Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa
File:                     3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier:          KIG6gvscgMLCM1BR2NjHc0PDc4zf1Jtsu/3tLW1r6Bc=
Subject key identifier:   75:48:77:0D:A1:47:5A:74:A1:A8:80:26:88:48:84:0F:6A:79:24:B5
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       14D98F57CBC6110C5848B02A356CB1B03D1EBD9F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa
Signing time:             Sat 22 Oct 2022 04:34:22 +0000
ROA not before:           Sat 22 Oct 2022 04:29:22 +0000
ROA not after:            Sat 21 Oct 2023 04:34:22 +0000
asID:                     141995
IP address blocks:        194.195.90.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d9:8f:57:cb:c6:11:0c:58:48:b0:2a:35:6c:b1:b0:3d:1e:bd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:22 2022 GMT
            Not After : Oct 21 04:34:22 2023 GMT
        Subject: CN=7548770DA1475A74A1A880268848840F6A7924B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:46:c3:4b:22:d0:e3:56:a5:93:20:00:70:66:
                    60:71:13:1c:23:b8:5e:bf:6f:9c:91:19:cb:4d:15:
                    7b:57:d6:9a:50:69:40:63:15:2e:17:21:f3:ac:bf:
                    9e:d1:a8:18:78:99:67:aa:41:65:9c:12:4f:f2:cb:
                    09:ca:ac:a0:50:a2:51:1a:18:ad:eb:04:d8:c0:83:
                    57:dc:c2:7b:f5:b9:59:38:22:ed:fa:c3:10:a6:9b:
                    b4:5d:5a:b0:7c:07:81:4d:42:42:3d:f5:c8:c0:ba:
                    4a:97:70:48:03:dd:ac:99:44:06:ee:29:3e:0b:1f:
                    08:e4:ef:27:a1:e7:ce:ee:8b:f0:1a:33:13:b7:1a:
                    43:5e:63:d2:66:01:18:48:6e:bb:ad:78:a6:24:80:
                    90:fa:68:af:3b:da:00:fb:ad:a8:99:35:74:c7:0b:
                    48:ee:e5:f4:e7:da:17:a4:c7:f1:b8:2c:34:4d:51:
                    69:ab:2b:95:97:f1:fc:7b:7f:59:66:f6:3c:b3:03:
                    26:ac:22:95:08:e6:df:d2:83:6e:0e:63:ce:93:f7:
                    b8:9b:43:f4:7a:77:7c:55:d0:d7:92:68:7e:e0:eb:
                    04:d3:21:ce:14:06:74:e6:82:04:98:8e:86:fc:64:
                    f7:00:bc:67:db:9d:4d:bb:b1:06:1d:30:cd:2d:28:
                    82:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:48:77:0D:A1:47:5A:74:A1:A8:80:26:88:48:84:0F:6A:79:24:B5
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:93:0a:f3:2c:c3:7a:32:71:1a:b8:8f:8e:31:eb:06:4d:89:
         dc:c5:fe:96:b6:83:5e:61:0a:f7:9f:3e:16:1a:dd:21:38:eb:
         50:d9:7a:14:08:7c:d6:5e:42:fc:64:ce:18:2f:81:e2:1f:88:
         fc:c5:26:23:06:65:e6:0b:27:7e:7d:55:87:af:f0:32:6f:25:
         b6:9e:62:4b:21:81:2e:df:4c:7f:f6:49:e0:42:4b:03:14:cd:
         54:af:6d:20:05:ec:1b:4b:60:19:19:d4:89:3a:40:a8:94:d7:
         7f:f3:89:3e:5c:ce:3d:f8:98:52:0b:fa:cb:46:9d:a6:a8:9d:
         0e:e7:15:c3:54:8a:1d:fc:9e:2d:92:f6:6a:dd:70:93:3b:2f:
         1f:98:f2:a9:6b:fe:db:62:de:39:06:5b:a9:e0:fe:10:66:05:
         9d:2d:08:fb:b5:df:0e:39:75:f1:fe:6a:1d:40:e5:51:54:25:
         eb:3e:6d:71:34:7f:81:bc:91:ad:74:49:d7:d2:37:30:11:91:
         3e:66:b9:b6:9d:c2:ca:47:5d:1f:a4:39:a1:74:15:4d:38:49:
         82:66:96:99:75:37:1f:85:51:f2:e4:1f:5b:ca:07:f3:48:8c:
         4c:08:0c:79:35:e1:b7:5f:1c:e3:43:7a:da:77:2e:69:b9:f3:
         85:ae:f1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:44:37 2025 by rpki-client