Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323132363330.roa
File:                     34352e3133372e3139332e302f32342d3234203d3e20323132363330.roa (raw, json)
Hash identifier:          G/U/uPrDL8OIWPBPTIXJ0irSL/ZxcE/dV2LBFXESMuM=
Subject key identifier:   CA:53:B6:29:2F:2A:85:E7:E9:20:7E:F0:6F:2D:1F:AB:5D:50:22:6C
Certificate issuer:       /CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
Certificate serial:       54A7FFB9D1820EC0D1F3A9AC1A57D846EC140300
Authority key identifier: 10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323132363330.roa
Signing time:             Mon 30 Nov 2020 19:13:46 +0000
ROA not before:           Mon 30 Nov 2020 19:08:46 +0000
ROA not after:            Mon 29 Nov 2021 19:13:46 +0000
asID:                     212630
IP address blocks:        45.137.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a7:ff:b9:d1:82:0e:c0:d1:f3:a9:ac:1a:57:d8:46:ec:14:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
        Validity
            Not Before: Nov 30 19:08:46 2020 GMT
            Not After : Nov 29 19:13:46 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:0e:4a:f5:cf:c4:7e:b8:37:bd:6e:ab:4d:
                    92:e3:1e:75:e7:3c:06:11:aa:92:2c:49:9d:a9:bc:
                    ef:30:56:29:38:b1:41:f7:8e:ba:ee:d7:b9:01:7f:
                    ec:35:3d:89:a5:8f:d6:9c:8e:c8:be:a9:94:78:4b:
                    dd:8b:20:98:5a:f7:d4:c7:cd:73:46:6b:d4:be:3d:
                    f9:50:7e:ae:a1:41:77:8a:50:9e:9a:20:19:63:20:
                    50:e6:03:e6:dc:4f:98:05:18:9e:52:e6:97:24:c1:
                    81:e7:05:10:7e:5f:a3:37:3e:7d:e0:8a:1e:92:af:
                    97:c2:83:13:b1:2e:e4:e0:23:da:2f:e7:93:2d:87:
                    6d:db:8f:c6:f1:35:8e:1f:b8:51:c2:23:16:8b:fe:
                    29:ac:92:68:12:d8:7c:4f:67:81:ed:83:79:a4:51:
                    46:86:3b:7b:ff:b7:92:78:e6:aa:62:95:f2:d1:6e:
                    fb:65:19:72:53:62:4b:fb:c9:04:a0:aa:d8:ca:78:
                    7a:ad:20:b5:a8:7a:5b:c4:af:11:48:7f:b4:ad:cc:
                    1b:58:5c:c7:b9:9f:9d:c6:0d:ef:70:2f:39:6f:43:
                    cb:fc:d9:76:c0:0b:e0:42:52:a2:76:2a:af:a0:ad:
                    9d:da:4d:9e:7d:b9:7b:ac:04:fd:18:fd:87:4c:09:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:53:B6:29:2F:2A:85:E7:E9:20:7E:F0:6F:2D:1F:AB:5D:50:22:6C
            X509v3 Authority Key Identifier:
                keyid:10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/101D22F56EE5531CC92D0861BEAE087DC3B08EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323132363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a7:48:df:50:c5:c2:2b:90:21:17:16:47:08:9d:07:4e:0a:
         2a:5c:dc:e5:41:ff:a8:90:71:40:1b:6a:05:92:27:08:ed:aa:
         20:68:8e:d5:a1:40:5c:30:87:27:60:cb:60:43:a3:38:d1:fe:
         1c:ba:b1:83:05:ab:d9:d0:cc:22:0e:b2:dc:12:ee:19:ce:2d:
         b5:6b:b7:bc:2d:07:ee:dd:95:29:cb:20:67:ca:5c:83:bf:06:
         00:ee:b7:90:56:5b:d1:05:19:12:5d:56:62:aa:5e:77:6f:5f:
         d7:11:4f:c8:b9:72:92:c8:94:fc:32:f6:46:0e:8d:93:a7:22:
         1f:c4:93:d1:d1:82:c9:1c:38:98:35:93:5a:2b:f0:b8:26:26:
         7f:b7:bf:f0:b0:5d:d2:c4:b2:67:ef:69:74:fb:79:23:e5:71:
         62:74:8d:1d:dc:2b:ef:f1:0b:11:92:01:cb:f8:bf:c9:3d:a2:
         43:0e:d5:17:64:44:c6:15:35:78:58:64:49:24:71:55:ba:61:
         1e:ea:3d:96:ec:26:09:f0:02:0d:03:69:94:65:53:12:82:19:
         8d:1d:3a:98:9f:3b:1b:84:82:4b:60:6d:df:70:dd:21:87:f4:
         9e:62:95:26:87:0d:cf:95:01:8e:85:6d:dd:29:a4:d0:70:e3:
         0d:16:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:24:07 2025 by rpki-client