Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139352e302f32342d3234203d3e20323037373837.roa
File:                     34352e3133372e3139352e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          o0wSFnKizZBJUmDv4K/rdxRE4dDRD41ETgIbxUKlvU4=
Subject key identifier:   72:22:7A:4B:0E:87:D8:4C:88:3A:32:05:89:9B:F5:EB:5A:B0:61:D5
Certificate issuer:       /CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
Certificate serial:       37B2E4980DB53E237681C7F370C43E9D6FC9636C
Authority key identifier: 10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139352e302f32342d3234203d3e20323037373837.roa
Signing time:             Mon 30 Nov 2020 19:13:46 +0000
ROA not before:           Mon 30 Nov 2020 19:08:46 +0000
ROA not after:            Mon 29 Nov 2021 19:13:46 +0000
asID:                     207787
IP address blocks:        45.137.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b2:e4:98:0d:b5:3e:23:76:81:c7:f3:70:c4:3e:9d:6f:c9:63:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
        Validity
            Not Before: Nov 30 19:08:46 2020 GMT
            Not After : Nov 29 19:13:46 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:c0:e0:03:45:df:84:67:42:8e:66:a1:12:
                    92:6c:4d:e8:25:a9:e5:57:df:17:49:33:69:4c:26:
                    14:e6:4d:d1:93:c4:81:45:2e:24:3a:db:cd:c1:ed:
                    3b:51:7c:88:6c:95:ae:f4:15:9b:df:ff:02:6d:34:
                    b2:85:2d:92:c7:00:2f:3d:02:1b:39:44:46:07:7a:
                    0f:c4:fd:fb:e8:8d:a2:3c:0a:e4:0a:f6:57:a7:e6:
                    fe:55:f4:34:a0:35:df:36:40:22:2b:f5:8c:6e:76:
                    68:c5:b3:1f:b4:9e:8b:8a:2f:1a:b1:2f:e5:c1:b0:
                    a4:57:1a:46:86:26:6f:cf:aa:5d:69:92:c6:dd:e1:
                    82:a9:d4:d2:f3:44:1a:41:fc:c0:8a:53:08:14:a5:
                    7d:2d:b4:64:f5:4b:60:f1:e5:29:ee:30:f3:6f:e8:
                    9c:2b:4b:b1:a2:c3:5a:45:1d:33:a3:83:72:43:94:
                    f6:5d:ec:7d:8b:d7:1e:b2:cf:d7:00:9d:b9:e6:51:
                    5f:f9:76:9b:ee:09:3e:81:bc:4a:b1:ed:f7:f2:aa:
                    1b:45:5c:81:b1:fb:01:78:44:45:91:2c:c3:e9:7c:
                    89:1e:22:12:cf:21:72:df:a7:66:0c:bf:be:26:de:
                    a0:8a:65:95:94:80:3f:2a:6d:bb:64:08:b8:5d:35:
                    35:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:22:7A:4B:0E:87:D8:4C:88:3A:32:05:89:9B:F5:EB:5A:B0:61:D5
            X509v3 Authority Key Identifier:
                keyid:10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/101D22F56EE5531CC92D0861BEAE087DC3B08EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139352e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:f8:7e:37:97:84:6c:95:3d:cf:6c:e7:12:d6:13:7c:25:e1:
         9b:13:7b:7b:23:4c:4b:17:ad:37:93:34:82:71:a9:cd:de:9c:
         3e:a6:08:08:17:42:db:1e:11:f8:c5:12:79:52:56:80:35:80:
         2d:a0:c1:04:37:b0:62:fe:43:39:04:5a:2b:0b:a8:0a:80:01:
