Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e35382e302f32342d3332203d3e203531313637.roa
File:                     34352e39342e35382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          K4oBEUGhRSKfbFwS8Clin1smUBBCxcdbe3DMhB+1+Nw=
Subject key identifier:   04:AE:4E:50:AF:0B:9A:CF:DC:8C:DD:39:8B:41:79:66:CC:8A:30:18
Certificate issuer:       /CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
Certificate serial:       145856B6BE509BE8EDDE40875AA320B13AC6BA64
Authority key identifier: E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e35382e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:38 +0000
ROA not before:           Sat 22 Oct 2022 04:29:38 +0000
ROA not after:            Sat 21 Oct 2023 04:34:38 +0000
asID:                     51167
IP address blocks:        45.94.58.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:58:56:b6:be:50:9b:e8:ed:de:40:87:5a:a3:20:b1:3a:c6:ba:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
        Validity
            Not Before: Oct 22 04:29:38 2022 GMT
            Not After : Oct 21 04:34:38 2023 GMT
        Subject: CN=04AE4E50AF0B9ACFDC8CDD398B417966CC8A3018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:ee:89:90:52:1f:14:cc:33:a3:79:2c:47:
                    bc:ac:f8:f3:15:5c:0c:89:76:1c:ec:9e:45:72:77:
                    f1:de:e6:a3:0e:36:7b:7b:ff:1c:ae:47:ab:3f:6a:
                    18:c5:66:86:31:cf:bc:65:1f:8f:92:1e:19:30:a4:
                    6b:d2:2d:b7:b8:23:6c:83:ee:f6:44:7d:ac:cf:19:
                    19:c7:0f:6b:44:a4:da:f3:29:3b:26:33:30:5b:1f:
                    8d:45:e9:fe:76:a6:f2:ce:07:de:ec:2b:a1:da:82:
                    ea:01:cc:16:fd:c9:1f:2f:c1:ec:94:e6:16:10:df:
                    5c:ad:7a:4e:fb:07:39:59:ed:8c:46:e4:7c:78:7a:
                    b0:61:27:f1:ae:8a:c0:bf:78:df:9d:a9:aa:53:f2:
                    1c:b2:77:bb:6f:71:6d:a6:da:6b:ab:6f:2f:d4:6b:
                    9f:99:c6:c3:26:f5:37:4d:bf:a4:f4:49:08:62:b6:
                    68:03:2c:39:e2:0e:89:56:be:e5:8e:41:ff:38:b9:
                    68:49:63:53:0f:06:f5:d8:3a:98:77:f6:64:f3:db:
                    f4:b4:ad:4c:f0:36:2d:39:ec:44:bc:3b:ba:50:2a:
                    ee:62:57:51:1b:a0:2b:bb:44:71:be:ee:dc:c2:4c:
                    93:76:48:3c:4e:d7:09:41:7f:2d:bb:f4:35:04:94:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AE:4E:50:AF:0B:9A:CF:DC:8C:DD:39:8B:41:79:66:CC:8A:30:18
            X509v3 Authority Key Identifier:
                keyid:E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e39342e35382e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:70:6f:02:bc:01:d9:fd:9e:5a:c4:55:8b:6d:c0:1f:9f:c5:
         88:43:02:34:21:64:99:31:d6:8c:81:cf:de:ac:8d:c6:ac:04:
         7c:d8:64:4b:71:01:4b:71:d5:95:c6:60:df:ca:af:49:8d:9a:
         24:98:37:13:60:49:1d:bd:a2:9e:e7:ab:1b:38:1d:f9:3b:60:
         e6:69:05:7d:5d:09:e4:c2:1f:8c:54:58:a1:ad:a5:72:1f:43:
         2e:67:a6:8b:ab:9e:99:64:69:e6:de:84:97:3a:37:36:b1:f3:
         0d:f3:44:a7:34:c1:03:60:bb:6e:7e:d0:74:36:03:cf:2b:04:
         39:32:ef:f7:4e:7c:98:0b:4c:ca:31:11:ad:f3:2b:e9:15:4f:
         b3:1e:4c:76:4e:20:da:c7:c8:60:c2:0d:85:86:3b:12:e1:47:
         c4:76:04:66:f6:58:a7:e1:97:c7:1b:cb:d6:30:43:2d:05:87:
         58:94:9c:e7:f9:34:d1:5b:d7:f5:86:5b:86:87:22:b7:e8:56:
         63:db:ac:a1:c8:e0:95:38:6e:f8:cd:b3:fa:4f:c7:70:e4:b9:
         82:80:d6:e3:5c:85:1e:98:e4:bc:29:58:55:81:3c:43:07:7e:
         1f:77:db:e2:36:9c:53:7c:ee:02:48:23:be:26:67:a9:b0:a5:
         ff:04:32:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net