Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e35372e302f32342d3234203d3e203632323430.roa
File:                     34352e39342e35372e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          qCXgSySK4HMSmXZA8b6cNLWv5Mgj9YSpk1BqDGWsdS4=
Subject key identifier:   0E:9E:21:D7:C9:75:F8:E0:7D:BA:F8:A3:9C:BA:98:17:45:D9:52:99
Certificate issuer:       /CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
Certificate serial:       0BD15D5B4C0031DC483307B558D667DFB7285189
Authority key identifier: E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e35372e302f32342d3234203d3e203632323430.roa
Signing time:             Sat 22 Oct 2022 04:34:37 +0000
ROA not before:           Sat 22 Oct 2022 04:29:37 +0000
ROA not after:            Sat 21 Oct 2023 04:34:37 +0000
asID:                     62240
IP address blocks:        45.94.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d1:5d:5b:4c:00:31:dc:48:33:07:b5:58:d6:67:df:b7:28:51:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
        Validity
            Not Before: Oct 22 04:29:37 2022 GMT
            Not After : Oct 21 04:34:37 2023 GMT
        Subject: CN=0E9E21D7C975F8E07DBAF8A39CBA981745D95299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:d4:dd:16:02:ca:f7:b7:13:79:bb:5f:21:
                    f2:70:0a:1f:c7:54:b4:02:22:72:2e:86:3c:de:8f:
                    d7:8d:60:d4:f3:0b:78:9b:d6:fb:3e:da:ee:82:76:
                    be:54:54:63:91:d1:43:98:a6:21:3e:a7:fd:ef:94:
                    fe:ca:9a:e0:bb:db:38:80:bb:20:ea:37:01:5b:7f:
                    d2:8a:eb:d4:54:80:80:d5:69:1b:69:25:71:26:d8:
                    f3:59:a4:d1:3d:20:42:28:3b:50:87:6b:24:d0:45:
                    d1:60:36:4f:15:d8:c5:a3:f9:6a:3f:32:dd:2c:8b:
                    49:32:64:ab:29:74:a6:08:2d:15:64:d5:44:1f:c7:
                    bb:aa:39:d7:6d:c1:3d:c3:3e:60:5b:3a:a7:b9:05:
                    e4:a0:85:3d:92:6f:35:8c:db:a5:83:89:68:af:38:
                    38:6d:a1:42:99:f0:26:e7:55:1e:05:ea:92:7d:1e:
                    e5:ad:9d:76:13:43:31:7e:83:82:dc:1f:86:db:81:
                    90:b9:84:89:cc:35:08:1e:2d:fd:a2:a0:39:31:8b:
                    78:d0:db:24:ab:44:ae:d9:6b:51:32:48:6e:11:b6:
                    6f:13:b7:40:d4:94:75:fa:48:23:7f:cd:2e:f7:b7:
                    79:8b:cd:7f:32:2e:2d:44:c4:31:68:3c:fc:41:55:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9E:21:D7:C9:75:F8:E0:7D:BA:F8:A3:9C:BA:98:17:45:D9:52:99
            X509v3 Authority Key Identifier:
                keyid:E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e35372e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:84:7b:2d:75:af:b2:b7:f8:25:38:d8:4c:2c:e3:80:1a:4f:
         09:73:3d:8a:50:64:10:88:c4:3e:de:24:93:c1:47:23:d6:55:
         ef:89:ae:90:90:92:f0:f1:ca:a8:04:61:7e:e4:78:11:6d:3f:
         02:db:f6:7a:9c:9e:84:fa:4b:a4:5d:ae:2c:0e:0c:84:ce:30:
         cf:e5:40:7e:67:3f:44:46:12:58:7e:46:41:3d:f3:57:48:c8:
         9a:29:fc:e4:ac:aa:bd:b7:12:cb:49:f2:6a:cb:19:4c:84:cc:
         ee:64:49:40:e5:1b:d8:89:79:bd:7b:d2:fc:29:eb:33:6a:21:
         df:50:8b:3a:e3:fc:34:1c:4a:00:68:8a:52:7b:16:ec:01:a4:
         14:56:38:dc:75:5e:3a:51:27:fc:da:24:c1:ad:1b:12:2e:6d:
         07:25:54:6b:75:2b:56:5f:47:7d:dd:1a:d8:cf:b1:97:d8:49:
         cf:06:6a:51:d1:60:cd:0c:ea:c9:d7:e7:48:02:58:ae:85:2c:
         6e:49:93:30:43:bf:c5:f2:53:61:55:db:fd:fc:62:b8:92:0d:
         23:f3:81:72:92:3c:53:f6:53:45:20:ea:d1:85:cb:a7:31:7c:
         89:90:fa:b4:a7:9f:df:d7:a7:3f:c5:1f:f4:71:74:05:e1:26:
         25:a0:86:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net