Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/322e35392e3135372e302f32342d3234203d3e203531373635.roa
File:                     322e35392e3135372e302f32342d3234203d3e203531373635.roa (raw, json)
Hash identifier:          a0/wrbibtG4mDZspv7KyMEBnnoIVoTrFfYhcEV9RE9s=
Subject key identifier:   6B:57:9E:45:EF:28:9C:DB:6C:00:7D:70:AD:BF:00:82:02:A3:62:4E
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       0EAD04646CB8D59C093758304E85283FC19D0A0B
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/322e35392e3135372e302f32342d3234203d3e203531373635.roa
Signing time:             Sat 22 Oct 2022 04:33:38 +0000
ROA not before:           Sat 22 Oct 2022 04:28:38 +0000
ROA not after:            Sat 21 Oct 2023 04:33:38 +0000
asID:                     51765
IP address blocks:        2.59.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ad:04:64:6c:b8:d5:9c:09:37:58:30:4e:85:28:3f:c1:9d:0a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Oct 22 04:28:38 2022 GMT
            Not After : Oct 21 04:33:38 2023 GMT
        Subject: CN=6B579E45EF289CDB6C007D70ADBF008202A3624E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:c8:bb:2b:31:48:bc:00:48:1e:ea:67:8d:
                    9a:be:23:ea:dc:cc:11:b9:25:7c:e7:ec:12:f0:1c:
                    8e:da:71:93:1a:c4:eb:e7:1d:a1:6c:bd:0e:29:d0:
                    09:a2:65:a1:4f:8d:54:e8:b0:f7:f0:74:67:df:af:
                    d4:cb:1f:59:c5:a2:89:4e:8e:92:0b:d2:a9:46:86:
                    ac:e3:3d:39:25:a8:01:4d:63:ce:b1:71:36:e8:b0:
                    76:11:3c:bb:47:f1:05:87:ad:af:a1:05:19:d2:07:
                    7f:c8:10:94:fc:23:76:be:6a:df:8e:8f:62:c6:0d:
                    cc:cf:fd:e0:a6:5b:ea:d4:d2:d3:40:93:d8:fc:90:
                    1b:55:1a:f7:14:fb:ba:e4:5a:48:41:0d:11:e5:b6:
                    53:15:fb:83:b3:b0:43:43:d2:a3:93:30:0b:aa:58:
                    31:02:e9:1c:97:16:43:09:25:4c:47:a1:95:76:6f:
                    92:c8:00:8a:42:3f:a5:4f:e0:70:fc:69:3d:48:b9:
                    f6:c2:14:11:a3:0b:7e:47:db:f6:28:7a:03:be:35:
                    31:c8:ec:d8:1d:32:18:1d:cc:74:99:c9:02:90:f0:
                    e6:54:72:2c:c1:01:b7:2d:67:ae:f6:23:ac:46:f9:
                    b2:64:14:3d:f3:e1:71:ed:50:51:cc:69:53:a1:a1:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:57:9E:45:EF:28:9C:DB:6C:00:7D:70:AD:BF:00:82:02:A3:62:4E
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/322e35392e3135372e302f32342d3234203d3e203531373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:84:b1:e7:1e:3d:d6:4f:db:e3:d4:bb:40:1a:42:1d:8a:62:
         83:a1:74:55:9d:84:f7:95:cb:0e:06:93:66:65:f5:de:28:d7:
         78:ad:d8:df:14:2f:e4:1f:39:24:e3:82:6e:52:3d:f5:d4:36:
         8e:b2:85:ff:e0:f7:e1:83:b9:f6:e5:9a:64:00:b3:8f:35:d8:
         5f:1d:1c:39:48:2c:da:a8:3e:fb:42:8a:d6:57:f3:af:52:b8:
         fa:ec:29:02:e6:f1:7a:1c:f2:e9:24:0e:3f:4c:bb:18:38:8c:
         1f:4f:ea:bf:97:69:2d:dd:5e:e5:48:4e:9e:85:5d:7f:ae:86:
         aa:d3:70:9d:27:fd:cc:c5:15:c2:4a:5f:e0:a6:c3:c2:4d:4f:
         8d:38:68:2a:df:25:fc:41:66:27:5e:8a:5c:17:f1:31:bc:8d:
         d6:6d:f9:4c:a5:2e:81:26:96:dc:9a:1a:8d:47:92:f1:30:dc:
         30:22:9a:af:90:43:63:77:a6:bd:64:be:52:ae:0a:21:22:04:
         e5:ee:30:b4:77:a9:4e:96:12:9a:8a:14:f6:91:c6:33:9f:6c:
         d5:7a:07:bc:93:94:7b:10:d7:43:2b:6a:dc:2f:a8:d9:e5:e2:
         29:03:e5:1a:bc:6f:ed:7f:e2:53:5d:94:44:2f:69:66:b7:53:
         39:e4:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net