Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32342d3234203d3e2037373234.roa
File:                     34352e382e3134382e302f32342d3234203d3e2037373234.roa (raw, json)
Hash identifier:          XD0sB6L7SqXgKhwPoH8Uz1nRnKxzmSG0GevvGMSYv+E=
Subject key identifier:   3C:C1:CA:2D:68:6F:89:BC:4F:F8:B4:56:EB:3B:B8:B6:58:AA:5A:24
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       17890020405F8A84AB82E9A91F3CA104069BD365
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32342d3234203d3e2037373234.roa
Signing time:             Tue 28 Jun 2022 04:41:08 +0000
ROA not before:           Tue 28 Jun 2022 04:36:08 +0000
ROA not after:            Tue 27 Jun 2023 04:41:08 +0000
asID:                     7724
IP address blocks:        45.8.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:89:00:20:40:5f:8a:84:ab:82:e9:a9:1f:3c:a1:04:06:9b:d3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:08 2022 GMT
            Not After : Jun 27 04:41:08 2023 GMT
        Subject: CN=3CC1CA2D686F89BC4FF8B456EB3BB8B658AA5A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:54:7a:17:ee:59:1c:d9:72:ee:82:1a:79:c5:
                    3b:27:c0:92:c9:90:c6:ef:2c:65:77:24:2a:af:ac:
                    3d:62:48:57:14:92:29:07:64:57:49:bb:07:42:09:
                    3e:de:ff:84:ab:38:41:54:4f:c0:80:b3:35:1c:59:
                    ab:73:ca:87:c8:61:b6:b6:77:e7:28:8f:7c:2c:2a:
                    e0:09:9e:1b:01:cc:25:1c:f1:80:15:d2:8f:fc:5f:
                    ca:7f:ad:9b:b3:ee:15:d5:db:7b:58:94:11:00:90:
                    66:9f:48:a2:9d:00:1a:d6:47:9d:89:0c:1b:9f:02:
                    bb:b8:b3:c6:87:1b:1d:e9:65:e4:e0:c8:96:d6:be:
                    02:cf:c1:b6:7d:f1:60:fd:ed:7b:6b:c0:fd:2c:02:
                    4b:c9:38:79:98:15:01:c3:b5:45:08:e4:82:88:d6:
                    fc:55:be:1a:02:22:d3:5a:02:72:3b:6a:a4:58:8e:
                    cc:6c:9d:8b:ca:01:74:c1:aa:0d:44:0f:86:37:1e:
                    14:37:b6:e9:b1:e1:32:ab:ef:20:d5:ff:c1:a2:35:
                    87:f6:d1:2a:9b:0b:67:b2:35:8f:02:34:9d:ac:ef:
                    d2:c5:21:49:10:18:b9:e9:dc:6b:8d:b4:d4:de:27:
                    43:e4:ba:b2:ac:bb:c7:47:06:36:9c:ef:0a:5d:82:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C1:CA:2D:68:6F:89:BC:4F:F8:B4:56:EB:3B:B8:B6:58:AA:5A:24
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32342d3234203d3e2037373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:b3:d2:67:65:04:73:95:49:0f:b1:2e:c8:8d:cd:bd:14:
         92:0b:70:5d:86:c7:0d:f9:f7:a6:64:41:e3:96:97:1c:03:f1:
         be:34:fb:27:2e:4a:ec:e7:59:5a:27:bd:77:1e:28:0d:3d:8b:
         95:b3:91:66:86:35:d8:11:80:68:1f:c6:d0:c1:0b:c4:b5:8f:
         43:aa:29:03:36:1e:3d:23:41:b2:71:07:5f:b5:27:00:27:bf:
         1a:5a:9b:a1:fa:64:35:de:27:f4:eb:9f:9f:e5:94:44:0f:51:
         f5:c2:99:f0:2e:e3:d1:cf:7e:23:b1:be:e5:97:ef:6e:29:b3:
         5b:88:5c:b9:4c:8f:ec:35:bf:0d:d0:d9:7f:3b:f4:fd:8d:58:
         a7:cf:17:b2:c8:e3:e8:83:f7:74:fb:6b:87:0f:9d:30:ec:95:
         f6:fc:bb:65:d7:37:eb:73:f4:9d:86:8d:64:1b:58:9e:d1:7c:
         42:c2:d8:65:fe:ee:85:ff:51:06:9e:16:a2:5d:32:8c:94:9f:
         1b:3e:81:86:4c:ae:1c:cb:eb:91:fe:90:0c:35:39:95:31:66:
         73:b5:9c:08:83:1e:cb:8e:43:ff:74:19:1c:8a:fb:eb:aa:78:
         a1:e2:62:eb:9c:97:68:3d:31:1a:2e:e5:b5:75:31:05:95:18:
         89:61:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net