Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e203232373733.roa
File:                     3138352e3231352e3136362e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          q+uDnM5NTXHFx4hPvxiy1gEWhd1n5i+IlUZzJ0pIIiw=
Subject key identifier:   65:85:AE:DB:94:75:1A:CF:FF:00:B2:18:03:42:EC:A1:C9:87:0E:F0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0327356AACBEC376A027B0FB108BC70E2C77091C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e203232373733.roa
Signing time:             Tue 28 Jun 2022 04:40:53 +0000
ROA not before:           Tue 28 Jun 2022 04:35:53 +0000
ROA not after:            Tue 27 Jun 2023 04:40:53 +0000
asID:                     22773
IP address blocks:        185.215.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:27:35:6a:ac:be:c3:76:a0:27:b0:fb:10:8b:c7:0e:2c:77:09:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:53 2022 GMT
            Not After : Jun 27 04:40:53 2023 GMT
        Subject: CN=6585AEDB94751ACFFF00B2180342ECA1C9870EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:36:1e:33:8f:97:45:84:ae:7d:d2:21:66:
                    7f:e5:fa:43:00:e9:a3:a8:17:7a:fc:bd:38:7f:47:
                    b3:7a:f1:0b:af:4f:16:db:cc:61:c3:c0:3d:c5:84:
                    7c:94:7a:90:97:21:6f:2a:5c:1b:29:52:8b:76:92:
                    4b:4a:bd:5b:6b:6d:52:aa:31:2b:03:bb:16:52:e3:
                    44:72:62:53:cc:5a:03:8a:dd:88:94:60:6e:b9:a3:
                    f0:fb:12:3f:4b:55:ea:12:0c:f6:ab:fc:09:a9:a2:
                    74:0a:84:95:9d:a9:a1:35:9b:3b:b4:aa:77:84:a4:
                    e3:cf:f0:73:6b:46:b4:e3:8d:7d:1c:ce:20:93:3c:
                    2e:be:04:e4:fd:33:97:c1:2a:a7:56:a0:c3:47:70:
                    87:7e:75:30:97:69:67:05:75:35:e8:ce:d1:5c:b7:
                    86:95:ed:e3:01:ff:97:ce:6e:b7:40:c6:0f:1d:a9:
                    cc:23:ae:a1:52:88:f5:6e:ea:e6:2e:47:b6:4f:5d:
                    57:33:16:f9:6f:5d:6d:3c:09:ad:07:55:32:e6:0b:
                    48:76:71:a1:93:d8:fe:a1:c4:2e:e7:67:f5:be:01:
                    f1:89:0f:d2:f3:a9:80:82:c4:4e:57:92:40:c0:a5:
                    5c:03:82:b2:b1:6f:f9:d3:13:71:7a:b6:4e:fe:83:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:85:AE:DB:94:75:1A:CF:FF:00:B2:18:03:42:EC:A1:C9:87:0E:F0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136362e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:f1:f3:f3:16:8f:ba:b4:f8:e7:2d:b7:d5:27:d4:24:50:18:
         33:c5:57:e2:6d:81:f2:b9:0d:5f:04:0f:9b:12:41:9c:58:f9:
         25:13:3a:90:66:4b:b8:96:9d:5b:9a:21:7e:13:64:1b:ff:5d:
         64:99:84:66:44:74:2c:07:9e:6d:a5:d9:69:23:a0:61:48:a8:
         bc:62:e4:b7:59:52:4a:a8:3f:cc:ce:f2:91:37:b3:49:82:62:
         66:80:65:a5:f4:9c:35:f8:95:d4:e7:6c:03:3e:e1:9d:d5:e5:
         94:b6:ec:52:26:46:5b:a7:6a:3a:85:ca:e4:e1:5f:d7:07:db:
         ac:bc:bb:ab:f4:ce:41:7c:c4:cb:41:48:e7:9c:b1:7e:ec:ec:
         a8:70:a4:63:cf:93:57:c2:af:a6:e2:49:eb:55:df:14:f3:e7:
         e1:5f:84:ae:a5:33:c4:07:ce:23:65:28:51:7d:ec:27:24:14:
         dd:a8:18:6d:62:0d:ca:1d:55:30:2c:6e:8c:7d:f7:4a:bf:82:
         e4:ba:d7:8a:dc:7c:09:07:84:c2:a3:93:b6:7d:0f:43:50:35:
         04:d1:69:0c:4b:e2:74:38:f3:e8:e9:c7:d7:de:b2:87:f4:91:
         20:7a:1d:37:5a:66:73:46:98:47:a9:9c:bb:d3:52:5c:a7:5c:
         dc:14:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:42:54 2025 by rpki-client