Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e3133302e3131322e302f32322d3234203d3e20323033303631.roa
File:                     34352e3133302e3131322e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          d+LJsb6n0JCyJmZ1lLEW1W0T37v5cnueDYFtVr3ARXk=
Subject key identifier:   8A:12:E1:EC:23:64:BB:0E:FE:7F:D7:5C:73:07:1D:93:4C:CA:AB:3B
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       06E5D99A737CC2FAE334B02AE68E38ECA1CE70B4
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3133302e3131322e302f32322d3234203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:33:54 +0000
ROA not before:           Sat 22 Oct 2022 04:28:54 +0000
ROA not after:            Sat 21 Oct 2023 04:33:54 +0000
asID:                     203061
IP address blocks:        45.130.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e5:d9:9a:73:7c:c2:fa:e3:34:b0:2a:e6:8e:38:ec:a1:ce:70:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:54 2022 GMT
            Not After : Oct 21 04:33:54 2023 GMT
        Subject: CN=8A12E1EC2364BB0EFE7FD75C73071D934CCAAB3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8c:bb:04:25:f2:8a:08:8e:b7:4c:26:ec:8e:
                    9f:24:e1:3e:6b:7c:fc:b2:3c:43:2c:5f:94:d2:57:
                    14:34:87:4e:61:6c:0d:5d:93:03:fb:e5:d8:f7:ee:
                    ca:89:7d:79:eb:d9:47:2e:0c:88:d0:e5:d5:a5:ca:
                    67:bd:0f:2c:59:d9:ec:fa:30:44:5a:5e:f7:30:43:
                    0b:45:73:fc:2f:f8:cc:14:c4:f5:aa:54:ef:9c:ac:
                    3d:be:8a:07:d4:71:9d:93:1c:61:06:92:4b:71:91:
                    93:8f:ab:52:e6:4e:b2:c3:fe:6c:a1:74:6b:1b:fc:
                    32:1c:ba:9f:9a:f9:e9:ca:53:3e:7e:88:a0:33:c5:
                    b8:ac:ee:92:f3:d4:3f:c4:a0:82:44:30:47:ef:2d:
                    39:3e:0b:e2:3f:99:2c:9c:64:ea:07:c2:c9:59:2e:
                    16:2e:0d:52:97:56:06:6c:14:6f:60:62:69:66:29:
                    fe:f4:4f:fc:c5:7c:79:04:da:39:f4:5a:8d:9d:35:
                    04:a3:2a:71:01:43:25:db:2d:fd:d2:f1:78:1b:27:
                    3e:5d:0e:78:04:5f:0c:fb:9e:19:63:1d:20:2b:7f:
                    ce:23:22:a0:5f:c9:8c:fe:c2:2f:02:c0:d7:9f:c7:
                    22:76:02:d8:35:44:bc:53:f1:72:f5:82:63:08:7f:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:12:E1:EC:23:64:BB:0E:FE:7F:D7:5C:73:07:1D:93:4C:CA:AB:3B
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e3133302e3131322e302f32322d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:69:0d:db:35:fc:34:44:84:da:1d:2b:ea:0b:d9:bb:a3:4b:
         5a:66:9f:df:d5:b7:de:1e:62:79:34:ae:9a:35:eb:a1:0d:c0:
         2d:6f:ea:bc:d5:3e:90:ff:bb:70:67:bb:dc:8e:d8:03:57:24:
         3e:6a:4c:cb:5b:ad:e3:25:cc:f5:3b:c7:bc:4c:2d:6c:2c:46:
         c8:94:39:bd:6d:44:da:ae:3c:9f:f5:af:a8:3b:15:b8:8c:21:
         7f:5d:c9:f7:ff:56:ab:e0:be:dc:90:24:1c:92:c7:c0:1d:fd:
         e2:30:4e:e4:a0:4b:27:61:9b:0f:2e:27:35:26:57:7b:12:c1:
         4b:44:b1:ff:91:13:c8:1f:b2:aa:68:eb:51:6e:ad:0e:93:f6:
         7b:f9:df:3a:5d:2a:56:18:c4:28:d7:5c:e8:7f:40:de:7d:00:
         5c:a6:4c:3a:48:1a:d6:fb:aa:55:23:5f:4a:12:de:23:db:d6:
         e4:e0:53:f7:bf:f2:73:14:63:5f:77:72:37:15:ac:42:78:10:
         76:3d:6a:98:8c:6f:f0:98:f5:92:31:39:d4:da:e3:33:58:60:
         f9:fd:f5:57:b7:49:42:1d:8a:9f:5c:1d:33:d5:e4:ff:a0:64:
         67:7c:8f:82:1b:9c:2f:25:33:39:96:80:4d:48:05:a5:a2:46:
         19:72:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:59:23 2025 by rpki-client