Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e2030.roa
File:                     34352e38352e3235302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          4nfB2oL4ebM5hJrENwZsA9Fh/4Ho1Fe8x1zCsqOe778=
Subject key identifier:   9C:62:65:64:59:EE:A5:85:68:03:C2:C5:FF:00:D7:41:7E:1D:98:04
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       21E31BC3C5DE47660D90F64D7FDF2977FB9A4174
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e2030.roa
Signing time:             Fri 29 Jul 2022 05:27:33 +0000
ROA not before:           Fri 29 Jul 2022 05:22:33 +0000
ROA not after:            Fri 28 Jul 2023 05:27:33 +0000
asID:                     0
IP address blocks:        45.85.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e3:1b:c3:c5:de:47:66:0d:90:f6:4d:7f:df:29:77:fb:9a:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Jul 29 05:22:33 2022 GMT
            Not After : Jul 28 05:27:33 2023 GMT
        Subject: CN=9C62656459EEA5856803C2C5FF00D7417E1D9804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:cf:31:7d:c2:d1:16:ca:c7:17:78:05:b2:
                    cc:55:cb:19:56:6b:1d:25:8b:90:2e:72:fd:20:f0:
                    cd:62:bc:1f:e9:cd:14:bd:99:29:b3:44:30:2d:e1:
                    dd:c0:be:14:dd:d9:78:eb:9d:df:c8:89:f7:f6:8f:
                    1a:54:93:7f:29:3a:18:69:f7:12:2b:93:89:1a:eb:
                    93:2d:de:e5:21:b5:20:e2:b7:27:50:fc:bf:77:c3:
                    e9:11:8d:2e:2d:e8:85:ca:96:3d:25:3c:7b:b7:41:
                    98:f0:c9:50:21:41:2d:90:12:83:b2:10:8b:4a:83:
                    01:58:8a:fc:60:57:4d:ab:db:fa:e1:f3:41:b7:5c:
                    2a:fd:dd:96:de:4a:83:1e:9f:9d:80:71:31:73:4e:
                    7a:4b:61:51:f3:42:51:b4:f4:4d:d9:f1:29:e1:33:
                    a0:43:70:c4:45:f8:43:a9:17:29:74:20:6c:67:78:
                    4c:3c:75:cd:f4:f5:4b:fc:c5:c9:72:11:a0:d9:78:
                    6a:f7:92:a4:f4:30:34:b8:b5:aa:36:82:79:8f:02:
                    61:01:93:3a:22:c3:e7:c9:c5:49:d9:53:58:c5:04:
                    8e:05:6b:de:15:84:47:ad:e5:8e:87:a3:8f:5e:34:
                    28:82:6b:36:76:b3:82:10:27:74:a8:67:b0:21:4b:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:62:65:64:59:EE:A5:85:68:03:C2:C5:FF:00:D7:41:7E:1D:98:04
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:87:52:cf:64:10:a8:02:24:04:6d:f0:cc:fd:af:1b:6c:56:
         36:3c:89:c2:f7:d2:fa:cb:42:63:a0:e6:c4:75:71:02:7f:88:
         b0:e1:86:0e:0d:b6:1d:9a:09:0b:2c:7a:0a:cc:f4:ea:17:cf:
         a6:2b:9a:41:dc:a7:0c:91:c4:89:68:4f:34:f7:5f:6c:40:25:
         a1:43:6e:c3:6d:57:93:08:e5:fc:72:b4:54:d7:71:eb:77:9e:
         4b:33:6e:6e:ad:81:d6:ee:34:57:41:37:af:de:48:bc:ab:4a:
         22:ce:1b:8c:71:77:e2:02:58:50:7d:39:43:bc:a9:23:4b:b0:
         67:27:23:3b:44:8e:aa:2e:4f:a7:aa:ea:38:bf:98:d9:66:d8:
         0f:eb:b5:31:14:85:49:13:93:7b:cd:60:87:2e:21:de:94:5f:
         e6:8b:cc:9a:f1:f3:45:bc:fd:da:d9:d8:ce:1b:22:16:ef:31:
         f9:24:f5:8b:f4:9c:29:ef:1f:b8:b8:e8:51:33:01:03:f8:fd:
         18:5a:11:62:49:f4:66:63:98:01:8c:7d:68:89:92:67:d4:18:
         b4:5e:d5:5e:0f:1e:ee:14:25:97:a5:a8:e1:8f:72:e7:4e:5f:
         05:94:3e:45:28:3f:4a:5a:92:73:67:68:49:d4:20:f1:90:e0:
         1e:f3:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net