Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e34372e302f32342d3234203d3e20333238333737.roa
File:                     34352e3135322e34372e302f32342d3234203d3e20333238333737.roa (raw, json)
Hash identifier:          A57dxTJZdT3hmcAMznKrVgZINANNC5Olf1h63/VoX/g=
Subject key identifier:   1F:EB:33:ED:18:D4:ED:E8:D2:B4:C3:0D:CB:EE:91:AD:99:D3:6C:F4
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       60EF8D75EB3301E8385D10FD02D767208CEEF302
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e34372e302f32342d3234203d3e20333238333737.roa
Signing time:             Sat 22 Oct 2022 04:33:47 +0000
ROA not before:           Sat 22 Oct 2022 04:28:47 +0000
ROA not after:            Sat 21 Oct 2023 04:33:47 +0000
asID:                     328377
IP address blocks:        45.152.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ef:8d:75:eb:33:01:e8:38:5d:10:fd:02:d7:67:20:8c:ee:f3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:47 2022 GMT
            Not After : Oct 21 04:33:47 2023 GMT
        Subject: CN=1FEB33ED18D4EDE8D2B4C30DCBEE91AD99D36CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:a4:23:b2:20:2f:c6:ac:b9:7f:8f:b2:34:
                    80:a6:00:e1:95:bf:c2:4c:2f:96:7b:67:69:b3:7b:
                    c5:84:80:0a:c9:dc:66:1a:3f:1d:19:b8:b1:84:97:
                    d2:7c:f6:2b:a4:8b:42:47:f0:00:0d:45:1f:48:14:
                    5d:48:e2:c9:76:cc:85:7f:50:1c:01:36:d6:7b:ba:
                    6a:51:47:0c:09:72:57:1f:57:8f:5f:83:33:63:3d:
                    18:be:0c:3a:3c:3d:9c:8e:9e:f2:0e:ab:4c:41:85:
                    b0:9f:29:78:23:03:ac:ec:0a:ef:a0:a8:df:d4:95:
                    30:a7:b8:15:a3:2e:60:65:48:0d:12:3b:c3:2a:38:
                    b3:ba:75:f3:71:e2:b9:f5:ad:d5:23:31:29:24:24:
                    b9:21:4c:06:ad:0f:a8:5a:81:af:bd:38:c3:c4:77:
                    e7:30:48:f6:90:1a:27:c1:23:fe:fa:52:66:65:1d:
                    14:01:8f:9e:83:83:7b:6e:3e:d5:01:5b:41:ec:3c:
                    83:c6:dd:41:f5:eb:88:c3:84:c3:f5:7c:f9:de:af:
                    2f:a2:36:26:47:01:4d:ef:34:4b:10:f9:dd:d1:0b:
                    cf:fa:99:73:a3:da:6f:9d:fa:9b:90:38:e4:4e:65:
                    d1:98:e8:09:fd:5f:15:72:59:a5:c7:ec:1c:72:26:
                    a8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EB:33:ED:18:D4:ED:E8:D2:B4:C3:0D:CB:EE:91:AD:99:D3:6C:F4
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e34372e302f32342d3234203d3e20333238333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:55:a3:68:74:f7:b0:ff:4c:a3:b2:93:66:06:23:0c:95:
         91:e9:ca:9f:60:5d:ae:f1:9f:c9:ed:f2:87:3d:e4:47:a1:29:
         bc:1c:4b:7a:ed:77:7d:f1:1f:37:b2:5f:da:a7:67:72:2e:bd:
         b3:d3:dc:79:96:d4:30:7b:71:56:5f:81:51:dc:d1:05:ab:24:
         92:6b:29:8a:67:55:5c:1f:15:13:3f:54:5d:f5:0d:6b:c5:41:
         70:f2:60:58:10:2b:f1:74:d1:a6:df:7e:60:f0:a9:be:c6:24:
         4a:fb:ff:c2:dc:07:ee:6d:88:6f:e1:a0:2d:a1:b2:b4:1f:3f:
         6f:eb:a7:25:c4:95:a7:82:20:d9:85:5d:7a:b2:03:15:c5:10:
         38:61:1d:48:c2:f5:99:86:35:ee:4e:b4:91:1b:fc:ba:a6:32:
         4c:fe:2b:ce:b4:a6:3c:40:4e:84:71:a1:34:a7:96:3b:0b:cd:
         92:1b:c5:ba:a4:7d:21:5e:3f:8b:b0:ff:e6:c0:e1:f2:1d:ac:
         df:9b:b2:de:ed:79:75:6f:64:db:4d:42:fb:d4:2f:d6:83:cf:
         34:9d:90:15:3f:fb:f9:55:98:42:38:94:e5:ab:4d:2d:f1:b0:
         ac:42:fd:82:e3:ba:f1:3b:f8:22:13:23:55:f0:84:5e:76:cc:
         fd:32:bc:10
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUYO+NdeszAeg4XRD9AtdnIIzu8wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGZlODliZjdkYWEwZjhhYTdkMDIyZGY5ODRlNmVhMzdl
NmY2MGEzZDAeFw0yMjEwMjIwNDI4NDdaFw0yMzEwMjEwNDMzNDdaMDMxMTAvBgNV
BAMTKDFGRUIzM0VEMThENEVERThEMkI0QzMwRENCRUU5MUFEOTlEMzZDRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMKQjsiAvxqy5f4+yNICmAOGV
v8JML5Z7Z2mze8WEgArJ3GYaPx0ZuLGEl9J89iuki0JH8AANRR9IFF1I4sl2zIV/
UBwBNtZ7umpRRwwJclcfV49fgzNjPRi+DDo8PZyOnvIOq0xBhbCfKXgjA6zsCu+g
qN/UlTCnuBWjLmBlSA0SO8MqOLO6dfNx4rn1rdUjMSkkJLkhTAatD6haga+9OMPE
d+cwSPaQGifBI/76UmZlHRQBj56Dg3tuPtUBW0HsPIPG3UH164jDhMP1fPnery+i
NiZHAU3vNEsQ+d3RC8/6mXOj2m+d+puQOOROZdGY6An9XxVyWaXH7BxyJqhlAgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQUH+sz7RjU7ejStMMNy+6RrZnTbPQwHwYDVR0j
BBgwFoAU3+ib99qg+Kp9Ai35hObqN+b2Cj0wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzE4MC9ERkU4OUJGN0RBQTBGOEFBN0QwMjJERjk4NEU2RUEz
N0U2RjYwQTNELmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMy1pYjk5cWctS3A5
QWkzNWhPYnFOLWIyQ2owLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUFBzAL
hm5yc3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNp
dC8xODAvMzQzNTJlMzEzNTMyMmUzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzMzMjM4MzMzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZgvMA0GCSqGSIb3DQEBCwUAA4IBAQBC
D1WjaHT3sP9Mo7KTZgYjDJWR6cqfYF2u8Z/J7fKHPeRHoSm8HEt67Xd98R83sl/a
p2dyLr2z09x5ltQwe3FWX4FR3NEFqySSaymKZ1VcHxUTP1Rd9Q1rxUFw8mBYECvx
dNGm335g8Km+xiRK+//C3AfubYhv4aAtobK0Hz9v66clxJWngiDZhV16sgMVxRA4
YR1IwvWZhjXuTrSRG/y6pjJM/ivOtKY8QE6EcaE0p5Y7C82SG8W6pH0hXj+LsP/m
wOHyHazfm7Le7Xl1b2TbTUL71C/Wg880nZAVP/v5VZhCOJTlq00t8bCsQv2C47rx
O/giEyNV8IRedsz9MrwQ
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net