Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e34362e302f32342d3234203d3e203437353833.roa
File:                     34352e3135322e34362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          AloAJtXZpNfPFVn7iU2oJIUCmR43bSwsRhYggf9scXo=
Subject key identifier:   0D:20:E8:AB:C2:B6:59:7A:72:12:61:DB:0E:D8:4A:56:63:DA:77:55
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       242FB4435531E4A9B1A51B31489C9A81F15FA1BC
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e34362e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:48 +0000
ROA not before:           Sat 22 Oct 2022 04:28:48 +0000
ROA not after:            Sat 21 Oct 2023 04:33:48 +0000
asID:                     47583
IP address blocks:        45.152.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2f:b4:43:55:31:e4:a9:b1:a5:1b:31:48:9c:9a:81:f1:5f:a1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:48 2022 GMT
            Not After : Oct 21 04:33:48 2023 GMT
        Subject: CN=0D20E8ABC2B6597A721261DB0ED84A5663DA7755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dc:61:7d:fa:0f:44:bc:a8:c9:48:19:ae:84:
                    35:90:2b:23:4c:27:db:b4:7a:fd:57:fd:57:af:c3:
                    15:33:51:ad:2a:4f:b7:d5:fe:2b:50:fc:d1:07:fa:
                    c6:ae:c1:fc:fe:cd:01:7a:6e:df:39:be:1f:dd:8b:
                    cd:e5:d9:e2:f6:91:c9:71:a0:86:e7:a1:57:23:1e:
                    ae:64:ad:84:6b:5f:27:50:e2:96:50:7d:ce:b7:60:
                    1f:ab:33:ff:6a:a8:39:77:78:bd:ce:eb:2a:f2:91:
                    31:ca:54:e1:2e:ac:b7:be:af:b8:89:7f:72:df:e1:
                    cb:7d:45:f0:ea:fb:09:e2:2a:ae:79:f3:f3:f1:b0:
                    64:0c:d3:06:43:09:82:2d:4f:1b:3b:f5:3c:cf:4d:
                    4a:ea:53:b1:84:4c:bd:0c:87:57:5d:f0:21:84:5e:
                    f2:f1:10:b9:00:bc:d5:b4:9c:ad:92:b4:26:0f:7c:
                    a1:a2:ac:d5:2e:ca:d5:ce:ff:4f:08:2e:b3:83:e1:
                    97:ef:ee:dc:8f:b4:5a:3d:fb:06:16:0a:7a:5b:ce:
                    88:90:73:0e:49:c7:a3:ea:b9:ee:3a:65:30:cb:ba:
                    3c:b1:73:91:17:5d:3c:6e:5e:6a:2b:a9:e3:28:46:
                    73:b2:27:9b:af:11:7a:11:16:43:7d:5b:c1:6f:32:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:20:E8:AB:C2:B6:59:7A:72:12:61:DB:0E:D8:4A:56:63:DA:77:55
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e34362e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:6f:43:38:c3:75:81:ca:bd:f9:12:d1:92:dd:fd:ac:9c:
         c1:dc:19:09:42:3c:44:d1:da:44:88:8f:6d:b8:06:ad:fe:25:
         eb:00:08:67:fc:50:2d:07:d8:f2:4c:21:d9:81:f7:be:77:aa:
         9a:be:f1:d5:af:9a:ca:b3:11:bc:44:bd:c6:60:62:c3:f8:cb:
         19:69:2b:ae:58:54:9c:7f:55:a2:9d:61:b0:4c:a6:f1:c3:37:
         63:ad:c6:1c:99:c8:e7:d9:a0:f8:c0:1a:0f:02:23:63:a7:f8:
         3e:82:91:f1:73:d4:f6:a5:24:2a:55:0f:2d:8d:62:c7:22:7a:
         92:84:71:40:06:dd:6f:a5:fd:6b:d8:17:15:eb:97:16:db:d7:
         24:df:a6:11:8b:dc:89:22:49:d4:8c:f6:8f:47:d0:68:7b:fb:
         4f:6c:c8:80:be:94:e6:52:0d:af:e3:80:f4:cf:20:de:18:87:
         4c:f1:f8:e5:2e:0e:9a:fb:5d:8d:dd:22:6f:ec:8d:b4:f5:6b:
         96:02:92:9e:10:18:5d:30:37:55:db:d7:ab:0b:23:79:07:6b:
         b1:c8:bf:95:2e:39:59:37:a3:47:2a:31:5c:8c:d1:85:15:da:
         b5:70:42:d7:e1:2e:d4:01:43:91:9f:db:35:e5:5b:5f:90:67:
         69:5a:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net