Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa
File:                     34352e3134332e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          e8pNQqK5Hn/+9cTbMd5FYP3sKLXcSAsXN4bz0rTmS+w=
Subject key identifier:   58:68:4F:9E:67:6A:0E:F9:69:40:AA:0B:78:F2:49:B7:AA:86:CE:20
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       7230C96FA0DBC7C009DF890003F8DDC5EFF64DC1
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:59 +0000
ROA not before:           Sat 22 Oct 2022 04:28:59 +0000
ROA not after:            Sat 21 Oct 2023 04:33:59 +0000
asID:                     136787
IP address blocks:        45.143.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:30:c9:6f:a0:db:c7:c0:09:df:89:00:03:f8:dd:c5:ef:f6:4d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:28:59 2022 GMT
            Not After : Oct 21 04:33:59 2023 GMT
        Subject: CN=58684F9E676A0EF96940AA0B78F249B7AA86CE20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:aa:79:ed:af:b5:5a:8e:f6:fc:6e:2a:aa:
                    5a:db:8d:bc:51:5e:13:41:e0:a1:7f:db:b5:e9:5a:
                    b0:f4:3a:41:bd:06:cd:12:d1:51:e9:76:7e:68:96:
                    87:c8:da:1a:f3:1f:f5:fb:2e:c6:e5:19:86:e6:b1:
                    2f:84:9b:08:91:83:92:3a:0c:ca:c8:98:99:da:09:
                    90:b1:d5:aa:a5:2e:28:fe:e3:fc:c9:ab:38:ed:b6:
                    7c:25:76:3e:64:1e:7c:1f:15:c4:b6:a8:b8:1d:67:
                    b9:23:e8:7e:67:4b:f7:9c:58:e6:03:99:ee:36:1e:
                    27:23:88:51:ac:be:97:48:13:fe:30:c6:1b:58:1e:
                    8b:a9:5a:0e:fb:b1:7f:e6:f3:41:f0:ea:a9:a4:f1:
                    fa:79:b8:f3:26:56:f8:35:51:90:97:54:46:c0:dc:
                    59:c6:e3:e4:e4:a1:0e:32:b1:da:a3:d1:83:92:08:
                    eb:41:7e:58:d7:f5:b2:f8:e7:a8:ab:54:a7:70:83:
                    86:fb:d7:1a:20:ec:10:de:02:97:40:28:fe:ca:93:
                    79:f6:27:2e:85:fd:29:98:12:65:86:9c:0a:80:70:
                    a4:72:d1:86:d9:24:73:11:0b:cf:b3:67:bd:d1:2e:
                    53:a3:33:65:3b:52:7f:e7:18:b8:8e:97:96:b2:3a:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:68:4F:9E:67:6A:0E:F9:69:40:AA:0B:78:F2:49:B7:AA:86:CE:20
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:c9:a8:6b:b5:15:df:c1:eb:cb:93:8e:05:da:ac:f3:bc:ff:
         d4:5c:44:b9:75:42:f2:e6:8a:82:40:f7:8d:db:c4:6c:62:e4:
         59:c2:75:a1:8b:e7:d1:45:7c:33:9f:4b:6b:b9:6d:c9:8a:6d:
         e3:98:9a:e3:13:61:6b:f2:a7:b6:ca:0b:c6:d2:a0:dd:d3:55:
         1a:01:17:2c:61:7f:f9:4f:ed:a0:f8:33:12:f3:46:62:89:16:
         40:49:23:11:59:81:f6:e7:ab:65:cc:f6:0e:af:a9:16:9f:c6:
         ce:55:c2:5d:91:4f:45:12:ee:c9:7d:eb:bc:03:24:f9:68:9b:
         91:a4:28:d0:d5:6e:6a:35:f6:f0:4f:d3:d7:89:1b:4e:b8:50:
         1b:40:15:3f:44:84:10:3e:36:1a:5c:03:bf:ec:3b:7d:a0:30:
         93:a2:aa:d1:f2:e5:3b:fc:16:d2:9d:59:5b:6f:15:2a:0c:a0:
         ce:29:73:d5:6e:57:c2:fe:95:3f:b9:b9:49:03:d6:1a:a3:9a:
         04:57:63:84:c0:fb:06:88:5d:52:08:23:5c:fa:c9:a5:5d:8d:
         df:48:1d:9b:3f:26:81:be:60:74:97:15:ee:15:f9:84:36:48:
         cd:4f:15:40:7c:0c:ae:16:f6:78:b2:1f:f7:a4:1a:fb:45:a5:
         26:59:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:49:02 2025 by rpki-client