Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/39312e3133322e302e302f32322d3234203d3e2030.roa
File: 39312e3133322e302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: pBj70yMTvL4HvKr7n5pa+c1lVcXV+z8uUjPnCLsjIJc=
Subject key identifier: 7B:8E:EC:04:50:07:F5:CA:D0:85:A4:C8:60:50:7B:1A:F7:68:60:FA
Certificate issuer: /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial: 05DDE1BD60CE42189F1C91AA30B7ED5A6769EC36
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3133322e302e302f32322d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:57:26 +0000
ROA not before: Fri 03 Mar 2023 15:52:26 +0000
ROA not after: Fri 01 Mar 2024 15:57:26 +0000
asID: 0
IP address blocks: 91.132.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:dd:e1:bd:60:ce:42:18:9f:1c:91:aa:30:b7:ed:5a:67:69:ec:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
Validity
Not Before: Mar 3 15:52:26 2023 GMT
Not After : Mar 1 15:57:26 2024 GMT
Subject: CN=7B8EEC045007F5CAD085A4C860507B1AF76860FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:0c:0e:e9:7f:b1:aa:02:19:79:b5:ea:ba:
1f:ae:c3:9d:fd:48:2d:25:f2:45:9e:fa:d1:ab:9a:
8e:a8:76:43:11:87:b3:02:e0:1f:45:a1:50:d2:26:
b7:44:b9:e2:5c:2e:27:cd:c5:1e:47:dc:67:21:7f:
9e:2b:a3:d1:da:db:94:80:43:6c:97:b1:1e:e4:d4:
ff:63:49:14:49:08:2d:2f:3a:67:bb:7e:6a:02:be:
13:f7:b6:26:4a:1e:7c:fc:10:27:61:76:98:3d:db:
e6:52:df:a6:54:60:c4:67:ef:2c:ef:b2:cc:db:70:
42:32:a8:e9:39:8d:7a:f0:4b:a4:be:a8:53:dc:d3:
0e:f6:9c:3b:a5:f0:8e:0e:e6:9b:3c:47:3f:92:b1:
9e:75:3e:6d:7d:eb:44:55:c8:62:49:e4:87:c2:42:
c9:80:0b:12:8d:b5:85:a2:f9:90:16:3a:65:3d:f3:
ec:5f:ec:75:fb:12:0d:bd:12:d6:92:6c:ad:8c:1f:
ba:18:05:6c:a0:b2:7a:19:b9:41:89:d9:1b:d0:8c:
6b:fc:b4:47:df:83:99:49:db:a9:be:5b:36:55:4f:
28:1b:e2:54:6c:c0:64:49:f4:70:dd:7e:b0:92:ab:
49:09:29:21:9f:11:17:84:50:c1:58:83:fb:4e:b2:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8E:EC:04:50:07:F5:CA:D0:85:A4:C8:60:50:7B:1A:F7:68:60:FA
X509v3 Authority Key Identifier:
keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3133322e302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.0.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:cc:98:6f:f5:aa:0d:66:ea:8b:38:e8:dd:f3:21:86:a6:0c:
d8:81:59:d9:18:31:42:e4:98:17:03:5b:e9:b7:ac:58:0d:8b:
3f:d3:7a:a1:ab:9a:ff:9a:96:cd:13:fa:20:6d:55:20:46:97:
06:5a:de:77:27:0c:71:42:a4:62:58:8f:48:83:92:37:bc:e6:
66:f5:f9:0f:2f:c1:4e:df:97:43:07:b1:9d:79:a8:4b:e9:d0:
4e:08:e0:20:68:0d:57:7d:63:12:06:7a:5e:05:73:7a:34:6f:
60:91:7c:57:a8:df:4d:4c:6f:ef:2c:cc:45:ff:50:01:da:9e:
db:fd:a9:c4:73:f3:af:63:74:1e:77:ad:d5:45:db:0d:60:bd:
19:2c:2c:34:8e:bc:c9:68:fe:f7:9b:c5:6b:18:0b:60:7f:a6:
31:f6:09:09:d1:6f:cb:0b:30:95:0b:1c:91:dc:48:3c:68:49:
17:27:83:79:a8:fe:05:65:33:e2:b0:38:30:c9:e2:42:e6:05:
fc:a8:2c:d3:4a:6c:bf:d0:97:95:f4:c8:47:1b:2f:2b:85:5c:
69:06:b1:4d:00:25:a5:ac:c6:16:61:a6:37:92:ee:b2:1d:ef:
bf:3b:f2:57:0f:40:c6:5a:ca:2b:d7:44:74:b5:c0:82:c5:56:
1c:be:e3:f8
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUBd3hvWDOQhifHJGqMLftWmdp7DYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMzAzMDMxNTUyMjZaFw0yNDAzMDExNTU3MjZaMDMxMTAvBgNV
BAMTKDdCOEVFQzA0NTAwN0Y1Q0FEMDg1QTRDODYwNTA3QjFBRjc2ODYwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+gwO6X+xqgIZebXquh+uw539
SC0l8kWe+tGrmo6odkMRh7MC4B9FoVDSJrdEueJcLifNxR5H3Gchf54ro9Ha25SA
Q2yXsR7k1P9jSRRJCC0vOme7fmoCvhP3tiZKHnz8ECdhdpg92+ZS36ZUYMRn7yzv
sszbcEIyqOk5jXrwS6S+qFPc0w72nDul8I4O5ps8Rz+SsZ51Pm1960RVyGJJ5IfC
QsmACxKNtYWi+ZAWOmU98+xf7HX7Eg29EtaSbK2MH7oYBWygsnoZuUGJ2RvQjGv8
tEffg5lJ26m+WzZVTygb4lRswGRJ9HDdfrCSq0kJKSGfEReEUMFYg/tOshzpAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUe47sBFAH9crQhaTIYFB7GvdoYPowHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmBy
c3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC83
LzM5MzEyZTMxMzMzMjJlMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAluEADANBgkqhkiG9w0BAQsFAAOCAQEAyMyYb/WqDWbqizjo3fMhhqYM
2IFZ2RgxQuSYFwNb6besWA2LP9N6oaua/5qWzRP6IG1VIEaXBlredycMcUKkYliP
SIOSN7zmZvX5Dy/BTt+XQwexnXmoS+nQTgjgIGgNV31jEgZ6XgVzejRvYJF8V6jf
TUxv7yzMRf9QAdqe2/2pxHPzr2N0Hnet1UXbDWC9GSwsNI68yWj+95vFaxgLYH+m
MfYJCdFvywswlQsckdxIPGhJFyeDeaj+BWUz4rA4MMniQuYF/Kgs00psv9CXlfTI
RxsvK4VcaQaxTQAlpazGFmGmN5Lush3vvzvyVw9AxlrKK9dEdLXAgsVWHL7j+A==
-----END CERTIFICATE-----
Generated at Tue May 13 23:37:11 2025 by rpki-client