40:a4:c0:e6:42:aa:33:c0:a8:3c:8e:63:bf:4b:a4:c6:07:
d9:e1:94:b2:20:c7:74:77:fd:b0:02:17:ce:94:48:b1:86:00:
e5:76:e1:16:0f:87:86:73:13:67:c8:b1:73:3d:22:f4:13:c2:
23:d5:aa:82:14:bd:03:ba:6c:18:74:96:92:35:78:e9:c9:0c:
40:35:57:98:82:7d:00:6b:f7:db:a5:5b:9b:21:d7:90:16:5f:
e1:d9:87:14:13:24:09:40:7e:79:1a:84:aa:fc:00:20:81:e9:
e5:59:5c:1c:c7:a4:70:e7:17:61:e9:1e:49:7b:97:0f:32:77:
9c:93:f2:04:3d:00:4b:79:e9:5f:06:0a:ad:55:96:09:9c:23:
f4:79:51:ed:4f:08:a7:e0:6d:5a:9e:50:e4:00:23:1d:ff:74:
e4:88:72:b6:4e:4d:dd:82:0e:5a:e2:46:74:0f:f3:f3:4c:c3:
10:af:2f:12:b9:d1:f0:72:2e:8c:c3:65:36:ef:36:3a:78:4f:
c6:71:46:18:ac:cf:94:c5:1c:dc:d2:c6:cd:d6:e7:d4:c2:94:
0d:9f:de:46:5c:68:9f:13:b8:5a:8a:21:90:38:a2:5f:ef:42:
05:b8:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:01:38 2025 by rpki-client