Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa
File:                     3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          y/fbr2aLlmdtjGnkyf9rEOL2iZbZaXGJ+u9lBSLeeRs=
Subject key identifier:   35:71:77:7E:66:E4:DF:23:58:33:78:FD:8C:2D:86:45:B3:80:94:10
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       37B6C05246B9FF53381BA5615DDC199A590F69E8
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 17 Mar 2023 09:22:44 +0000
ROA not before:           Fri 17 Mar 2023 09:17:44 +0000
ROA not after:            Fri 15 Mar 2024 09:22:44 +0000
asID:                     136787
IP address blocks:        155.133.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b6:c0:52:46:b9:ff:53:38:1b:a5:61:5d:dc:19:9a:59:0f:69:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 17 09:17:44 2023 GMT
            Not After : Mar 15 09:22:44 2024 GMT
        Subject: CN=3571777E66E4DF23583378FD8C2D8645B3809410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:8b:da:d5:ad:08:be:b2:3a:c1:03:30:b4:
                    45:f7:02:77:03:38:8b:c7:bf:9a:73:90:10:8a:b2:
                    c3:ca:23:2f:e3:8a:56:64:be:8d:c8:68:50:82:ad:
                    ff:9e:e3:3d:60:cd:78:15:99:f8:27:1d:ba:c5:08:
                    21:b1:1a:23:52:a2:b2:b8:d2:d7:01:76:ec:c3:c5:
                    73:a0:70:34:70:cc:34:91:9d:26:87:66:42:53:3b:
                    47:bc:42:f2:22:12:b7:e3:53:c6:94:dd:ee:3b:1a:
                    b0:27:cc:fe:86:f3:9b:88:d2:f8:85:96:c6:9f:f2:
                    6e:59:30:15:d0:16:9a:58:02:00:93:a9:8a:69:69:
                    83:cd:d5:73:36:bb:8e:82:04:e0:13:a9:11:fe:a7:
                    68:b8:9f:38:c9:c2:df:0e:b1:e0:40:ee:70:d6:44:
                    c9:1b:9a:6d:3f:d0:9b:bf:3a:9a:ea:43:97:88:87:
                    44:44:92:7e:b2:b5:38:80:31:f1:a1:ec:d7:7f:0e:
                    08:5c:3c:a9:bc:1a:46:ad:90:a0:0a:8a:16:4d:31:
                    c3:ff:65:ba:ae:72:ca:e8:c6:35:56:39:17:94:59:
                    81:dd:01:16:86:13:30:20:6f:0b:23:06:a9:4f:e5:
                    45:b8:42:7e:71:42:ae:37:34:f9:3a:1d:d3:f5:24:
                    4f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:77:7E:66:E4:DF:23:58:33:78:FD:8C:2D:86:45:B3:80:94:10
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:ba:52:0a:c6:a7:09:34:9f:cc:8b:a1:6f:52:35:c9:9d:
         8d:8d:4f:8a:8f:18:c6:ac:2a:15:11:31:51:f7:74:2b:d5:cb:
         d3:84:75:13:7a:bf:0b:d2:0a:02:77:46:af:b4:d3:b8:fc:02:
         f5:54:06:6a:fe:c9:03:84:1f:97:e4:cb:b7:45:00:9c:a0:75:
         6e:5f:18:e6:36:0d:13:c7:5d:fa:f2:cf:94:d0:22:35:5a:39:
         6a:fc:7f:e8:e5:44:29:a2:eb:3d:aa:0a:47:c3:2a:ea:cf:48:
         01:b2:04:d7:af:e8:07:04:3f:92:e5:6b:cb:1c:58:cc:bf:7e:
         31:0b:49:9b:37:ac:f8:11:b4:4b:af:e9:d2:48:4a:ca:11:5d:
         9c:73:64:74:0b:80:68:ef:a5:66:05:42:5f:b4:06:50:68:c0:
         9f:98:89:62:1b:9b:00:29:94:94:f1:71:dc:96:94:1e:c1:d1:
         a8:89:c1:0f:59:13:fc:11:8f:60:8f:7c:f0:64:5a:a5:20:5d:
         f7:19:c9:57:9f:03:29:5e:61:ce:54:54:bc:54:de:78:c5:42:
         e4:33:4e:3f:a1:a6:8d:ae:de:e0:e0:8a:ce:9e:74:d8:2c:c1:
         22:e8:67:7c:1b:3e:97:7c:4d:4c:36:da:05:02:29:0e:44:cb:
         a8:ca:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:37:06 2025 by rpki-client