Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/37372e37382e3132302e302f32332d3234203d3e20313336373837.roa
File:                     37372e37382e3132302e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          1nkjLQfUmmhiyE2ypiNifbKZUdPMlxf8Sm7sh+mBcOg=
Subject key identifier:   4F:6B:F1:87:6B:42:A4:4E:80:92:A7:19:4E:BD:DE:92:39:33:C8:1A
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4A1D21C067A53E2ED82F48F587AA958464AB4C40
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e37382e3132302e302f32332d3234203d3e20313336373837.roa
Signing time:             Wed 07 Dec 2022 21:44:08 +0000
ROA not before:           Wed 07 Dec 2022 21:39:08 +0000
ROA not after:            Wed 06 Dec 2023 21:44:08 +0000
asID:                     136787
IP address blocks:        77.78.120.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1d:21:c0:67:a5:3e:2e:d8:2f:48:f5:87:aa:95:84:64:ab:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec  7 21:39:08 2022 GMT
            Not After : Dec  6 21:44:08 2023 GMT
        Subject: CN=4F6BF1876B42A44E8092A7194EBDDE923933C81A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:e6:de:49:21:ad:c8:f8:e3:b2:4e:44:3e:
                    18:9d:f3:e8:1c:c5:ce:e9:60:da:cc:c2:45:18:f2:
                    c1:ee:23:09:b7:22:d8:fa:e8:7a:64:bd:5b:9b:4e:
                    63:86:88:9e:7c:5f:4a:ca:67:67:f5:e5:a5:73:e8:
                    0a:ee:fc:55:13:2f:87:50:40:21:1d:e8:c3:cc:83:
                    00:64:b6:11:5c:00:3b:64:5a:28:49:61:04:d1:9f:
                    7d:6b:03:68:95:35:1e:f1:37:5d:a3:3b:51:d1:a8:
                    c0:63:29:1f:be:f1:a1:8a:81:db:b8:9d:0b:a8:fd:
                    c9:3c:e3:dc:27:75:1d:fa:ed:64:ad:a5:84:55:c9:
                    cb:0a:8f:65:5c:03:ff:65:61:5a:ee:76:01:c0:b4:
                    24:6e:a4:ef:ad:7d:11:93:1b:49:da:9e:04:a5:3d:
                    49:2b:cd:72:52:0b:77:1b:57:cc:9b:0a:1d:73:69:
                    67:66:7e:a3:97:e6:be:ff:00:ff:f8:46:d1:40:2c:
                    75:ad:18:5f:81:86:ee:3c:a0:d2:b2:56:b7:5e:42:
                    15:cf:56:8d:0c:5f:e6:dd:08:f4:d3:5a:ae:65:75:
                    4d:a5:3b:3f:40:6e:92:97:fe:75:41:45:da:64:a2:
                    03:46:83:4d:12:00:ec:c7:8f:1e:d8:32:36:1f:ad:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6B:F1:87:6B:42:A4:4E:80:92:A7:19:4E:BD:DE:92:39:33:C8:1A
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/37372e37382e3132302e302f32332d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.78.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:9e:81:36:f0:8b:55:01:41:b6:64:4a:3f:ab:b6:00:3d:
         48:b2:f6:73:62:ab:48:f4:dd:41:34:4a:6a:6a:f4:0a:f3:0a:
         fb:e7:15:a2:71:49:32:fa:8f:3c:11:b3:8d:92:c8:50:69:fb:
         df:ce:71:9d:ff:e9:4b:8b:dd:5d:60:0d:16:26:4d:d8:96:94:
         83:3a:0e:20:47:fb:07:21:ea:de:5e:db:09:a8:b4:6d:b7:b7:
         c7:06:42:a3:cb:f0:a5:16:bc:20:01:e0:4f:1a:19:94:d7:2c:
         42:ea:24:fd:1a:f1:26:88:44:ed:c2:ee:30:fa:98:27:a1:30:
         09:82:12:fe:09:3c:98:87:41:80:ad:6e:5f:c8:bd:2e:c9:16:
         08:29:43:39:1c:7b:16:69:e5:86:80:b4:ff:00:ea:5b:df:db:
         63:b6:60:a5:99:0c:75:ce:8d:f6:b0:a2:6c:c8:a7:4f:62:9e:
         df:11:16:34:cf:a5:2f:85:2b:7a:8c:95:f8:c7:ac:d6:dc:e5:
         46:de:fe:6b:c6:6f:96:d7:cb:69:78:c7:c9:fc:83:a2:b0:b1:
         8b:69:e5:51:92:8a:9f:07:c8:f0:2b:dc:bc:3d:d6:02:6f:1c:
         de:69:62:d2:33:c9:82:27:85:a4:bc:7b:69:7b:66:5e:1e:cf:
         f3:2c:ae:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:34:01 2025 by rpki-client