Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35362e302f32332d3234203d3e203631333137.roa
File:                     34352e31332e35362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          +Ks1SC2YRAm1GoFcBOXT8mSIQJ0fY3mo5e1bT0vechM=
Subject key identifier:   33:BA:56:A6:B3:57:08:C7:57:A4:41:AE:91:B1:1D:44:D3:FB:94:79
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       59EFDC4704453DC4D7C43EA0669E4A31392EBF
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35362e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:41:16 +0000
ROA not before:           Tue 28 Jun 2022 04:36:16 +0000
ROA not after:            Tue 27 Jun 2023 04:41:16 +0000
asID:                     61317
IP address blocks:        45.13.56.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ef:dc:47:04:45:3d:c4:d7:c4:3e:a0:66:9e:4a:31:39:2e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:16 2022 GMT
            Not After : Jun 27 04:41:16 2023 GMT
        Subject: CN=33BA56A6B35708C757A441AE91B11D44D3FB9479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:e7:ca:06:3d:de:49:0b:52:bb:4b:60:f0:
                    38:31:dd:bc:df:6f:f0:ff:2b:1e:38:a0:84:bc:8c:
                    f9:87:e6:e6:75:83:a2:e4:99:52:36:ec:2e:75:48:
                    60:c9:0c:8b:41:25:f9:bc:ae:4e:9f:2a:c4:c2:90:
                    65:61:84:bb:b4:a1:e2:2d:b2:86:e7:d1:6d:d9:b3:
                    f9:fd:0b:dd:80:77:fe:36:21:2f:55:57:bc:d6:ae:
                    22:1b:86:23:59:0c:c5:f5:6b:fc:86:0a:3a:49:1f:
                    58:ca:f2:22:3a:92:20:4e:ea:c3:af:de:5c:80:7e:
                    81:9a:3d:c2:60:7a:65:b3:15:5f:13:5d:11:37:c9:
                    67:9a:d9:7d:38:ce:5a:c4:8b:f5:f1:90:2d:f2:e2:
                    38:f2:74:44:f3:c3:41:c3:bc:5d:67:b0:09:9a:ea:
                    6c:19:b2:2c:0a:b4:17:4c:bc:42:38:35:d4:42:7d:
                    58:78:b1:65:22:bf:ef:60:34:af:95:7f:ac:76:9b:
                    8d:55:d1:d7:69:49:47:c3:e9:af:fc:e0:5c:db:c3:
                    29:62:a1:75:1f:50:72:6f:a7:00:56:02:b5:ad:43:
                    37:c0:97:6e:f0:a5:f3:c3:d7:2d:80:a6:57:25:60:
                    60:e6:11:d1:37:f7:e3:3b:b7:f3:3b:87:e0:df:ba:
                    90:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BA:56:A6:B3:57:08:C7:57:A4:41:AE:91:B1:1D:44:D3:FB:94:79
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:33:90:89:bf:53:bc:de:23:1e:32:ae:14:00:4f:a7:7c:
         98:dc:9e:b0:a3:ae:55:11:7d:6a:e5:b8:86:5b:f8:3a:cc:7f:
         69:de:87:b6:b8:41:09:36:a5:e7:4b:18:32:13:c2:29:dd:94:
         ad:84:24:68:c4:1c:aa:df:97:97:5b:bb:bb:5e:72:93:cd:e5:
         c0:e4:c4:1f:c5:8c:ce:c9:70:64:1b:77:6c:c6:a7:f0:32:6d:
         ed:c7:c2:45:cb:1d:35:15:f0:58:68:39:f8:a8:e7:fd:41:f8:
         ff:e0:9e:6c:3a:7f:af:6e:a4:bb:66:d0:0a:dd:7d:89:02:1d:
         a8:b4:59:cd:80:80:24:81:29:4c:12:a1:06:29:50:41:f8:94:
         f4:50:2d:14:f4:d7:62:9b:05:20:4a:16:ed:bf:0e:28:eb:af:
         50:a3:50:46:d1:b7:26:f4:a0:62:fe:73:1a:21:7f:f2:8d:70:
         ee:25:fe:a5:7e:fc:70:53:27:43:ac:5f:52:c9:1b:e2:29:4c:
         b8:ea:7c:55:78:c4:5d:29:67:46:ee:20:ca:96:1c:96:44:23:
         56:39:5a:7d:1d:6a:47:54:de:bf:d9:b7:57:d0:c6:04:07:c4:
         a1:8e:fe:4c:0c:8b:66:71:c0:1b:90:c4:88:36:0c:20:4e:35:
         0a:b3:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net