Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/164/34352e39342e3136302e302f32322d3234203d3e20323031333431.roa
File:                     34352e39342e3136302e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          oE8gHwt+838C8OhC9+S9Ad+xZmoSiZuxHCNr38fOXSY=
Subject key identifier:   C9:4A:D0:E3:EF:4B:7E:E2:27:9B:A0:CF:2D:0A:6E:8E:15:9E:A5:81
Certificate issuer:       /CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Certificate serial:       7B126A07C9B4EC948763ED1584BB158F97CCBCCB
Authority key identifier: 7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/164/34352e39342e3136302e302f32322d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:11 +0000
ROA not before:           Sat 22 Oct 2022 04:28:11 +0000
ROA not after:            Sat 21 Oct 2023 04:33:11 +0000
asID:                     201341
IP address blocks:        45.94.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:12:6a:07:c9:b4:ec:94:87:63:ed:15:84:bb:15:8f:97:cc:bc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
        Validity
            Not Before: Oct 22 04:28:11 2022 GMT
            Not After : Oct 21 04:33:11 2023 GMT
        Subject: CN=C94AD0E3EF4B7EE2279BA0CF2D0A6E8E159EA581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:47:f5:49:36:ee:03:3b:8f:ec:87:4f:c9:
                    aa:40:75:c9:84:b8:87:05:a0:ec:0e:7c:7f:54:be:
                    db:a5:1c:b6:32:54:87:9c:99:a3:ad:23:cd:2f:16:
                    36:30:59:75:11:d4:3c:67:aa:90:2f:ff:f7:09:01:
                    69:47:e2:ef:94:b9:cf:28:f4:0f:f3:91:47:75:09:
                    a8:74:18:13:46:6a:7b:35:14:ab:d3:70:f0:a8:ad:
                    d0:92:7d:09:8c:a0:71:f0:2f:88:61:d2:15:c6:55:
                    54:a5:54:5a:25:1e:99:0f:f1:8c:92:c4:ab:b8:c0:
                    5f:ac:df:fe:95:40:4b:89:58:5a:fe:a7:fe:d3:aa:
                    65:3e:86:67:82:83:9c:44:1e:71:21:c6:3c:c9:4e:
                    7d:85:32:2a:3c:26:20:fd:cf:12:d0:42:21:f7:bc:
                    4e:c8:5f:52:3c:0d:5c:c7:2c:62:ef:88:97:7c:f5:
                    a2:bc:fe:99:ee:8a:42:dc:e8:ce:6a:de:85:f1:23:
                    02:94:ec:01:e4:cb:29:f8:b5:93:ff:03:4b:3d:11:
                    06:19:9c:3c:60:6e:96:ba:66:d3:33:d4:97:87:e9:
                    e3:09:ec:50:b2:4c:57:2d:65:b4:c5:ef:e8:53:9a:
                    54:68:d9:f3:5a:94:15:fc:91:a4:3a:50:4d:32:ec:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4A:D0:E3:EF:4B:7E:E2:27:9B:A0:CF:2D:0A:6E:8E:15:9E:A5:81
            X509v3 Authority Key Identifier:
                keyid:7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/7EBD1421D6EE46B714647FB7D198AE4601B63729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/34352e39342e3136302e302f32322d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:4a:0e:21:9d:f0:6b:65:93:b1:5f:06:fe:7d:2c:7d:f8:d6:
         4f:62:93:2d:64:4d:de:60:44:87:3e:3b:24:97:73:2b:94:f4:
         7f:1f:4e:41:dc:33:22:78:83:e1:59:2e:c5:8c:8f:59:ca:43:
         8f:ff:a0:47:82:6f:e8:c2:55:8b:a3:d3:df:70:ef:13:18:c3:
         f1:ed:17:b4:ef:b9:00:3c:86:14:9b:1b:39:19:26:42:fa:5a:
         6b:78:6b:80:b1:ed:01:17:dd:0a:54:ee:5a:01:f0:4c:65:1d:
         dc:26:85:ad:91:f9:ea:9d:4e:96:47:e0:80:ff:22:61:ff:88:
         99:ce:21:61:86:9b:46:68:f0:58:2d:ae:24:aa:7b:6b:bf:40:
         a9:8e:eb:25:05:41:05:74:fd:91:d5:d4:31:59:2e:7a:9b:5e:
         f0:ea:f3:cb:c8:d4:df:d2:f5:a0:bc:c5:87:40:4c:a0:4f:77:
         f1:29:c7:58:74:4d:5c:02:0a:3f:a5:05:e2:1d:80:68:a8:b0:
         5d:71:71:89:58:64:ef:17:69:c6:de:36:87:8e:a1:da:dc:90:
         09:4e:16:82:66:39:23:41:59:39:67:63:d5:85:99:04:a8:3a:
         d4:22:49:24:6b:2f:77:29:4c:23:62:fb:08:69:52:a7:c0:f1:
         8e:8a:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:38:04 2025 by rpki-client