Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39342e3130312e3131332e302f32342d3234203d3e2030.roa
File:                     39342e3130312e3131332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          UJXCxrqJUUDVccKFtlADwu+N2YtevhMUg2gmVXjeOe4=
Subject key identifier:   13:AF:3F:DC:42:B4:A2:71:64:F7:A8:39:42:43:40:5C:D2:2B:64:13
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       3BDDBDC5F51298B04F4BED8CF6224DBCD8220F4C
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39342e3130312e3131332e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:08:33 +0000
ROA not before:           Fri 03 Mar 2023 16:03:33 +0000
ROA not after:            Fri 01 Mar 2024 16:08:33 +0000
asID:                     0
IP address blocks:        94.101.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:dd:bd:c5:f5:12:98:b0:4f:4b:ed:8c:f6:22:4d:bc:d8:22:0f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:03:33 2023 GMT
            Not After : Mar  1 16:08:33 2024 GMT
        Subject: CN=13AF3FDC42B4A27164F7A8394243405CD22B6413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:c6:11:d2:39:24:eb:6c:62:12:2f:19:bb:
                    46:eb:a7:12:bf:b8:64:59:ac:b2:6f:b3:1e:78:3f:
                    b7:98:3c:ab:8b:30:bd:13:e3:e2:8e:30:28:27:56:
                    80:f1:9c:1d:d6:cc:37:84:ae:5f:0c:8e:ab:fc:6f:
                    54:7b:05:a5:17:27:8c:2e:92:d1:2d:a5:fd:32:37:
                    65:e2:44:67:e6:25:eb:66:71:e6:28:20:c0:82:a8:
                    e4:af:6b:3c:9f:82:ba:3e:c1:0b:63:52:38:67:7a:
                    06:50:f6:ea:83:98:5f:6b:ca:37:df:df:fe:f3:6d:
                    fc:19:51:8f:64:27:b2:c4:93:cc:88:ab:0b:84:5f:
                    ea:4d:e9:a0:58:01:74:4c:3c:91:27:40:0d:d8:ee:
                    db:53:99:58:09:aa:6d:a1:38:fd:fb:44:17:a2:36:
                    81:55:16:e1:ac:f8:7e:dd:8a:db:4a:f3:6d:89:6d:
                    72:61:5c:8b:64:b4:35:6b:7a:20:f4:71:1f:09:cb:
                    2d:6e:da:07:bf:1b:a3:e1:65:da:93:0f:1c:be:bd:
                    e3:ae:0c:49:5c:48:40:f0:a3:ed:c7:fe:20:a6:d9:
                    2a:53:fd:dd:d3:a3:83:ce:33:61:68:00:58:28:46:
                    fd:11:6d:41:12:d7:79:ef:a1:db:aa:ac:65:48:ff:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AF:3F:DC:42:B4:A2:71:64:F7:A8:39:42:43:40:5C:D2:2B:64:13
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39342e3130312e3131332e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.101.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:fb:67:17:f9:e6:92:d1:d5:3a:2c:8b:a3:56:80:f3:9f:3d:
         81:2a:14:b4:e7:25:80:32:1d:b0:ed:e0:7a:99:33:e9:5e:fe:
         71:bb:0b:c6:4b:22:ec:d5:16:f1:1a:bb:d5:f8:63:86:e8:f3:
         d5:17:e6:cd:3f:d1:fc:fe:bc:33:8e:d6:53:4f:0f:67:42:83:
         18:2e:f9:73:89:f0:95:6a:26:71:82:0d:6f:1f:c0:86:5f:44:
         22:52:2b:4b:aa:e6:0f:c4:1c:c7:36:a5:63:24:28:0f:0c:8f:
         22:85:1a:22:6c:96:ac:ce:65:ef:fb:f7:e0:95:9c:90:6d:92:
         96:b5:57:75:d4:fe:28:97:35:54:c1:a6:e8:17:70:05:06:40:
         61:ed:2f:64:68:b2:20:ba:3e:c5:94:fb:a0:3d:6c:c3:64:e1:
         81:c5:24:e3:55:a9:c6:1f:bb:1d:39:f6:1a:c1:a0:1d:bd:cc:
         02:d6:ca:cd:f6:2e:2f:d8:85:9d:65:8c:3b:c6:58:1a:cf:a1:
         60:28:81:bc:01:b0:55:c9:e4:73:28:7e:af:0e:14:f6:86:a6:
         00:06:cc:d7:3f:32:7c:66:07:db:15:75:f6:a6:8e:e7:e3:2a:
         50:3d:2c:1d:91:26:a7:df:f4:ac:6d:cf:c7:4a:56:a1:cc:06:
         c8:4f:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:58:31 2025 by rpki-client