Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203631333137.roa
File:                     34352e38352e3235302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          rq1rQ7Kczg5wVHwgQEwWnhm6V6adQfRDtPALMJNgg74=
Subject key identifier:   1E:4A:5C:53:88:D3:EA:82:49:3C:D7:C9:04:60:2E:77:6C:EF:FC:20
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       631EB47C88569B9AA659DE3A926CAA193FFA2E58
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:41:20 +0000
ROA not before:           Tue 28 Jun 2022 04:36:20 +0000
ROA not after:            Tue 27 Jun 2023 04:41:20 +0000
asID:                     61317
IP address blocks:        45.85.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1e:b4:7c:88:56:9b:9a:a6:59:de:3a:92:6c:aa:19:3f:fa:2e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Jun 28 04:36:20 2022 GMT
            Not After : Jun 27 04:41:20 2023 GMT
        Subject: CN=1E4A5C5388D3EA82493CD7C904602E776CEFFC20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:77:24:f4:0d:b0:56:2c:e0:7f:5e:d7:cf:
                    84:b0:2b:00:40:2e:98:32:55:ed:a1:95:e2:ee:fd:
                    e7:bc:8d:f4:3a:e0:00:a7:5a:59:7e:95:df:3c:9a:
                    e1:8f:6d:5a:3c:c3:0d:36:24:db:83:42:5b:48:58:
                    13:6d:de:9e:8e:77:18:fd:cf:a6:60:c8:b0:7e:35:
                    3f:51:42:cb:b7:ff:b9:f7:be:e7:5b:7b:8d:05:8a:
                    98:f0:2d:83:fa:1b:8b:ff:10:12:1d:3a:09:a2:13:
                    15:c9:6a:a6:a4:e4:c8:37:56:8d:5d:1a:a0:d7:62:
                    91:a9:aa:d1:b1:08:35:4d:92:2e:42:5d:a4:42:3e:
                    1b:d1:a8:ed:fb:a9:6c:09:d8:06:ff:2a:43:8f:d7:
                    30:24:2e:f7:b7:89:71:53:78:c8:78:62:3c:42:5c:
                    df:19:d4:0d:3e:a6:a9:d1:34:d5:47:ab:58:62:15:
                    46:78:fc:a0:08:35:a1:ef:5b:2a:d4:d5:7d:dd:58:
                    88:3e:ef:6a:8e:b8:ee:c2:e4:25:e3:5e:3c:aa:8b:
                    b9:b1:e9:a2:fa:22:1c:02:0f:9e:6f:53:8e:35:a0:
                    ea:6d:a4:e3:f5:b7:59:d1:d1:76:aa:75:24:6c:c0:
                    4e:b1:55:47:e7:cd:aa:99:9a:fe:bd:b0:db:ce:11:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4A:5C:53:88:D3:EA:82:49:3C:D7:C9:04:60:2E:77:6C:EF:FC:20
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:a2:06:47:ae:88:42:fc:d7:a8:7d:e1:e5:ab:db:c8:64:
         73:59:82:a6:00:dd:82:14:29:58:7b:3b:8d:0a:44:d5:1b:6c:
         b3:25:bd:ae:e4:f5:d8:31:a6:1c:eb:d6:5d:9b:57:6a:cd:c4:
         c0:24:06:90:61:3c:8a:a4:c8:2e:4a:03:34:b7:5b:a0:97:46:
         5c:3f:66:30:4b:c8:d6:06:76:4a:6c:3e:5e:af:7f:dc:e4:97:
         9b:3f:d3:ba:aa:d8:9c:68:ef:41:35:99:53:8a:4e:67:e0:fc:
         f1:81:0f:18:38:c2:b8:03:d3:6b:cc:83:cb:5d:d3:f7:c5:1e:
         dd:76:36:44:8d:70:56:f1:ad:fe:04:c7:bc:c5:20:f4:2d:3a:
         d8:2f:d3:75:55:b6:ea:ed:f7:cf:be:23:b7:f6:71:a7:c4:86:
         5c:17:70:f9:e5:99:d1:44:3e:d8:4c:10:a1:df:fd:11:ef:72:
         15:bb:3c:a6:99:6c:72:f8:8d:bb:ce:c8:89:f2:ac:de:49:27:
         a8:df:76:13:26:87:fd:b9:94:d1:7b:0d:51:c2:a2:11:a9:4f:
         70:52:2b:80:00:bf:bc:a7:cd:4d:ba:86:a5:3f:64:27:75:eb:
         a9:a8:d0:26:a5:11:96:a7:aa:1b:f7:07:69:6f:0e:f1:2b:c6:
         fd:7e:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net