Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/14/34352e3135312e3132332e302f32342d3234203d3e20323133313039.roa
File:                     34352e3135312e3132332e302f32342d3234203d3e20323133313039.roa (raw, json)
Hash identifier:          3SNwBS3NuXbnIj2itfbVEqs5aqn5OgxAkMHxsW5a/Ow=
Subject key identifier:   72:44:BF:9E:DF:37:1E:3C:D5:9C:EE:19:6B:DF:FC:18:B0:3F:A4:1F
Certificate issuer:       /CN=2f7cb84b1334e17130f0bb0bab35db5098eebbed
Certificate serial:       24AA3F7D96660DCBE01A5C97F9F50596F7982ABB
Authority key identifier: 2F:7C:B8:4B:13:34:E1:71:30:F0:BB:0B:AB:35:DB:50:98:EE:BB:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3y4SxM04XEw8LsLqzXbUJjuu-0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/14/34352e3135312e3132332e302f32342d3234203d3e20323133313039.roa
Signing time:             Mon 30 Nov 2020 11:35:56 +0000
ROA not before:           Mon 30 Nov 2020 11:30:56 +0000
ROA not after:            Mon 29 Nov 2021 11:35:56 +0000
asID:                     213109
IP address blocks:        45.151.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:aa:3f:7d:96:66:0d:cb:e0:1a:5c:97:f9:f5:05:96:f7:98:2a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f7cb84b1334e17130f0bb0bab35db5098eebbed
        Validity
            Not Before: Nov 30 11:30:56 2020 GMT
            Not After : Nov 29 11:35:56 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:5f:c3:38:7b:b3:d2:db:72:90:37:74:29:
                    73:97:bd:71:27:94:64:92:46:f4:c4:8d:05:19:64:
                    a2:00:95:fe:d7:79:e6:5a:90:5a:12:d2:9b:00:05:
                    10:50:9c:5d:da:fd:1f:88:13:16:c8:0d:55:b5:95:
                    48:1c:80:06:03:ce:d9:70:6d:f6:07:a9:df:bf:42:
                    0c:fd:7d:c8:23:4d:d7:c7:56:2a:16:4e:a2:d9:bf:
                    c0:e2:76:ef:49:de:65:4a:bf:a0:5f:64:b5:9e:a9:
                    18:e1:b2:68:af:f7:cf:d5:69:a0:cb:bf:42:2f:17:
                    f1:5e:19:59:b9:e0:bf:39:46:76:a9:e3:8c:b5:a3:
                    4b:24:56:54:a3:e7:5a:a5:6e:a6:cd:c7:f0:1c:f3:
                    8a:99:cc:06:24:f8:e9:64:43:3a:4e:af:4d:6f:25:
                    19:60:7d:25:94:9a:fa:54:52:0f:9a:8f:f8:b7:81:
                    17:1d:89:a4:8d:c9:b0:90:b1:64:81:73:e7:b5:53:
                    ed:e6:87:2f:4b:04:0f:b4:80:e5:d7:f1:de:8f:e3:
                    ac:f2:6f:fb:ed:05:87:c5:71:9e:a7:2f:63:aa:4b:
                    b4:56:bf:17:c3:57:07:bc:85:40:24:49:3e:60:07:
                    9b:92:df:8c:dd:34:5f:73:54:42:49:85:20:a4:32:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:44:BF:9E:DF:37:1E:3C:D5:9C:EE:19:6B:DF:FC:18:B0:3F:A4:1F
            X509v3 Authority Key Identifier:
                keyid:2F:7C:B8:4B:13:34:E1:71:30:F0:BB:0B:AB:35:DB:50:98:EE:BB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/14/2F7CB84B1334E17130F0BB0BAB35DB5098EEBBED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3y4SxM04XEw8LsLqzXbUJjuu-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/14/34352e3135312e3132332e302f32342d3234203d3e20323133313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:83:9a:5d:f1:e0:50:a3:10:41:66:1b:6c:98:60:e6:3c:fc:
         a3:21:8a:e8:95:88:89:3c:e3:f9:97:99:7f:5a:5b:aa:42:0c:
         85:1e:bf:47:28:2d:1e:37:3c:b6:b0:d6:9c:84:be:6a:22:01:
         0e:1b:19:e3:0d:1c:da:a7:62:cf:df:bb:a0:df:32:6c:c8:2c:
         a6:bb:f6:cc:47:22:47:07:20:73:d6:10:15:f2:8a:3a:02:f4:
         06:45:dd:91:71:05:6d:1a:61:53:84:43:19:3f:3b:3f:7d:d2:
         20:93:e7:c9:b9:ad:e6:5d:5a:dd:bf:0b:b5:0d:c9:5f:7a:4b:
         7d:05:22:e9:d0:cd:67:96:2a:9d:eb:1e:61:67:c5:50:ca:4b:
         87:59:42:bd:fc:70:a0:79:2c:d0:c3:07:f4:3d:96:cc:23:87:
         51:4a:1e:5c:ce:a6:bb:4b:fe:2a:77:7c:c1:fb:30:fd:cc:65:
         30:3a:66:23:d8:47:94:60:85:40:f0:19:b5:ee:0c:30:7d:98:
         9a:bc:62:09:b3:3e:c7:bb:85:f7:d9:04:20:c2:32:5b:56:0b:
         72:0c:c5:56:d6:fa:28:08:90:87:6c:c2:8d:3f:e7:eb:68:11:
         ea:d3:07:86:00:ba:d6:63:2d:c9:f6:2e:a9:92:8c:4a:34:76:
         5f:31:4f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net