Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134362e302f32342d3234203d3e203537313732.roa
File:                     38322e3138302e3134362e302f32342d3234203d3e203537313732.roa (raw, json)
Hash identifier:          b/7qACerFGYCtTVJxvMufcqe8RPNbpk76TWVim0kTxg=
Subject key identifier:   DA:1D:F2:6D:FA:77:71:F6:B6:DD:4B:42:C4:23:9C:64:08:A5:A4:CE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       32C6C9977E0025E3E1031D684FE514D832A14103
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134362e302f32342d3234203d3e203537313732.roa
Signing time:             Sat 22 Oct 2022 04:34:18 +0000
ROA not before:           Sat 22 Oct 2022 04:29:18 +0000
ROA not after:            Sat 21 Oct 2023 04:34:18 +0000
asID:                     57172
IP address blocks:        82.180.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c6:c9:97:7e:00:25:e3:e1:03:1d:68:4f:e5:14:d8:32:a1:41:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:18 2022 GMT
            Not After : Oct 21 04:34:18 2023 GMT
        Subject: CN=DA1DF26DFA7771F6B6DD4B42C4239C6408A5A4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:c0:ae:8e:ad:ca:ef:ee:6f:70:6d:c1:df:
                    00:99:2c:59:77:01:04:01:de:e1:48:57:4f:23:2b:
                    2c:c8:bc:8a:0d:18:3c:8b:a6:79:d7:de:11:8d:b3:
                    9e:b0:53:9b:04:7f:37:6d:bc:4c:0f:c8:a1:c0:db:
                    0b:f3:68:82:8e:92:99:6d:ad:3e:94:65:0f:ed:8f:
                    79:6b:42:ec:89:74:94:d1:1b:ac:7c:37:66:c4:04:
                    17:95:c0:e5:5e:18:19:27:3c:7d:96:61:1e:00:73:
                    45:38:c0:ce:77:8e:e2:d5:1d:88:8e:80:9b:67:7a:
                    ac:28:b2:3c:89:8d:22:92:7b:15:e5:dd:1a:0a:51:
                    27:0f:77:03:6c:2f:1a:30:a7:31:86:21:97:1c:96:
                    d5:c0:a4:92:e7:b8:a8:f7:e2:b2:87:e0:8b:5d:19:
                    ba:7c:a5:f1:3e:82:41:c3:b4:76:5f:da:82:13:df:
                    70:72:e9:e4:99:75:cb:6c:16:47:12:5c:38:53:6e:
                    9b:66:3d:11:c4:a6:43:7f:74:f1:9b:da:fe:81:65:
                    83:c6:e6:9e:92:11:fd:0c:45:0e:74:2a:91:cf:56:
                    60:2f:6d:db:89:68:55:1f:16:f2:38:6e:80:c7:a8:
                    53:77:be:b8:6f:3e:7e:bc:db:84:79:90:cf:d4:c9:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1D:F2:6D:FA:77:71:F6:B6:DD:4B:42:C4:23:9C:64:08:A5:A4:CE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3134362e302f32342d3234203d3e203537313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:88:57:56:bc:80:f9:3b:a0:f0:66:83:48:32:3f:8b:24:cc:
         2d:d3:d1:bb:f2:9c:c4:5d:c4:59:ba:ad:9e:be:55:0d:04:93:
         2c:bd:3e:88:d8:5b:ba:82:0b:80:47:62:51:bf:b4:ad:25:58:
         dd:9f:62:ac:52:a2:4b:82:ab:21:b0:27:93:8e:97:c4:24:ad:
         77:7c:4f:7b:4d:c0:fd:92:00:e9:58:0e:2e:6a:ae:b5:dc:73:
         7a:06:31:9a:7a:6e:9a:33:e3:de:10:72:01:ca:07:b9:42:46:
         bb:7a:1f:b8:42:6f:43:b9:f2:be:9d:59:66:a0:d7:ba:0f:d0:
         d8:8b:13:b9:94:1b:f7:99:83:cf:74:9f:52:77:eb:66:86:89:
         fd:c4:7e:63:f6:45:79:be:ef:7d:75:0a:26:fe:a7:b7:a5:fe:
         d8:89:4c:49:f1:18:0b:cd:97:ad:a4:d8:85:39:1e:e8:01:e2:
         d3:e9:21:2d:1e:c2:38:e4:65:5e:bf:9e:d9:d8:8f:52:8b:0d:
         a6:90:b5:16:d9:48:1f:de:96:c5:f9:9b:bb:90:f8:b8:9f:5a:
         f3:7f:9c:c9:ef:a6:68:4c:22:0d:ac:45:50:a9:ab:d3:44:95:
         d4:c6:a9:34:d4:98:00:a2:77:f9:34:a6:94:35:68:0f:d6:5e:
         7b:a7:c4:ce
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUMsbJl34AJePhAx1oT+UU2DKhQQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MThaFw0yMzEwMjEwNDM0MThaMDMxMTAvBgNV
BAMTKERBMURGMjZERkE3NzcxRjZCNkRENEI0MkM0MjM5QzY0MDhBNUE0Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdcCujq3K7+5vcG3B3wCZLFl3
AQQB3uFIV08jKyzIvIoNGDyLpnnX3hGNs56wU5sEfzdtvEwPyKHA2wvzaIKOkplt
rT6UZQ/tj3lrQuyJdJTRG6x8N2bEBBeVwOVeGBknPH2WYR4Ac0U4wM53juLVHYiO
gJtneqwosjyJjSKSexXl3RoKUScPdwNsLxowpzGGIZccltXApJLnuKj34rKH4Itd
Gbp8pfE+gkHDtHZf2oIT33By6eSZdctsFkcSXDhTbptmPRHEpkN/dPGb2v6BZYPG
5p6SEf0MRQ50KpHPVmAvbduJaFUfFvI4boDHqFN3vrhvPn6824R5kM/UyaSPAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU2h3ybfp3cfa23UtCxCOcZAilpM4wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODMyMmUzMTM4MzAyZTMxMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzczMTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBABStJIwDQYJKoZIhvcNAQELBQADggEBABKIV1a8
gPk7oPBmg0gyP4skzC3T0bvynMRdxFm6rZ6+VQ0Ekyy9PojYW7qCC4BHYlG/tK0l
WN2fYqxSokuCqyGwJ5OOl8QkrXd8T3tNwP2SAOlYDi5qrrXcc3oGMZp6bpoz494Q
cgHKB7lCRrt6H7hCb0O58r6dWWag17oP0NiLE7mUG/eZg890n1J362aGif3EfmP2
RXm+7311Cib+p7el/tiJTEnxGAvNl62k2IU5HugB4tPpIS0ewjjkZV6/ntnYj1KL
DaaQtRbZSB/elsX5m7uQ+LifWvN/nMnvpmhMIg2sRVCpq9NEldTGqTTUmACid/k0
ppQ1aA/WXnunxM4=
-----END CERTIFICATE-----
Generated at Tue May 13 19:49:18 2025 by rpki-client