Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323132303730.roa
File:                     34352e3133372e3139332e302f32342d3234203d3e20323132303730.roa (raw, json)
Hash identifier:          N4uq0LI9f7MY6+zClJ3XI6Av3fIyEj8qlpNQF/y/uio=
Subject key identifier:   48:8B:47:ED:8F:8B:FA:6B:14:90:A2:99:F0:99:CB:C3:1E:8A:E8:F8
Certificate issuer:       /CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
Certificate serial:       09018CB92F9F9F9BC699571E394B3D2F2157FED5
Authority key identifier: 10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323132303730.roa
Signing time:             Mon 04 Jan 2021 14:53:52 +0000
ROA not before:           Mon 04 Jan 2021 14:48:52 +0000
ROA not after:            Mon 03 Jan 2022 14:53:52 +0000
asID:                     212070
IP address blocks:        45.137.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:01:8c:b9:2f:9f:9f:9b:c6:99:57:1e:39:4b:3d:2f:21:57:fe:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
        Validity
            Not Before: Jan  4 14:48:52 2021 GMT
            Not After : Jan  3 14:53:52 2022 GMT
        Subject: CN=3082010A0282010100E87D0226DFAA1FECC0A774AE1BFB272B949B8B8EDD400218958B02C9304B21ACFC2641294D6DF4AE13C1A157493C2C9377280903449817486B3EB61FCBE6A48873C0637F51C5CEA472CD61A8F31741441EFCF2F4A4C456F34FA9A5674381D3486B1440F49B247CDDD878749E2612BA65E4683D3FF080FE9D711046C94B3F09B3D8727EA591FBDC278AED089FE25F3D9D93EA081B6727EEF4FF7D850415981218442118B1FD915EA132C749DB4560CE3D38794F9C76D0D5DFDC69B26FD2AB06162E02E2AB2C749F1582FB780136AAF2D35B50AFDCCD6B8202CB7E940CD0CEBC5CAB58310AD937798D5BF05A7D13D48634AFBAF6D4F26302C223DCA31D70EAA9450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7d:02:26:df:aa:1f:ec:c0:a7:74:ae:1b:fb:
                    27:2b:94:9b:8b:8e:dd:40:02:18:95:8b:02:c9:30:
                    4b:21:ac:fc:26:41:29:4d:6d:f4:ae:13:c1:a1:57:
                    49:3c:2c:93:77:28:09:03:44:98:17:48:6b:3e:b6:
                    1f:cb:e6:a4:88:73:c0:63:7f:51:c5:ce:a4:72:cd:
                    61:a8:f3:17:41:44:1e:fc:f2:f4:a4:c4:56:f3:4f:
                    a9:a5:67:43:81:d3:48:6b:14:40:f4:9b:24:7c:dd:
                    d8:78:74:9e:26:12:ba:65:e4:68:3d:3f:f0:80:fe:
                    9d:71:10:46:c9:4b:3f:09:b3:d8:72:7e:a5:91:fb:
                    dc:27:8a:ed:08:9f:e2:5f:3d:9d:93:ea:08:1b:67:
                    27:ee:f4:ff:7d:85:04:15:98:12:18:44:21:18:b1:
                    fd:91:5e:a1:32:c7:49:db:45:60:ce:3d:38:79:4f:
                    9c:76:d0:d5:df:dc:69:b2:6f:d2:ab:06:16:2e:02:
                    e2:ab:2c:74:9f:15:82:fb:78:01:36:aa:f2:d3:5b:
                    50:af:dc:cd:6b:82:02:cb:7e:94:0c:d0:ce:bc:5c:
                    ab:58:31:0a:d9:37:79:8d:5b:f0:5a:7d:13:d4:86:
                    34:af:ba:f6:d4:f2:63:02:c2:23:dc:a3:1d:70:ea:
                    a9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8B:47:ED:8F:8B:FA:6B:14:90:A2:99:F0:99:CB:C3:1E:8A:E8:F8
            X509v3 Authority Key Identifier:
                keyid:10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/101D22F56EE5531CC92D0861BEAE087DC3B08EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323132303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:59:6e:2c:5e:64:b7:ff:18:0f:66:6a:6d:09:37:47:53:3f:
         a9:e3:f5:04:ff:c8:5e:cc:e0:f5:c9:f8:69:e8:73:a2:60:d7:
         50:35:9d:c5:1f:94:32:08:ff:cd:86:4c:f2:92:4a:ee:1a:43:
         42:fc:5b:b9:09:4a:59:84:67:6c:bc:7b:a0:69:ec:fd:f8:e5:
         79:6b:8f:fd:18:13:45:ed:ec:f8:e5:52:4b:4e:11:90:52:da:
         4f:f6:9d:9e:8a:a8:f9:fa:93:36:d9:8a:1d:f4:06:a2:c4:11:
         c3:0d:17:8a:88:a1:64:57:03:37:dd:fd:e7:bc:f0:eb:c1:a0:
         67:6f:0d:cc:da:da:75:fa:8c:fd:81:dc:d3:b6:82:57:e7:99:
         af:d9:8b:43:18:e6:dc:82:ee:06:6f:32:ba:6d:97:31:fa:89:
         59:8d:08:39:dd:a5:a4:35:41:42:7b:56:9c:1d:ae:a1:e1:ae:
         f4:24:b8:ea:6e:ec:2e:32:00:bc:5d:f8:1e:54:e7:67:29:55:
         4a:81:cc:4a:0d:74:37:ae:e1:87:84:76:8d:56:2a:1e:8e:d9:
         81:54:d6:25:b6:81:88:b7:45:36:12:5f:51:c8:74:8e:c3:f2:
         de:cd:79:56:62:9b:0e:95:23:85:ea:07:db:db:43:fd:93:c2:
         17:23:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:44:59 2025 by rpki-client