         fa:37:9b:7e:28:ae:45:94:ea:ee:e2:54:11:f7:23:59:8c:aa:
         79:51:7b:74:b7:7d:cf:ff:e7:a6:ce:b8:72:91:4d:9c:b9:b4:
         3d:70:4f:de:3b:72:db:89:12:16:33:3a:cc:fe:a6:ad:9e:ce:
         0d:09:ae:4b:28:a3:42:a2:ec:3c:2d:8c:76:47:89:d9:53:a6:
         f1:9d:08:bf:a1:33:75:3a:f6:5d:92:05:3c:36:4a:e8:e9:91:
         f0:88:e3:cd:75:de:d9:6b:97:ca:ee:d8:18:73:89:c1:a1:87:
         39:6b:03:61:d3:9e:c2:a6:b5:43:12:c3:49:f0:b9:7a:2e:31:
         4f:9b:7d:6e:d3:49:82:61:82:79:8d:44:69:78:36:fa:53:8a:
         82:b1:12:c3:fc:4a:15:eb:59:5b:db:2f:67:29:f3:3c:4d:66:
         76:52:e8:38:f4:84:6d:03:18:7b:9e:74:f7:a1:20:01:cf:b6:
         ad:36:2a:72
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUN7LkmA21PiN2gcfzcMQ+nW/JY2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAxZDIyZjU2ZWU1NTMxY2M5MmQwODYxYmVhZTA4N2Rj
M2IwOGVjMDAeFw0yMDExMzAxOTA4NDZaFw0yMTExMjkxOTEzNDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkY3REMwRTAwMzQ1REY4NDY3
NDI4RTY2QTExMjkyNkM0REU4MjVBOUU1NTdERjE3NDkzMzY5NEMyNjE0RTY0REQx
OTNDNDgxNDUyRTI0M0FEQkNEQzFFRDNCNTE3Qzg4NkM5NUFFRjQxNTlCREZGRjAy
NkQzNEIyODUyRDkyQzcwMDJGM0QwMjFCMzk0NDQ2MDc3QTBGQzRGREZCRTg4REEy
M0MwQUU0MEFGNjU3QTdFNkZFNTVGNDM0QTAzNURGMzY0MDIyMkJGNThDNkU3NjY4
QzVCMzFGQjQ5RThCOEEyRjFBQjEyRkU1QzFCMEE0NTcxQTQ2ODYyNjZGQ0ZBQTVE
Njk5MkM2RERFMTgyQTlENEQyRjM0NDFBNDFGQ0MwOEE1MzA4MTRBNTdEMkRCNDY0
RjU0QjYwRjFFNTI5RUUzMEYzNkZFODlDMkI0QkIxQTJDMzVBNDUxRDMzQTM4Mzcy
NDM5NEY2NURFQzdEOEJENzFFQjJDRkQ3MDA5REI5RTY1MTVGRjk3NjlCRUUwOTNF
ODFCQzRBQjFFREY3RjJBQTFCNDU1QzgxQjFGQjAxNzg0NDQ1OTEyQ0MzRTk3Qzg5
MUUyMjEyQ0YyMTcyREZBNzY2MENCRkJFMjZERUEwOEE2NTk1OTQ4MDNGMkE2REJC
NjQwOEI4NUQzNTM1MDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv33A4ANF34RnQo5moRKSbE3oJanlV98XSTNpTCYU5k3Rk8SBRS4k
OtvNwe07UXyIbJWu9BWb3/8CbTSyhS2SxwAvPQIbOURGB3oPxP376I2iPArkCvZX
p+b+VfQ0oDXfNkAiK/WMbnZoxbMftJ6Lii8asS/lwbCkVxpGhiZvz6pdaZLG3eGC
qdTS80QaQfzAilMIFKV9LbRk9Utg8eUp7jDzb+icK0uxosNaRR0zo4NyQ5T2Xex9
i9cess/XAJ255lFf+Xab7gk+gbxKse338qobRVyBsfsBeERFkSzD6XyJHiISzyFy
36dmDL++Jt6gimWVlIA/Km27ZAi4XTU1AQIDAQABo4IB9TCCAfEwHQYDVR0OBBYE
FHIieksOh9hMiDoyBYmb9etasGHVMB8GA1UdIwQYMBaAFBAdIvVu5VMcyS0IYb6u
CH3DsI7AMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zOS8xMDFE
MjJGNTZFRTU1MzFDQzkyRDA4NjFCRUFFMDg3REMzQjA4RUMwLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUIwaTlXN2xVeHpKTFFoaHZxNElmY093anNBLmNlcjCB
iwYIKwYBBQUHAQsEfzB9MHsGCCsGAQUFBzALhm9yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zOS8zNDM1MmUzMTMzMzcyZTMx
MzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAC2JwzANBgkqhkiG9w0BAQsFAAOCAQEA0/h+N5eEbJU9z2znEtYTfCXhmxN7
eyNMSxetN5M0gnGpzd6cPqYICBdC2x4R+MUSeVJWgDWALaDBBDewYv5DOQRaKwuo
CoAB+jebfiiuRZTq7uJUEfcjWYyqeVF7dLd9z//nps64cpFNnLm0PXBP3jty24kS
FjM6zP6mrZ7ODQmuSyijQqLsPC2MdkeJ2VOm8Z0Iv6EzdTr2XZIFPDZK6OmR8Ijj
zXXe2WuXyu7YGHOJwaGHOWsDYdOewqa1QxLDSfC5ei4xT5t9btNJgmGCeY1EaXg2
+lOKgrESw/xKFetZW9svZynzPE1mdlLoOPSEbQMYe55096EgAc+2rTYqcg==
-----END CERTIFICATE-----
Generated at Wed May 14 01:59:11 2025 by rpki-client