Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa
File: 3139332e33362e3233382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: pW6+U8dIqYz0XxrqsscPHtHfdoZ0VYQ/Mk0/KlVPJos=
Subject key identifier: 7F:C5:7A:FB:1B:62:17:98:48:CD:78:53:5C:B4:D7:57:F0:E7:D2:6A
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 2B82B5E09EA2531A7FF56B5469EB0083CA33FC09
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:55:22 +0000
ROA not before: Fri 03 Mar 2023 15:50:22 +0000
ROA not after: Fri 01 Mar 2024 15:55:22 +0000
asID: 0
IP address blocks: 193.36.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:82:b5:e0:9e:a2:53:1a:7f:f5:6b:54:69:eb:00:83:ca:33:fc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:50:22 2023 GMT
Not After : Mar 1 15:55:22 2024 GMT
Subject: CN=7FC57AFB1B62179848CD78535CB4D757F0E7D26A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:c9:09:47:75:c9:04:de:02:c4:ca:ac:42:
9b:f1:dd:cc:f6:eb:58:14:11:dd:48:ff:6c:4f:5f:
8d:d1:81:20:9d:3d:53:58:87:b7:91:18:1b:b4:28:
f2:a9:2c:de:ef:07:c3:08:8c:8d:a1:1b:ac:14:24:
05:2e:3d:65:3f:b8:af:87:5a:be:df:72:d8:87:6c:
84:1c:8b:1d:30:45:d9:5f:7b:00:78:80:59:0a:12:
11:29:3b:c3:93:ff:82:e7:e0:1e:22:be:c8:a3:32:
3c:51:d4:f8:98:aa:6a:b7:e4:25:36:99:78:ed:ca:
e4:53:4d:46:c1:43:b1:f3:df:37:b5:1c:fc:99:af:
3d:3d:4e:e9:cc:b9:18:ec:32:fe:99:10:10:35:59:
50:0b:a7:97:1c:d6:d6:a8:4d:b9:46:8d:4e:b0:e0:
2b:6d:92:aa:86:ec:cb:2d:c7:60:19:45:07:76:a1:
cf:35:c1:1c:da:da:d0:bd:7b:89:88:c2:f0:87:5f:
98:db:cf:03:5d:0b:86:1a:87:17:22:cc:73:0e:ed:
43:92:f6:56:7d:49:e5:c1:36:62:b3:5f:80:97:c0:
da:ba:bc:82:ac:fc:98:84:bb:7a:6f:50:d3:95:15:
88:72:2f:d0:7d:29:2d:8b:0a:d4:f6:6c:4f:99:59:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C5:7A:FB:1B:62:17:98:48:CD:78:53:5C:B4:D7:57:F0:E7:D2:6A
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.238.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:c4:fc:f7:ea:7b:cb:6d:4a:c0:5b:3c:cf:c6:f0:15:48:f7:
3f:8b:1e:de:af:34:6b:fe:33:5a:2b:bb:ee:9a:a0:0f:51:2a:
fc:f9:61:bd:81:0f:e5:d0:ba:67:66:46:a8:7a:8e:f2:3e:d2:
2b:81:fa:e3:ea:cf:29:20:2e:00:bc:73:89:f9:0d:65:3c:fa:
e0:b5:3b:df:7c:a6:37:c9:5f:b3:51:19:de:b7:bc:e4:aa:f7:
0e:8d:74:74:aa:36:c3:19:65:ea:e2:ed:c0:8f:be:3d:eb:d3:
b2:1f:fa:2f:2d:df:e5:18:07:33:a1:b8:ec:00:60:06:54:2e:
c3:4e:70:fe:74:d0:0a:84:c2:9d:94:4e:b3:df:07:20:87:04:
75:b9:b5:a6:57:24:d2:72:52:38:16:cb:b1:1c:2b:20:e4:89:
ab:9a:31:1c:3a:af:f3:60:23:e0:d8:c6:46:a3:2a:a1:aa:c0:
87:b0:6f:5b:2d:ef:b9:bf:cc:a2:b1:69:b2:ad:92:2e:be:94:
46:f7:92:ef:e4:11:4c:8d:0b:c7:4f:19:76:3c:f2:dd:f4:84:
09:0f:f0:42:20:01:df:a5:7a:7f:50:07:e6:1c:6c:91:be:35:
9e:04:86:85:7f:02:0f:a3:38:a1:cf:a3:a4:61:83:37:37:26:
16:19:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:23:59 2025 by rpki-client