Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e39302e3130382e302f32322d3234203d3e203437353833.roa
File:                     34352e39302e3130382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          aMBqB+B3Jg8oCxNolTPmYMougSuL+78xxcrB5iepICo=
Subject key identifier:   26:CB:6D:C1:C9:50:3D:81:D7:B3:96:DC:51:1A:AC:93:CE:C4:CA:C5
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       212B6001470F511CE548BDF2882D318708CD09D5
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e39302e3130382e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:49 +0000
ROA not before:           Sat 22 Oct 2022 04:28:49 +0000
ROA not after:            Sat 21 Oct 2023 04:33:49 +0000
asID:                     47583
IP address blocks:        45.90.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2b:60:01:47:0f:51:1c:e5:48:bd:f2:88:2d:31:87:08:cd:09:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:49 2022 GMT
            Not After : Oct 21 04:33:49 2023 GMT
        Subject: CN=26CB6DC1C9503D81D7B396DC511AAC93CEC4CAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:1c:f3:a8:70:9d:55:20:d2:73:3a:57:fc:
                    80:74:61:dc:ca:93:d0:cb:5c:d8:61:a6:7a:9a:8c:
                    b4:c9:d4:5d:2b:a3:20:bb:9a:eb:28:2f:e5:79:a0:
                    48:6c:a1:c8:76:ec:9b:95:c2:9f:49:ed:9a:45:bf:
                    42:5c:cd:1e:9b:f5:51:13:60:b2:30:ad:72:34:39:
                    0a:a9:84:ca:4c:55:c2:75:2f:d1:b1:c4:26:2d:94:
                    bc:db:7a:fc:34:7b:74:6b:16:bb:64:fb:c1:bb:f0:
                    82:98:1b:e1:43:da:ae:db:68:9a:f2:af:02:48:6c:
                    09:e0:2a:64:24:2c:17:da:55:4d:74:28:17:37:71:
                    6b:73:48:9b:76:bb:b8:08:c4:8f:60:48:59:98:a4:
                    b4:4f:6a:a3:db:ae:ba:49:89:b0:2a:61:70:9a:4f:
                    db:49:b0:85:d7:f9:46:1d:47:e8:04:51:71:b3:e7:
                    1b:5b:f3:e6:55:e9:26:7d:8b:5a:2a:15:90:01:46:
                    35:53:af:61:26:8d:9a:ae:19:bc:ff:0c:27:8e:af:
                    e1:10:9a:b8:43:89:15:d3:3a:25:4a:67:b6:43:b1:
                    ff:5c:54:43:98:c6:c6:b4:f3:8a:da:cf:b5:b0:c4:
                    1c:b3:3d:72:e3:f9:ce:ee:7d:7c:2e:eb:4b:89:f5:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CB:6D:C1:C9:50:3D:81:D7:B3:96:DC:51:1A:AC:93:CE:C4:CA:C5
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e39302e3130382e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:d6:a8:f0:15:03:24:0c:4e:07:5e:8f:91:fa:17:75:55:
         a8:a6:88:16:61:f3:21:19:67:af:fd:cf:93:70:70:9c:94:8c:
         d8:41:73:4e:49:3c:6c:7a:4b:a9:6f:1b:5e:47:10:2e:43:c3:
         4e:6d:ef:71:40:f8:d5:dc:8a:55:ad:25:8d:c7:db:01:71:b7:
         bb:9d:f4:5d:c5:90:a3:81:ff:5a:b2:98:7c:6a:38:2a:29:1b:
         c4:91:59:dd:03:d4:a4:d1:11:99:78:15:b5:b7:62:75:68:eb:
         19:d3:c4:73:c7:cc:70:d1:18:89:8a:69:73:da:01:3f:88:3a:
         2c:35:37:2f:62:d5:a3:cb:e3:bf:47:e7:e3:a2:31:23:d6:6c:
         f6:3e:5d:76:29:21:aa:b2:dc:a8:49:47:05:e1:d5:93:d7:d7:
         ef:83:7f:2a:53:64:0e:25:d8:24:0b:7e:c5:15:eb:55:91:7b:
         bd:32:aa:fc:26:d6:c6:77:b3:95:17:e7:ef:be:8d:d6:7b:69:
         fd:35:21:7f:76:45:24:3f:fe:56:f6:93:d7:fd:f8:b0:79:03:
         86:67:1e:da:5b:1f:5d:d2:7c:a4:b6:69:d0:04:6a:8a:28:54:
         46:86:2c:88:d8:1b:60:ab:68:c7:6c:dc:31:c0:8a:9e:de:c2:
         a2:2e:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:20:53 2025 by rpki-client