Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e392e3138382e302f32322d3234203d3e203437353833.roa
File:                     34352e392e3138382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          bOatbkgoI0Eh9wD2EqJf3AIMSh7soxL2k6aRxDPkmPg=
Subject key identifier:   DE:6D:BF:DF:63:91:10:E6:61:3A:8F:3A:0A:E0:AF:6B:5D:D0:98:15
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       55B5ACB78C090AB69A303E011B914853D9A53A4B
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e392e3138382e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:49 +0000
ROA not before:           Sat 22 Oct 2022 04:28:49 +0000
ROA not after:            Sat 21 Oct 2023 04:33:49 +0000
asID:                     47583
IP address blocks:        45.9.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b5:ac:b7:8c:09:0a:b6:9a:30:3e:01:1b:91:48:53:d9:a5:3a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:49 2022 GMT
            Not After : Oct 21 04:33:49 2023 GMT
        Subject: CN=DE6DBFDF639110E6613A8F3A0AE0AF6B5DD09815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:90:ec:d3:85:67:bb:4e:e7:13:52:88:54:
                    fd:bd:cb:b9:37:0b:e8:57:d6:52:32:6c:66:c0:bb:
                    46:4f:30:e9:43:f8:2f:97:28:2d:03:e7:56:bc:de:
                    49:a3:da:cb:44:4f:1a:21:f5:b5:fa:8c:e7:82:6f:
                    2f:35:ad:7e:78:97:1d:bc:31:66:00:6e:c4:ef:ef:
                    77:5a:09:3e:dc:47:3d:dc:1c:14:fd:9c:a2:1f:79:
                    f5:8a:47:9e:81:ef:24:a4:f3:41:70:44:ed:3e:50:
                    23:21:75:b1:61:90:80:79:df:4b:5b:ea:a5:c7:dd:
                    82:25:c1:87:ec:eb:9d:c9:97:a8:1a:d3:4e:d7:c4:
                    7d:5c:a9:27:ae:95:bd:5d:34:24:fd:7b:26:c8:76:
                    dc:88:54:1a:5b:d1:ea:98:ac:46:b4:cf:50:d4:c4:
                    22:ad:ab:66:06:c6:4c:d4:e2:d0:51:dc:23:59:53:
                    87:04:bb:20:c9:0e:f9:c6:db:2f:ad:60:c6:36:f7:
                    72:ce:e6:d0:4a:07:85:c7:d6:88:e7:bb:0b:28:15:
                    51:8c:15:85:5d:cf:0b:ed:d2:dd:af:65:fa:0d:94:
                    d4:ce:31:8b:41:0f:98:39:9e:67:a1:bb:ee:36:50:
                    3a:03:81:ae:67:d6:49:3a:68:28:b5:c7:ec:1b:f0:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6D:BF:DF:63:91:10:E6:61:3A:8F:3A:0A:E0:AF:6B:5D:D0:98:15
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e392e3138382e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:2e:bc:5c:65:68:c9:ef:e3:6d:02:a6:56:a5:00:b3:01:c5:
         7f:c7:05:8f:03:f7:aa:45:e0:28:b2:9d:9c:08:b1:45:9d:85:
         48:59:50:c4:e6:da:ad:63:5b:3d:aa:f0:db:73:7c:25:a8:c7:
         ba:2c:f3:fb:3b:02:0c:4b:d3:81:14:b0:76:d4:d4:fb:01:9e:
         cf:7e:ff:28:bd:8b:ae:12:1e:c7:aa:93:c9:16:ca:05:ae:2e:
         bb:be:cb:67:23:b1:a6:38:94:ca:6d:82:a7:ff:c6:cb:d7:78:
         29:46:12:31:88:1e:64:87:2c:fd:ec:8d:e8:06:40:a0:8b:cc:
         19:df:a1:52:cf:e2:87:35:39:98:9c:80:f3:3b:d6:c8:61:cd:
         16:10:12:de:16:64:2f:4c:39:03:f0:ef:e2:4d:fd:56:6f:06:
         22:b3:ee:9b:08:19:3b:2f:5f:55:3b:dd:b4:05:1b:6c:05:3e:
         39:ef:95:1a:f8:eb:a0:a7:2e:73:f7:0c:23:e8:ab:70:a3:8d:
         86:da:d1:9f:87:a5:8b:52:f4:ed:af:5c:7b:8c:92:a9:78:e6:
         7f:10:e9:29:ab:d5:17:23:27:ab:d6:e4:b2:60:9b:03:ae:1f:
         3a:f9:a3:2a:b7:77:16:b2:24:8c:4a:cb:a4:96:b8:98:f2:78:
         e3:21:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net