Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e3139302e302f32342d3234203d3e20323132363837.roa
File:                     34352e3135322e3139302e302f32342d3234203d3e20323132363837.roa (raw, json)
Hash identifier:          gwUge2sP36O3HklUnbAGrn2RLtb0vIe1dNPLHQqhmT4=
Subject key identifier:   0A:DF:7C:E3:DD:BD:F7:6A:09:08:96:18:D4:CB:0B:40:34:B7:20:2C
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       3A32EA3A69C8EF8FE3A814E0322A10E2A880B54A
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e3139302e302f32342d3234203d3e20323132363837.roa
Signing time:             Sat 22 Oct 2022 04:33:47 +0000
ROA not before:           Sat 22 Oct 2022 04:28:47 +0000
ROA not after:            Sat 21 Oct 2023 04:33:47 +0000
asID:                     212687
IP address blocks:        45.152.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:32:ea:3a:69:c8:ef:8f:e3:a8:14:e0:32:2a:10:e2:a8:80:b5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:47 2022 GMT
            Not After : Oct 21 04:33:47 2023 GMT
        Subject: CN=0ADF7CE3DDBDF76A09089618D4CB0B4034B7202C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:10:ab:06:59:f6:f4:5c:3f:1f:a5:8c:86:
                    1e:49:07:33:84:28:4a:81:0f:f6:59:34:31:ee:70:
                    be:ec:f4:62:9a:a0:89:5a:e6:27:d7:90:e1:01:75:
                    a0:7a:c3:c2:ad:71:16:62:b2:5a:af:8e:03:76:e9:
                    0b:d5:60:5c:8e:6c:19:5a:9b:3d:fd:53:1d:0f:d3:
                    14:41:ad:0c:74:73:71:3b:07:d2:05:ae:a4:37:d3:
                    40:be:96:ed:d9:67:d4:07:a3:95:ff:e6:b5:98:71:
                    80:75:0e:f9:33:0a:51:7a:da:7b:12:11:cc:f6:d2:
                    2c:ae:6b:83:9a:cd:97:16:d4:58:7f:7a:12:26:52:
                    53:fd:88:a6:3b:8d:27:12:2a:38:b2:66:b8:3d:57:
                    f3:7f:4b:a6:0e:59:a1:6a:cf:88:57:4b:71:fd:a4:
                    db:79:95:22:b2:79:96:6d:af:dc:a0:dd:e6:97:e1:
                    c8:f5:60:7f:2b:b4:5f:ee:fe:2e:ac:2b:64:74:58:
                    71:5c:8a:c3:fa:89:c1:e7:e9:58:9e:e6:1e:b8:7e:
                    49:9b:91:95:82:fe:d0:ff:3e:60:a9:63:66:e8:ac:
                    4e:ad:c8:1b:19:85:51:94:ec:97:de:c6:d9:2f:95:
                    b7:16:34:a5:91:89:ac:94:80:98:cb:84:92:83:37:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DF:7C:E3:DD:BD:F7:6A:09:08:96:18:D4:CB:0B:40:34:B7:20:2C
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e3139302e302f32342d3234203d3e20323132363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:35:c3:56:62:3b:fe:0e:b7:f7:05:55:d5:69:14:dc:b5:8f:
         d2:cf:3b:9c:9a:11:c1:ab:e3:95:97:28:3a:c0:8c:60:62:d5:
         a1:41:28:79:33:21:35:39:e1:c2:cc:a6:c5:83:7b:e1:55:23:
         a4:81:b2:d5:55:81:64:ec:00:47:c8:f1:12:bd:0a:f2:c6:ea:
         71:e7:73:36:6f:51:3b:00:38:44:31:9e:d6:5a:c5:fa:9d:c1:
         1c:c7:fd:a1:c6:ae:13:a5:33:23:c2:2d:c1:24:2e:ed:db:d8:
         a4:64:66:fd:c9:e1:25:67:41:26:cf:40:1a:8d:58:3d:a7:71:
         ad:aa:fb:3b:1c:00:25:5c:e4:a5:06:44:ca:c8:53:c4:d3:0e:
         6f:8e:1c:6b:91:cf:93:e1:39:99:77:36:78:04:2e:0f:64:08:
         e3:cd:0d:93:9c:e4:f3:b9:52:0d:e9:39:af:ea:a1:7a:47:68:
         b7:53:8b:df:bb:5f:b6:ca:6e:50:c1:00:9a:a8:78:a2:61:2e:
         cd:36:78:84:15:78:f3:ea:35:ef:ad:79:06:5f:49:36:80:d9:
         d7:da:a2:e6:1a:36:12:69:41:08:86:54:86:1e:87:c1:e8:5c:
         2e:6d:c4:8c:3c:48:e4:f9:4b:ab:c6:1d:db:ac:8f:bf:98:e9:
         56:36:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net