Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e3133322e3234302e302f32322d3234203d3e203437353833.roa
File:                     34352e3133322e3234302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          VwsP5C891weRBsx8r4aKYWp8JcVGR1xC2KWXPjvd4Cs=
Subject key identifier:   FF:BC:80:1F:4C:57:44:FF:49:ED:00:EF:BB:BD:00:25:E2:22:D1:8C
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       35F5E79ED4D0D5B9655804E784D85BE7E16B58D7
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3133322e3234302e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:03 +0000
ROA not before:           Sat 22 Oct 2022 04:29:03 +0000
ROA not after:            Sat 21 Oct 2023 04:34:03 +0000
asID:                     47583
IP address blocks:        45.132.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f5:e7:9e:d4:d0:d5:b9:65:58:04:e7:84:d8:5b:e7:e1:6b:58:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:03 2022 GMT
            Not After : Oct 21 04:34:03 2023 GMT
        Subject: CN=FFBC801F4C5744FF49ED00EFBBBD0025E222D18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:89:70:b8:4f:9c:96:06:8c:e9:bb:00:92:
                    bc:dd:fc:74:ad:32:9e:89:af:25:72:96:eb:cf:61:
                    2c:09:ed:5a:71:3a:af:f9:ad:fe:7b:47:e0:a4:17:
                    da:f8:45:9b:55:94:9b:bf:a1:7a:5d:83:47:5c:6a:
                    e5:13:45:1f:f5:28:45:98:36:8a:0b:b0:3c:7a:aa:
                    9a:a5:5d:87:f2:bc:6a:73:72:5c:91:4d:0e:12:45:
                    58:ec:cb:45:b5:c0:3c:8f:4e:ba:f1:aa:67:f4:e7:
                    95:12:64:2c:2c:40:cd:91:0b:6f:17:96:29:04:52:
                    cf:88:67:e6:d0:f9:7e:99:e3:70:12:56:1a:d3:9a:
                    ac:39:ec:31:8a:5d:5e:75:3f:71:aa:7b:31:de:0d:
                    69:52:fd:63:3d:e4:a6:eb:33:38:e8:bb:e6:c4:43:
                    d5:f5:55:40:a5:61:a1:99:cb:d0:6b:fe:9b:b9:ef:
                    24:eb:1a:5c:49:fe:f5:80:2e:8e:74:c3:c5:9c:27:
                    9f:c2:5e:d2:e2:62:9e:70:f6:44:24:ee:19:1f:26:
                    1c:52:21:1b:d0:68:99:a4:f9:1f:1f:77:9d:98:a2:
                    c6:02:21:5f:08:62:c9:af:fe:7d:c3:77:aa:f7:f3:
                    10:db:0e:b1:34:dc:5f:95:29:f1:8c:5d:d2:82:b8:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:80:1F:4C:57:44:FF:49:ED:00:EF:BB:BD:00:25:E2:22:D1:8C
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3133322e3234302e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:32:2e:ab:47:94:fd:52:44:67:4d:78:7b:ce:da:8e:d6:38:
         7a:c7:b9:2e:ef:5e:fa:15:8e:24:d9:05:fb:dc:77:d1:ab:43:
         2c:f9:55:90:11:40:ac:fb:65:9a:12:13:05:d7:e3:c4:6a:8c:
         14:28:1a:f8:7b:e2:18:05:19:ed:e0:77:97:61:51:77:68:4e:
         f5:21:21:ff:9d:13:44:72:5b:6f:5a:75:02:89:64:e8:00:e6:
         29:5b:8c:65:92:ca:d4:7e:e4:6d:7e:81:78:ae:a5:98:4b:8a:
         a8:99:74:67:e3:80:a6:a8:e8:a8:32:5f:a3:e9:fe:39:8a:e1:
         09:30:5c:7f:40:57:3d:34:76:02:6f:79:59:6b:9c:7a:58:2f:
         95:60:99:a0:64:0e:fd:fd:8b:29:da:90:4a:44:9b:ff:9c:53:
         7e:d8:00:33:01:fc:7e:68:df:c8:ae:01:7e:f8:7e:ac:bd:dc:
         a8:45:44:31:3c:4e:2c:d5:63:00:bf:5b:17:99:c8:d7:c7:8b:
         5d:52:0a:5d:59:ae:47:a9:96:89:97:97:57:93:ac:28:64:d2:
         5e:bd:45:e9:d5:83:59:af:67:2b:1c:45:dc:87:10:65:18:26:
         71:1d:b6:d1:05:07:4d:5e:97:f1:1d:86:0d:ea:d4:08:39:80:
         48:9d:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:23:59 2025 by rpki-client