Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235312e302f32342d3234203d3e203531373635.roa
File:                     38332e3137312e3235312e302f32342d3234203d3e203531373635.roa (raw, json)
Hash identifier:          QftM0Rh7q9ZJX6hzdn52yDvOHPnhyVi3KaxmG4tFW9k=
Subject key identifier:   4C:49:F1:00:CC:36:BE:01:50:55:16:F7:56:64:89:F3:B4:3C:04:EB
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       39AF7BBC89CA2971A49FFF47191E37188FA0B287
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235312e302f32342d3234203d3e203531373635.roa
Signing time:             Sat 22 Oct 2022 04:34:01 +0000
ROA not before:           Sat 22 Oct 2022 04:29:01 +0000
ROA not after:            Sat 21 Oct 2023 04:34:01 +0000
asID:                     51765
IP address blocks:        83.171.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:af:7b:bc:89:ca:29:71:a4:9f:ff:47:19:1e:37:18:8f:a0:b2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:01 2022 GMT
            Not After : Oct 21 04:34:01 2023 GMT
        Subject: CN=4C49F100CC36BE01505516F7566489F3B43C04EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:b2:af:ea:18:c4:81:8c:32:85:0d:f6:75:
                    7b:39:8a:e2:7a:83:d1:fb:80:a8:92:e3:27:ce:c4:
                    bd:74:06:83:af:bb:65:96:75:56:02:a0:d8:bd:88:
                    86:75:7f:7e:ce:9e:f6:89:e8:a0:12:73:b7:76:78:
                    cc:6b:4d:b2:7f:cb:0a:c2:38:79:1e:fb:52:1b:d7:
                    99:44:94:c0:54:a2:04:fa:f3:b9:49:02:26:79:d3:
                    cd:7e:d0:41:b2:cf:36:ce:8c:41:a5:22:d2:2d:5a:
                    8e:41:34:09:2d:ad:7a:83:fe:6d:bf:1b:d3:1a:ad:
                    8e:a8:a1:ca:70:88:2d:9a:cc:9e:66:17:ed:09:72:
                    a9:3a:1b:97:23:35:c9:a3:28:67:f5:1a:61:2c:84:
                    5d:f1:72:40:ea:07:1d:34:57:bd:0a:30:50:cb:c3:
                    3f:90:20:95:2d:03:88:8d:01:53:86:c5:43:ce:dc:
                    87:31:e6:a3:8e:59:ec:25:51:4f:e3:cc:93:00:88:
                    45:a7:9c:0b:15:ce:e9:a0:28:23:d7:6a:d4:1c:3e:
                    cb:32:fd:92:8f:f2:f2:4d:fa:68:9d:63:f7:a3:65:
                    9e:ae:1d:c5:39:6c:8e:c3:3a:d3:dc:1c:7a:11:91:
                    00:4a:93:c8:61:67:eb:ae:ee:e7:6c:84:d3:b2:02:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:49:F1:00:CC:36:BE:01:50:55:16:F7:56:64:89:F3:B4:3C:04:EB
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3235312e302f32342d3234203d3e203531373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:5b:29:b6:fd:63:0c:2a:11:75:03:4f:48:cf:f2:2d:08:3d:
         f4:54:ea:9c:88:63:a4:04:9b:1c:61:e7:ba:9c:23:db:bd:74:
         62:ad:07:e9:1e:ac:52:4a:bc:9d:c2:1b:ec:89:79:16:98:c2:
         84:3b:bc:d2:a7:55:27:fd:95:75:b3:f4:2a:1a:90:47:db:60:
         80:f6:ce:d6:2c:af:48:b7:91:59:8e:e8:c3:f6:10:49:f0:af:
         45:30:60:a8:e5:d1:c8:a2:20:a4:48:76:42:00:57:8f:d7:16:
         7a:2b:94:fc:3e:cc:44:a1:cd:fd:89:9c:84:d9:1e:a2:da:d5:
         09:0f:b7:96:87:96:bf:d7:45:23:d8:de:98:8b:18:50:55:43:
         60:ac:dd:41:08:ba:3c:1c:1d:ec:71:f7:e7:a0:38:a4:d5:6a:
         63:8c:e9:a3:82:76:ca:e6:1e:c9:8b:65:c6:e2:27:98:a5:6a:
         72:6e:ae:d4:81:48:7d:e4:e2:c2:70:ef:16:35:99:77:79:9f:
         16:20:a1:66:c5:b9:a0:50:ee:21:1f:bc:3a:33:fc:ba:c2:92:
         c1:36:a7:ca:d8:a2:6e:11:cb:e1:b5:c9:c8:13:aa:c7:1c:51:
         72:6f:45:06:5e:9d:0a:2c:9e:80:c5:22:63:46:c2:f5:b2:dd:
         64:9f:e8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:39:11 2025 by rpki-client