Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3332203d3e203531313637.roa
File:                     3138352e3230352e3234362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          0r4MTyUlb1scN3ejXgIkv5IYJCjIBoPxlm92OohmxtU=
Subject key identifier:   16:1D:EE:EB:43:2F:91:19:FF:2C:38:DF:E7:2D:7B:B1:FB:91:60:A5
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0BCCDEF92FFDE6694E561B557352DC326868D119
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:25 +0000
ROA not before:           Sat 22 Oct 2022 04:29:25 +0000
ROA not after:            Sat 21 Oct 2023 04:34:25 +0000
asID:                     51167
IP address blocks:        185.205.246.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cc:de:f9:2f:fd:e6:69:4e:56:1b:55:73:52:dc:32:68:68:d1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:25 2022 GMT
            Not After : Oct 21 04:34:25 2023 GMT
        Subject: CN=161DEEEB432F9119FF2C38DFE72D7BB1FB9160A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:a5:87:bc:78:ea:40:a6:6c:04:05:d9:48:
                    07:4e:f4:0a:d3:9f:ae:d2:18:a7:bc:14:27:6e:24:
                    32:35:1c:4c:3c:6f:d6:50:94:75:19:c1:bd:6b:72:
                    52:a9:ae:c2:73:1d:e2:ad:29:45:86:60:37:d2:5b:
                    43:fa:6c:26:c9:7f:ef:4d:5d:90:9f:a6:d5:3d:f9:
                    3f:01:44:f3:db:12:37:7a:de:52:cb:83:12:e7:a3:
                    ac:3f:bb:de:f8:fa:29:65:9c:ae:1a:d4:3a:fa:88:
                    eb:9a:03:9d:2f:8a:5a:f6:72:1a:a7:65:de:82:10:
                    24:27:a7:d7:ef:c9:6d:2b:8f:16:ad:2a:90:ad:b4:
                    52:79:42:65:f0:98:9d:e8:c3:19:e8:77:08:2b:42:
                    61:1d:33:92:5b:c1:a0:11:e7:7f:4a:3e:d3:5f:76:
                    f7:07:62:45:28:c9:65:82:3b:b7:63:8d:cc:07:3b:
                    1e:13:11:ce:bd:fc:03:b1:81:5a:6d:54:00:f0:f6:
                    4b:99:70:c4:5e:4c:f7:f9:b3:02:fa:27:a9:5e:1d:
                    22:31:83:91:24:75:33:47:8d:52:bc:97:52:21:78:
                    70:73:2f:b9:df:bb:09:f7:d3:10:fe:54:57:cf:87:
                    97:3c:1b:b7:2a:bf:be:0b:73:a0:76:ed:81:f4:62:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1D:EE:EB:43:2F:91:19:FF:2C:38:DF:E7:2D:7B:B1:FB:91:60:A5
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:7b:d8:81:e5:de:53:84:7e:8e:46:77:b0:7a:58:9e:fc:1f:
         9c:e3:34:92:a5:03:7a:3e:fa:cd:6c:69:27:11:67:13:0b:26:
         8a:de:2a:0c:79:9b:50:d0:ae:72:90:8f:4f:18:c2:cc:57:5f:
         9f:3f:0c:ae:5f:05:18:ac:1e:17:c5:9c:3d:ef:92:53:30:b8:
         e9:16:7a:38:49:b0:76:37:24:d5:9d:bb:aa:ac:70:de:a5:71:
         f4:ba:6a:b6:2b:10:f9:75:92:89:a6:f0:73:f9:ee:79:04:49:
         9d:fa:00:f1:8a:15:6a:3d:ba:8f:ac:25:0c:1b:ab:96:0f:63:
         35:f1:8d:11:58:78:9c:86:e3:0f:20:93:9d:bf:68:5b:76:22:
         e6:b4:7e:8c:2e:df:9d:18:85:d5:83:97:11:fd:cc:ae:73:9b:
         75:12:a9:6e:64:49:c1:23:38:84:b4:01:2d:a7:73:e4:d5:e8:
         ac:90:94:70:c9:35:6f:73:d5:be:b6:77:ef:db:31:30:40:4f:
         e3:57:2a:ef:96:bb:fa:d5:58:68:9f:12:51:67:60:ad:fb:9d:
         dd:6b:f6:d8:ff:66:e6:36:a4:f0:7f:f6:4b:de:4d:32:55:99:
         74:6d:56:b0:62:f0:d4:7d:24:fc:57:34:a0:e6:cf:4f:da:b2:
         17:a3:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:41:42 2025 by rpki-client