Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e31312e38302e302f32342d3234203d3e2030.roa
File:                     34352e31312e38302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          iE+G0HvZleI/e/YHj4y3qZbneMAU3FgIe9MWZpAxAaE=
Subject key identifier:   2A:ED:57:FB:ED:52:5D:F9:84:00:77:9B:D9:25:16:A3:AB:15:50:17
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       79BAED8888F90D04ADA59B49F8B569128F95BE24
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e31312e38302e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:22:10 +0000
ROA not before:           Fri 03 Mar 2023 16:17:10 +0000
ROA not after:            Fri 01 Mar 2024 16:22:10 +0000
asID:                     0
IP address blocks:        45.11.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ba:ed:88:88:f9:0d:04:ad:a5:9b:49:f8:b5:69:12:8f:95:be:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Mar  3 16:17:10 2023 GMT
            Not After : Mar  1 16:22:10 2024 GMT
        Subject: CN=2AED57FBED525DF98400779BD92516A3AB155017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:6c:24:2e:36:32:1f:66:25:fb:87:12:0f:
                    9f:c3:bd:d9:2b:48:a9:2e:77:1c:bb:c6:68:bf:62:
                    a8:a3:59:d3:25:ce:98:26:99:ca:46:9c:13:9f:b8:
                    c4:bc:5d:7c:24:84:63:86:6f:00:8c:e7:39:b1:2e:
                    9d:5d:37:b9:e1:c8:80:e0:01:be:2e:98:db:33:b8:
                    62:8f:01:7b:91:59:d6:3c:fd:3a:00:b5:af:df:27:
                    0d:88:0d:e3:46:37:77:3e:45:9a:62:b9:6f:b2:58:
                    78:48:a6:9e:dc:57:da:e7:58:e8:24:5a:4e:60:fa:
                    05:fd:8d:da:f2:c9:e7:78:46:84:b1:2c:a4:c7:24:
                    21:a1:58:b4:ce:56:77:7e:7e:e6:76:cf:1c:e8:e3:
                    69:86:6c:e3:c3:ee:36:14:94:a1:08:72:67:6f:59:
                    38:77:3b:12:7e:4a:5d:d3:4b:18:61:e3:64:2e:e5:
                    28:19:be:43:1e:a0:0e:3e:0e:7f:65:85:9f:0f:e5:
                    6a:14:72:d0:11:19:c7:2a:4b:ec:d8:eb:9e:64:b8:
                    2e:b9:29:07:3c:1f:6c:b6:15:e3:f6:a3:5c:cf:4b:
                    aa:af:d3:7d:c3:d8:47:df:67:7f:36:3e:9a:92:42:
                    1c:27:9c:67:8a:45:7d:a3:cb:3b:3d:42:9a:86:fe:
                    66:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:ED:57:FB:ED:52:5D:F9:84:00:77:9B:D9:25:16:A3:AB:15:50:17
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e31312e38302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b9:77:3d:b7:6f:be:dc:a8:73:a7:bc:db:a0:41:70:45:73:
         58:e6:7d:09:28:66:9c:86:2a:56:c6:29:64:e8:e4:31:bc:25:
         75:78:55:99:e1:d6:76:18:6b:c9:94:f1:77:6b:58:6f:9d:83:
         17:1f:e6:6b:3b:58:f2:ef:7c:e2:0c:c5:09:c3:68:ce:2c:82:
         04:61:7e:e1:ec:8e:27:53:5b:be:86:b5:8e:35:c1:37:ec:16:
         85:d1:53:00:b7:96:bc:5a:43:5f:b1:f1:19:00:49:a6:36:35:
         3c:12:c1:1f:db:9d:c7:63:43:0b:de:e1:74:0a:2f:19:01:1d:
         98:a5:64:15:b6:fe:b8:d9:a2:12:66:59:3e:de:0f:a6:9f:9e:
         67:28:4f:09:66:b4:56:24:cb:8e:c4:ad:12:11:ff:8a:17:e8:
         ea:11:ea:1d:6b:70:f9:fd:31:18:97:e6:de:ba:c7:32:b3:19:
         72:95:ae:97:e4:56:1b:e8:1f:f2:40:00:dd:3c:94:7c:bb:85:
         28:15:00:a8:fc:0f:ef:0a:c8:49:29:73:ff:4c:4c:83:b1:76:
         f9:c0:41:ac:ab:87:c4:6a:0e:8f:8f:77:c8:f5:6d:f0:19:2b:
         61:38:37:5f:b8:3a:77:ef:cb:ee:c3:6e:65:d6:ed:f3:32:56:
         98:49:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net