Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3232203d3e2030.roa
File: 3139332e35382e3133322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: F80j74BWCkfkFeYikrV0Rdy62Sl0UesWPbtPphSFD6E=
Subject key identifier: CF:7D:17:05:F1:9C:A3:11:8C:C6:9F:CC:D1:F4:17:D0:6E:0C:CA:22
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 6DDAD4B38B4267808D3FF73B267F0089C70E65C5
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3232203d3e2030.roa
Signing time: Fri 15 Jul 2022 11:59:06 +0000
ROA not before: Fri 15 Jul 2022 11:54:06 +0000
ROA not after: Fri 14 Jul 2023 11:59:06 +0000
asID: 0
IP address blocks: 193.58.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:da:d4:b3:8b:42:67:80:8d:3f:f7:3b:26:7f:00:89:c7:0e:65:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Jul 15 11:54:06 2022 GMT
Not After : Jul 14 11:59:06 2023 GMT
Subject: CN=CF7D1705F19CA3118CC69FCCD1F417D06E0CCA22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:90:6c:08:64:db:d3:2e:56:7e:d6:3f:68:
dc:76:f2:aa:3d:a4:6f:fd:ca:c0:9e:7f:cb:ab:a6:
a4:cb:35:3f:d6:b0:aa:fa:52:f5:fb:f9:e7:d0:9d:
e3:00:4a:97:ae:e2:2c:19:d0:a8:7a:60:6a:78:49:
a9:87:ce:05:80:38:ca:01:1b:9a:8e:d5:69:92:2b:
c6:ee:2b:c2:f9:d6:ed:77:0d:0a:9b:dc:b6:3a:de:
2c:e3:4e:25:52:28:94:b9:ea:15:1b:a0:46:39:1e:
f9:51:83:4f:1b:40:db:1f:11:4e:4d:fd:8b:ec:0e:
2c:b5:fc:8c:ab:96:56:e1:87:41:44:81:cf:bf:19:
ec:55:5f:8c:b8:86:3d:42:a6:80:9c:68:3d:4a:f7:
a8:2b:c1:73:09:8b:f1:b7:1b:a0:0a:bb:9a:78:7e:
c9:00:b4:ba:ee:fe:8c:94:f4:a2:96:90:47:aa:8a:
db:0e:1e:a0:06:1f:1b:5a:37:a5:98:67:33:20:79:
9b:9c:72:68:0d:03:7e:d7:b9:1e:ed:ba:0f:f7:aa:
db:ef:f0:f9:52:e9:0b:2a:94:14:88:b2:25:76:66:
4e:f2:c5:31:c2:a4:74:c0:5d:f4:a6:40:5f:53:a4:
d6:24:a6:a2:54:d9:03:b5:0c:c4:4b:40:7a:1f:9f:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7D:17:05:F1:9C:A3:11:8C:C6:9F:CC:D1:F4:17:D0:6E:0C:CA:22
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e35382e3133322e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:6b:29:47:a1:6e:ca:ab:bf:f0:2e:71:0d:35:5b:20:c5:ac:
7c:42:78:3c:99:9e:a4:4f:ad:75:0c:8e:c9:2f:50:00:84:44:
dd:ff:23:63:88:2e:ff:ad:32:0b:dd:b9:04:43:cc:86:9c:35:
27:e3:fe:d3:2e:35:f3:b6:a8:70:ab:1a:a0:62:7c:03:45:8a:
e8:ac:e4:d3:fd:49:cb:b3:22:da:66:cb:0f:92:a3:95:9c:77:
20:61:96:93:a8:cf:da:60:16:85:e7:5d:e4:df:bf:80:1a:19:
3f:c0:c4:4d:23:a3:57:df:83:ae:a3:b8:80:c5:26:8f:12:7a:
58:87:6e:68:62:86:c2:b3:03:b7:27:da:2e:82:56:c3:95:41:
1a:0b:85:a5:64:fe:14:43:e5:87:d8:5f:97:de:3b:ee:ce:eb:
4c:fe:96:f9:d8:4d:63:2f:e5:3f:f0:c5:d3:c2:d9:a8:31:0c:
57:1e:48:2d:73:0e:76:3a:56:bd:88:a3:dd:65:13:81:57:a0:
5d:ae:21:ad:37:be:77:3c:f8:ec:cb:9f:2a:db:8b:a6:40:44:
6c:f0:b9:09:e8:04:d4:d6:29:8a:12:15:92:eb:e6:22:c1:4a:
07:85:e6:b5:d5:ca:9d:30:c9:08:e4:32:54:38:56:f9:a1:93:
dd:60:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:39:25 2025 by rpki-client