Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233372e3235322e302f32332d3332203d3e203531313637.roa
File: 3138352e3233372e3235322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: RQOUdoZ458Im+eWoM4aWI60DY52VZ7lONpuGYqIEPfI=
Subject key identifier: 81:CF:04:DD:D8:7E:F5:7B:6E:DE:03:CE:41:FD:04:0A:32:FB:C3:6B
Certificate issuer: /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial: 11EB70941368B5B0C79B8F101DCB51FCECDD179C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233372e3235322e302f32332d3332203d3e203531313637.roa
Signing time: Sat 22 Oct 2022 04:33:19 +0000
ROA not before: Sat 22 Oct 2022 04:28:19 +0000
ROA not after: Sat 21 Oct 2023 04:33:19 +0000
asID: 51167
IP address blocks: 185.237.252.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:eb:70:94:13:68:b5:b0:c7:9b:8f:10:1d:cb:51:fc:ec:dd:17:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Validity
Not Before: Oct 22 04:28:19 2022 GMT
Not After : Oct 21 04:33:19 2023 GMT
Subject: CN=81CF04DDD87EF57B6EDE03CE41FD040A32FBC36B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:30:f7:ce:47:f3:83:41:50:4f:34:09:e1:
2f:4b:d5:7f:41:c6:f8:8e:fc:02:a5:59:e4:d3:d2:
75:6c:e9:a7:d7:f3:1e:8a:c1:e2:bb:7f:c6:e9:6f:
46:53:ed:0a:c2:f0:da:59:6e:5b:db:51:ad:04:c8:
e8:b5:64:fa:71:c5:42:08:fc:ec:da:2e:56:df:fb:
1e:c4:a2:e5:b0:fc:56:bd:58:6f:cb:e3:71:fc:9f:
87:93:91:e0:be:86:0a:b9:8a:05:87:99:35:e5:d0:
80:fb:c3:e3:42:ec:18:3e:0e:96:b1:1b:50:75:c7:
14:be:c4:e6:09:ff:b0:44:1d:80:89:c4:36:5f:f8:
79:4f:cf:ac:b0:5c:f3:34:24:92:98:b3:27:60:c0:
11:48:c6:1f:aa:63:7e:93:89:8d:0f:0a:25:44:57:
36:49:fe:a7:fe:db:a5:6f:05:ca:d8:51:c2:7d:3f:
13:b8:2c:0f:f0:34:0a:64:11:51:d2:70:01:28:0d:
0c:4f:ab:45:f1:71:a1:85:65:06:b9:2b:8f:92:05:
06:74:b3:dd:b1:81:62:53:70:16:a2:ea:94:24:ce:
92:eb:d8:50:16:29:b5:38:d8:ac:91:a8:81:42:49:
70:8e:69:96:91:bf:39:a2:bc:b4:78:78:c7:70:fa:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CF:04:DD:D8:7E:F5:7B:6E:DE:03:CE:41:FD:04:0A:32:FB:C3:6B
X509v3 Authority Key Identifier:
keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233372e3235322e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.252.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:d7:3d:09:ec:b3:1b:2f:b5:cb:1d:1d:8a:ce:bf:6b:77:2e:
6a:2c:28:35:a8:a8:ac:2f:9d:dd:18:5f:ff:a7:34:ab:d6:da:
fc:26:58:2f:30:32:57:d3:30:05:25:60:c1:b6:74:e6:87:9d:
3b:93:9b:c3:cf:e1:0e:ea:c3:3c:84:23:0c:c5:c3:47:75:9f:
90:4e:00:12:b4:96:ed:45:c3:9a:f5:95:a7:9f:17:87:bb:fb:
47:8e:6c:38:40:3a:d4:03:be:80:1b:9e:71:f9:1a:58:4e:70:
95:66:b0:ed:a7:18:17:5f:5b:06:58:7b:08:1d:17:f9:df:2b:
cc:f1:09:b4:cd:2f:22:19:c8:c5:a3:32:04:39:8b:ca:cb:d3:
08:26:09:28:8a:eb:de:cd:e5:cc:44:03:a8:a8:6e:07:6f:19:
2b:04:93:e0:01:6e:69:93:61:26:30:80:c1:b7:51:6f:fc:d4:
b6:8a:9f:7f:bd:71:dc:3c:7c:64:8e:73:54:3e:03:f3:97:9a:
bc:12:05:56:35:d8:f9:d2:35:6d:d7:e2:78:81:32:c5:ba:97:
3f:00:fb:56:34:79:f6:d7:3f:ed:2a:37:fc:c5:fc:b2:dc:bd:
e6:9f:71:b0:52:cb:08:af:37:9b:9f:f8:7a:e1:da:8b:08:96:
0a:e0:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:03:17 2025 by rpki-client