Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e20333935383030.roa
File:                     3138352e3231352e3138312e302f32342d3234203d3e20333935383030.roa (raw, json)
Hash identifier:          C/rvdroFyKzZu5Fo7I/5pJBoBRa+rzt+1sStkuw3qhA=
Subject key identifier:   61:1C:E0:79:C9:A3:1D:76:3E:B5:18:7A:41:9B:70:66:F1:CB:39:3F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       562883C30EACDF8F53E0EEE83E213CC03DF9339E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e20333935383030.roa
Signing time:             Tue 28 Jun 2022 04:40:50 +0000
ROA not before:           Tue 28 Jun 2022 04:35:50 +0000
ROA not after:            Tue 27 Jun 2023 04:40:50 +0000
asID:                     395800
IP address blocks:        185.215.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:28:83:c3:0e:ac:df:8f:53:e0:ee:e8:3e:21:3c:c0:3d:f9:33:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:50 2022 GMT
            Not After : Jun 27 04:40:50 2023 GMT
        Subject: CN=611CE079C9A31D763EB5187A419B7066F1CB393F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:82:e9:90:11:ab:bc:42:a3:28:41:62:3e:
                    01:74:35:79:cf:e3:ed:2a:7d:0f:8d:90:50:05:d2:
                    8d:eb:da:d0:fe:43:24:4e:1b:5f:d6:f5:98:61:79:
                    63:6f:f4:64:4a:cb:de:22:1b:2b:56:78:f8:c5:8d:
                    3b:77:9b:4d:a0:6b:9c:ad:c5:4c:83:18:64:07:82:
                    17:bd:b6:5b:3a:fe:fd:da:60:e3:5c:e9:bf:46:c5:
                    69:7e:83:d8:93:e4:11:bc:b6:16:45:24:69:a8:60:
                    a8:25:b3:6f:b3:4e:4f:dc:0e:8a:bb:0c:e8:9c:9d:
                    b3:31:9c:17:4a:2f:a2:eb:29:30:df:56:9a:91:3a:
                    bf:c2:ac:64:05:8f:8c:05:01:00:f6:ff:18:ea:d0:
                    7d:0f:2e:6b:fd:7d:79:dc:75:e4:a2:ab:10:ea:1f:
                    9f:71:aa:a5:19:49:a4:77:2c:74:57:ae:a5:7e:f3:
                    92:fc:91:b5:de:cb:85:25:9c:4d:3c:69:be:d6:7a:
                    54:d1:8c:0c:7c:79:e3:ed:69:01:0f:65:f1:a5:e7:
                    bd:89:a0:23:19:76:f2:00:03:57:49:1b:a0:6a:45:
                    52:09:d3:34:70:cd:c9:ae:c5:31:a8:2d:f0:ee:bd:
                    f6:bc:9c:43:b9:71:bc:5a:f0:76:7a:f7:0b:b0:e1:
                    b9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1C:E0:79:C9:A3:1D:76:3E:B5:18:7A:41:9B:70:66:F1:CB:39:3F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e20333935383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:3a:98:d6:4d:1f:40:d3:c1:c1:87:5a:e9:d4:e2:25:53:54:
         3d:dd:10:ea:e8:e3:39:12:a9:e7:ae:c8:82:5c:01:61:26:2f:
         76:5e:70:33:82:99:0b:b0:6f:fe:a5:7a:51:c9:76:f3:fe:07:
         e7:d3:c6:7b:47:20:8b:d7:63:1d:a2:79:0e:fb:80:a1:76:61:
         f8:7c:10:0e:cd:1b:97:59:74:bc:39:c9:0b:eb:e2:e6:cf:31:
         3a:18:ae:60:8c:2e:c6:46:c5:ae:02:c0:36:35:09:40:a8:1d:
         dd:30:a9:9a:dc:2d:aa:1d:78:4b:a3:b0:60:3c:56:71:4e:97:
         c6:61:a1:21:f3:00:17:b7:89:92:0e:0d:6d:56:1e:5b:bf:de:
         aa:39:e2:89:ce:f1:06:51:87:e7:d9:b8:d3:5f:77:f8:18:32:
         7e:9c:b8:9c:87:d0:3b:70:fa:ce:82:4c:2f:52:4c:79:74:c4:
         8c:d2:5a:af:ac:b5:70:79:f9:72:d2:f2:c5:63:67:96:0f:10:
         f6:88:20:61:e9:16:f0:2a:cb:1f:6b:e2:4c:9e:0b:99:f1:2e:
         b8:8d:eb:a2:3a:76:a5:d5:69:78:4d:f8:20:80:9a:c4:86:fa:
         bd:f6:f3:b5:29:e5:dc:18:61:36:f6:ac:32:d2:a6:07:57:b0:
         12:a7:a1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:46:05 2025 by rpki-client