Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e3133302e3232382e302f32322d3234203d3e203437353833.roa
File:                     34352e3133302e3232382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          wJsH4Iu48GdffI5CnAYgXxc1PbodXdK+72/+OTuKzNo=
Subject key identifier:   45:9C:6A:5D:F7:2E:B1:F8:B7:BB:EE:38:3F:E5:54:B1:9F:F3:32:61
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       3875FB98067237EC2B7752987F3554CCF0775AFB
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3133302e3232382e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:49 +0000
ROA not before:           Sat 22 Oct 2022 04:28:49 +0000
ROA not after:            Sat 21 Oct 2023 04:33:49 +0000
asID:                     47583
IP address blocks:        45.130.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:75:fb:98:06:72:37:ec:2b:77:52:98:7f:35:54:cc:f0:77:5a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:49 2022 GMT
            Not After : Oct 21 04:33:49 2023 GMT
        Subject: CN=459C6A5DF72EB1F8B7BBEE383FE554B19FF33261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:09:c2:91:fd:61:4e:a9:e1:3f:5c:8f:08:be:
                    ab:61:9f:f4:99:fe:b7:22:5a:f7:9f:e7:f2:d7:7b:
                    5f:58:37:18:5b:cb:83:99:ce:d1:1b:92:04:e0:f4:
                    13:fb:42:b5:40:bc:f3:40:32:ad:c6:4b:61:54:d1:
                    ae:3c:3d:ec:f2:4c:79:b7:13:28:68:e7:6c:6d:ff:
                    00:72:ee:b4:38:c1:d6:aa:34:8f:6b:84:d2:26:07:
                    55:78:4e:2c:e7:95:71:c2:b9:ec:6b:35:be:d5:7c:
                    58:13:56:4b:8a:00:53:6f:17:3e:fc:17:80:1c:22:
                    00:a6:eb:c6:00:16:48:7f:d4:f3:ef:ca:0a:4b:a6:
                    1d:d1:fc:56:a1:be:b1:a3:2e:a7:55:74:2e:79:c4:
                    94:60:7b:2b:41:9a:d1:0a:d0:7b:e8:3a:84:68:3c:
                    16:26:21:eb:a8:4e:c6:d7:d2:11:63:5c:4e:ad:b7:
                    83:10:c0:34:fe:b4:26:11:e8:51:85:9e:f1:fb:d2:
                    bf:9f:ce:f0:ac:f8:42:0b:a1:f2:7f:96:2d:2c:45:
                    bb:34:0a:8f:4f:d8:92:45:8f:f2:60:db:72:17:83:
                    b1:c1:ea:cf:8c:c7:8d:6e:c7:27:40:f7:63:1b:90:
                    2c:21:43:c6:d6:54:08:ff:cd:9f:5e:57:67:b0:a2:
                    02:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9C:6A:5D:F7:2E:B1:F8:B7:BB:EE:38:3F:E5:54:B1:9F:F3:32:61
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3133302e3232382e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:e5:8d:76:9b:c2:0c:6d:79:f1:61:60:54:5c:b0:2d:67:70:
         39:dc:a3:f6:c4:da:b7:bb:73:43:f6:ac:86:8a:c6:8e:da:1f:
         1e:f5:bc:34:b1:fb:50:3e:44:1f:4d:c7:38:46:d3:7c:f5:05:
         d9:fd:8d:9a:2e:d0:ce:b5:f4:e3:64:7c:ee:9c:eb:f2:b6:1d:
         a1:2a:6e:67:10:34:fd:10:d2:65:ca:15:71:00:de:38:b9:b4:
         95:7b:6c:de:98:75:80:3e:9f:4a:1d:0f:ba:1e:97:37:92:15:
         64:56:78:68:fa:a4:88:b4:4c:dd:48:c3:87:66:62:c1:88:3d:
         65:ce:0c:dd:24:81:b2:71:c0:ca:ae:ed:34:14:f2:44:30:46:
         f2:12:d7:ac:6b:ca:07:2d:af:c3:5c:e5:d6:b3:37:a6:a7:f6:
         1a:0b:80:fd:0f:4c:d4:dc:fe:1f:8c:08:b0:2c:30:1a:7e:03:
         d0:1e:45:fc:b4:54:3a:e3:e8:37:77:29:c4:f5:e4:77:5a:98:
         9c:2a:e0:82:f1:3c:9d:7d:de:ac:e5:8d:1a:b0:81:80:2d:ca:
         20:1c:f4:38:b0:97:d0:70:83:3d:af:80:de:93:b7:89:aa:37:
         09:5b:8c:75:4e:f9:7a:26:98:8b:69:3c:87:33:67:74:2e:5d:
         b3:98:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net