Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232392e35382e302f32342d3234203d3e203439343533.roa
File:                     3138352e3232392e35382e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier:          oZ6akOaI6gjLBQj7Iz45iB/uDo1NnEyd3PEWWXAjjro=
Subject key identifier:   E0:1C:FF:A2:DA:BC:C9:62:9B:17:9A:5E:A8:21:36:02:2A:5E:2D:9C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1FE35E11E93FC708E0BF707A70C9D6A6ED10337C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232392e35382e302f32342d3234203d3e203439343533.roa
Signing time:             Fri 16 Dec 2022 08:58:15 +0000
ROA not before:           Fri 16 Dec 2022 08:53:15 +0000
ROA not after:            Fri 15 Dec 2023 08:58:15 +0000
asID:                     49453
IP address blocks:        185.229.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e3:5e:11:e9:3f:c7:08:e0:bf:70:7a:70:c9:d6:a6:ed:10:33:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 16 08:53:15 2022 GMT
            Not After : Dec 15 08:58:15 2023 GMT
        Subject: CN=E01CFFA2DABCC9629B179A5EA82136022A5E2D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:16:15:c0:78:00:60:8a:d6:d7:42:c3:b4:
                    73:d1:71:f1:13:27:9f:3e:07:fc:ee:d7:f1:55:12:
                    a1:cc:f0:ec:7d:65:b3:b5:1a:4b:64:3a:7a:de:cf:
                    5f:21:74:88:a6:16:f8:2d:dd:94:92:9f:5a:84:d8:
                    db:09:31:0d:74:3d:30:0b:a6:ee:ae:36:cb:85:ef:
                    5a:2a:39:7a:59:c3:73:58:df:69:28:90:9f:86:e7:
                    f2:31:28:cb:19:3f:c6:b8:91:97:8b:94:cf:4d:8f:
                    28:ab:f7:fe:54:d1:46:a6:7e:9b:0a:cc:17:55:94:
                    9a:e8:80:79:ee:32:b6:e1:ea:82:bc:c4:79:3c:b6:
                    e1:13:08:da:92:84:17:c3:2b:93:75:95:3b:7f:c8:
                    8c:14:3f:4a:ac:ab:42:49:f9:bc:47:81:5d:77:51:
                    99:d7:eb:79:17:4f:bd:09:2b:7e:fc:1e:ab:bb:7f:
                    94:62:22:a1:53:9a:57:36:30:2b:9c:9f:68:bb:63:
                    cd:a0:04:27:3b:8c:c6:8e:10:8c:bc:47:ef:ed:da:
                    6c:b5:9f:ec:da:eb:37:bc:40:03:cb:20:d8:5d:11:
                    9c:dc:e7:39:19:1f:1c:c8:10:7b:b1:75:ed:9f:dd:
                    57:14:11:a1:e4:72:eb:23:87:1a:74:ac:a0:50:5b:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1C:FF:A2:DA:BC:C9:62:9B:17:9A:5E:A8:21:36:02:2A:5E:2D:9C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3232392e35382e302f32342d3234203d3e203439343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ee:35:e5:91:7a:e2:dd:80:f0:ba:57:fc:34:29:a1:c8:18:
         2b:d4:6e:9a:a1:c4:e3:29:66:49:85:fd:d0:0c:d2:93:ad:01:
         1c:22:e4:96:54:b4:fe:ff:8d:14:88:89:c8:13:42:0e:a7:02:
         21:07:18:fe:8b:8f:c7:04:a0:8c:32:bb:f9:c6:5c:fc:63:67:
         27:bc:1b:70:20:76:78:94:91:e1:5c:d9:55:54:ed:73:d6:0b:
         ae:28:bf:a7:bd:f3:91:a2:52:d5:79:18:34:dc:2c:0e:ba:f8:
         1a:27:78:2d:85:10:eb:7e:7d:43:00:00:7a:62:00:a9:ed:88:
         04:95:01:78:cb:5d:3e:36:58:d4:c0:08:68:aa:96:b1:4e:d7:
         a4:d9:ee:b4:c1:ef:22:bb:73:b4:65:30:05:fd:65:c1:5b:33:
         66:bd:d0:74:d0:e8:86:ac:ce:d3:14:47:d0:8a:8c:eb:5a:1b:
         45:e6:1a:d3:8d:ea:aa:31:7a:a1:d5:f5:e8:5b:60:ca:12:4a:
         d2:0f:68:6c:c6:73:28:53:47:56:4f:25:81:5c:92:a7:bf:28:
         4a:ca:cc:f1:b0:67:c9:b3:96:32:f8:10:f0:4e:91:5c:b6:52:
         f1:82:70:2b:f7:97:78:a4:9d:ea:b2:77:0a:89:a8:a2:49:d8:
         61:60:f7:75
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUH+NeEek/xwjgv3B6cMnWpu0QM3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEyMTYwODUzMTVaFw0yMzEyMTUwODU4MTVaMDMxMTAvBgNV
BAMTKEUwMUNGRkEyREFCQ0M5NjI5QjE3OUE1RUE4MjEzNjAyMkE1RTJEOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvBYVwHgAYIrW10LDtHPRcfET
J58+B/zu1/FVEqHM8Ox9ZbO1GktkOnrez18hdIimFvgt3ZSSn1qE2NsJMQ10PTAL
pu6uNsuF71oqOXpZw3NY32kokJ+G5/IxKMsZP8a4kZeLlM9Njyir9/5U0UamfpsK
zBdVlJrogHnuMrbh6oK8xHk8tuETCNqShBfDK5N1lTt/yIwUP0qsq0JJ+bxHgV13
UZnX63kXT70JK378Hqu7f5RiIqFTmlc2MCucn2i7Y82gBCc7jMaOEIy8R+/t2my1
n+za6ze8QAPLINhdEZzc5zkZHxzIEHuxde2f3VcUEaHkcusjhxp0rKBQW/HRAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU4Bz/otq8yWKbF5peqCE2AipeLZwwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMyMzIzOTJlMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0
MzkzNDM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC55TowDQYJKoZIhvcNAQELBQADggEBAETuNeWR
euLdgPC6V/w0KaHIGCvUbpqhxOMpZkmF/dAM0pOtARwi5JZUtP7/jRSIicgTQg6n
AiEHGP6Lj8cEoIwyu/nGXPxjZye8G3AgdniUkeFc2VVU7XPWC64ov6e985GiUtV5
GDTcLA66+BoneC2FEOt+fUMAAHpiAKntiASVAXjLXT42WNTACGiqlrFO16TZ7rTB
7yK7c7RlMAX9ZcFbM2a90HTQ6IasztMUR9CKjOtaG0XmGtON6qoxeqHV9ehbYMoS
StIPaGzGcyhTR1ZPJYFckqe/KErKzPGwZ8mzljL4EPBOkVy2UvGCcCv3l3ikneqy
dwqJqKJJ2GFg93U=
-----END CERTIFICATE-----
Generated at Tue May 13 17:49:18 2025 by rpki-client