Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e35372e302f32342d3234203d3e20323034383433.roa
File:                     34352e39342e35372e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier:          2HVDl2Rg/zi6USepHh6UpKb4wCcdu4zAsqDZYoG39w0=
Subject key identifier:   74:4B:41:7E:F7:D4:56:B7:E9:ED:3F:19:0A:07:73:5D:E3:17:02:F1
Certificate issuer:       /CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
Certificate serial:       2227EBC9F76C013AD76D33874168D7E8316B7804
Authority key identifier: E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e35372e302f32342d3234203d3e20323034383433.roa
Signing time:             Wed 21 Dec 2022 08:39:10 +0000
ROA not before:           Wed 21 Dec 2022 08:34:10 +0000
ROA not after:            Wed 20 Dec 2023 08:39:10 +0000
asID:                     204843
IP address blocks:        45.94.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:27:eb:c9:f7:6c:01:3a:d7:6d:33:87:41:68:d7:e8:31:6b:78:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
        Validity
            Not Before: Dec 21 08:34:10 2022 GMT
            Not After : Dec 20 08:39:10 2023 GMT
        Subject: CN=744B417EF7D456B7E9ED3F190A07735DE31702F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:d2:9f:e6:e5:bb:3d:af:89:06:ab:ad:48:
                    b9:f9:e8:ed:68:f0:f8:21:3d:26:f5:15:d7:56:c1:
                    7d:ee:47:70:88:a9:49:2e:7d:d2:08:55:ed:3f:f1:
                    c9:1e:88:06:9f:42:4c:0c:65:81:6b:94:2d:9e:ec:
                    cc:f5:4d:3d:18:66:b0:82:d0:1d:7e:eb:6f:4d:b6:
                    74:ad:74:76:21:26:b9:65:44:5c:6a:8a:10:99:6a:
                    cd:4b:47:c9:e9:d2:91:6c:30:a0:67:22:26:4e:c2:
                    65:4f:ce:4f:d0:1f:69:08:36:e4:69:2a:4d:ee:71:
                    ea:23:bc:2c:c2:be:e1:c2:61:24:96:88:81:74:de:
                    4f:d4:46:8a:50:dd:bb:fb:fc:a6:6c:61:6a:ca:c1:
                    6c:cd:c1:f8:6c:01:be:c1:f0:06:c7:32:71:8a:21:
                    44:40:26:1f:e0:05:18:66:20:75:20:ec:8f:fd:90:
                    67:aa:39:1f:7c:73:dd:92:53:99:2e:48:ef:e6:65:
                    3b:87:59:8c:34:b1:55:aa:ad:53:79:ca:b1:39:85:
                    a8:4d:4f:8b:cd:dc:aa:8a:e2:88:64:fb:f4:b7:87:
                    46:47:0e:77:68:74:22:d0:9a:11:df:ef:c2:0f:86:
                    8e:f5:d7:84:1c:fe:49:79:36:7d:82:9f:7f:96:1b:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4B:41:7E:F7:D4:56:B7:E9:ED:3F:19:0A:07:73:5D:E3:17:02:F1
            X509v3 Authority Key Identifier:
                keyid:E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e35372e302f32342d3234203d3e20323034383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:6d:52:ee:8e:27:d4:86:94:99:4b:35:00:eb:fe:42:0f:6e:
         b5:c4:1d:e1:18:ee:8d:bb:33:f6:c2:1e:e2:a9:36:5f:62:15:
         ce:fb:6f:19:c7:c1:af:e1:2f:a1:25:38:29:39:e7:20:e1:1f:
         ef:94:16:50:55:f6:56:8f:4c:71:c8:ee:50:4b:0c:94:5c:ae:
         35:66:08:ea:9d:1e:59:55:e0:23:4c:d4:08:78:90:50:08:12:
         54:f1:23:03:53:2b:e2:d0:e2:43:7e:f0:af:88:ee:e6:84:b1:
         41:86:3c:95:5b:c0:72:28:5e:86:3c:60:fb:85:2b:2e:fb:c0:
         1e:b3:98:0b:04:22:09:05:d5:7d:56:c0:e1:1e:6e:4a:08:b0:
         53:f1:62:a8:b4:3b:9c:f5:cf:15:ce:45:12:29:c8:61:09:03:
         23:66:b3:36:c2:68:62:da:be:fe:be:ce:40:cb:29:67:b4:a2:
         3f:cc:6c:51:52:65:dd:52:6a:1d:5d:d3:1d:3e:71:57:42:f5:
         43:25:95:71:53:90:13:74:df:bc:aa:6f:fe:5c:21:28:3d:1c:
         85:00:7e:20:ca:b9:fe:b5:f7:e2:48:c3:de:a0:31:eb:a7:f5:
         48:2f:ce:1c:59:78:e8:fe:43:53:c6:63:ad:07:ae:c0:32:14:
         97:a3:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net