Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa
File:                     38322e3138302e3136342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          a49M6jeJBCQ7nrjZr5DO+oZUyOLbMEA6QzIyGQgmtzM=
Subject key identifier:   F0:02:F8:0A:84:51:C6:47:E5:1E:3D:BE:C9:26:9D:1B:D1:25:3C:DE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0DB5DC9E8F655BCECCF3D76A333015B384925E7A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:20 +0000
ROA not before:           Sat 22 Oct 2022 04:29:20 +0000
ROA not after:            Sat 21 Oct 2023 04:34:20 +0000
asID:                     47583
IP address blocks:        82.180.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b5:dc:9e:8f:65:5b:ce:cc:f3:d7:6a:33:30:15:b3:84:92:5e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:20 2022 GMT
            Not After : Oct 21 04:34:20 2023 GMT
        Subject: CN=F002F80A8451C647E51E3DBEC9269D1BD1253CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:13:d0:30:dc:9d:5c:b8:21:dc:00:f3:96:
                    47:dc:d3:9f:f6:e4:d9:71:6a:0e:cf:c2:78:31:4e:
                    09:73:eb:ee:39:3d:12:5f:58:03:20:49:6c:9d:bb:
                    17:56:a1:1d:97:5e:c3:53:94:50:a5:7e:08:ce:cf:
                    97:8d:23:83:c1:2a:bc:db:c5:ee:75:bd:5f:d6:50:
                    0b:d6:e7:53:c8:0c:15:10:63:f7:f5:12:e5:00:6c:
                    27:00:10:e3:3e:d9:e3:49:99:4b:df:9f:32:1c:1c:
                    0d:51:ed:be:26:4d:45:be:1f:29:88:7a:8b:64:b2:
                    49:a7:da:51:44:ca:3a:5c:9f:d0:45:49:af:16:06:
                    fc:10:78:fc:fc:fe:a8:61:02:24:ed:17:c1:6a:d3:
                    b2:8f:e2:22:7c:77:f0:3d:8b:22:9c:2e:f0:75:b6:
                    9b:38:ce:db:22:ed:19:be:86:44:86:f2:c4:cd:0c:
                    f7:2a:75:d2:58:ba:bd:68:16:46:f9:c3:66:6f:9f:
                    36:31:cc:f6:c1:d6:5a:66:ca:66:d2:30:4b:80:61:
                    93:6f:fd:65:da:3d:65:7e:87:eb:2a:51:95:12:77:
                    e9:1c:0a:60:da:f8:2a:cf:60:44:50:56:2c:fd:da:
                    6e:3b:13:9c:da:83:d1:2a:ea:3b:a8:09:c1:6d:e8:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:F8:0A:84:51:C6:47:E5:1E:3D:BE:C9:26:9D:1B:D1:25:3C:DE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:70:10:c8:b4:8c:b0:be:e0:53:db:e9:83:b5:91:c1:26:ce:
         96:6b:86:d5:3d:27:25:28:b6:fc:c5:c1:74:67:41:ee:6d:a7:
         f8:ea:a9:fc:84:3d:f4:84:26:9a:49:d9:a0:da:0f:8c:69:1a:
         e8:2e:9f:21:2c:76:03:db:1a:00:31:73:6b:80:29:f3:e4:da:
         e6:88:84:26:6e:da:f6:51:39:e3:70:18:32:19:8b:03:54:4a:
         2b:13:85:79:25:fa:ad:04:d8:da:56:4b:b0:1d:62:93:e3:46:
         8b:bd:29:9e:99:2c:e4:5a:b5:5b:33:f8:2c:9b:42:1f:1d:e5:
         4c:85:08:d2:ca:62:29:80:ad:f9:db:27:0a:1b:93:9d:fc:8e:
         53:69:2e:63:c9:02:5f:a3:62:58:56:b3:f1:04:58:8c:63:01:
         32:96:28:22:e5:cd:0e:d2:21:a2:48:e2:de:25:56:e2:fc:fd:
         9f:ce:a4:8d:3e:a4:ea:cb:a2:ea:eb:c7:c5:f1:fc:ec:3b:b9:
         2c:a6:08:53:fc:5c:a6:6f:b2:80:a4:c0:be:66:30:35:31:60:
         4e:b6:48:1a:75:98:b3:f2:53:5a:8f:e6:f7:6c:7a:1d:e6:ff:
         68:8d:ac:39:29:b3:5e:37:51:57:1f:0a:0b:7d:b2:96:95:ac:
         32:13:90:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:57:42 2025 by rpki-client