Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e2033333230.roa
File:                     34352e38352e3134352e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier:          vZX3JDbqhoRdCh90MkrI8TFlenHa3zRwm7u7GAcSjK8=
Subject key identifier:   31:2E:03:13:87:E6:1E:7B:B1:78:1C:9A:FA:43:E8:E3:05:74:BD:5D
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       4185A2FA559D459FA11FCDADECB1907C76C4E0C0
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e2033333230.roa
Signing time:             Tue 28 Jun 2022 04:41:11 +0000
ROA not before:           Tue 28 Jun 2022 04:36:11 +0000
ROA not after:            Tue 27 Jun 2023 04:41:11 +0000
asID:                     3320
IP address blocks:        45.85.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:85:a2:fa:55:9d:45:9f:a1:1f:cd:ad:ec:b1:90:7c:76:c4:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:11 2022 GMT
            Not After : Jun 27 04:41:11 2023 GMT
        Subject: CN=312E031387E61E7BB1781C9AFA43E8E30574BD5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:00:22:9f:0a:f3:6a:5a:5d:a7:5b:81:ed:
                    97:87:89:a9:ab:e1:04:1e:2d:f6:88:a8:f5:11:ea:
                    cb:1f:66:70:74:4b:ff:9b:62:86:d6:2f:a3:a4:bc:
                    df:dd:64:c9:18:92:86:97:5b:06:36:6c:5a:29:50:
                    26:2e:d0:42:33:a9:ec:a4:39:35:22:7f:19:45:a2:
                    8f:4d:fb:ef:ae:c6:b3:7b:19:2e:c7:14:09:a1:99:
                    7b:16:2a:ec:1f:b2:4b:e8:e0:cd:2b:32:50:66:77:
                    78:a5:94:af:c0:ec:e9:77:b8:09:c5:f0:e8:68:3a:
                    bc:80:8d:9c:ea:60:4b:38:d9:8b:96:4f:ce:21:00:
                    cf:f0:6f:49:da:e7:d8:f5:01:7a:bb:88:8b:e4:75:
                    3d:22:7d:a7:87:40:88:cd:49:05:c9:f4:02:90:7a:
                    c6:10:5b:c5:88:8b:35:6d:e4:56:e3:b9:e9:62:ac:
                    d6:94:cb:5d:62:86:25:18:9d:87:e1:a7:6b:78:d6:
                    02:ad:09:43:f0:26:39:2c:ed:b3:01:3f:43:ee:61:
                    ee:58:f8:cf:81:a9:10:65:e1:2b:c2:3d:f6:78:80:
                    88:2b:9b:22:56:06:f2:c3:68:c0:7e:ac:6a:0a:c2:
                    6b:10:17:e3:21:b8:2f:8b:6a:df:6f:c6:f4:8d:b9:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2E:03:13:87:E6:1E:7B:B1:78:1C:9A:FA:43:E8:E3:05:74:BD:5D
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e2033333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:9c:de:ee:f3:20:4b:fe:47:85:1f:0f:7a:2b:db:35:f6:d0:
         b6:07:31:c1:cd:ef:11:70:67:53:db:99:79:ef:27:93:6a:93:
         65:d8:bc:c2:88:78:43:83:2f:17:11:84:80:d9:a0:40:2c:77:
         2e:3b:4a:3e:ba:c2:42:d7:80:16:76:23:c1:6b:7b:14:d6:93:
         fc:b6:7a:f1:1a:3b:bf:fe:fe:ad:5d:15:6b:36:f0:f3:7b:31:
         4d:f1:c5:13:a3:bf:b1:9e:af:1a:2b:4d:c9:82:fc:f5:a9:cd:
         34:12:63:16:cf:22:14:2d:87:c9:cd:d8:a6:1a:51:d3:5a:3e:
         6b:67:13:11:e7:06:b2:2b:ba:19:91:74:c4:42:21:18:34:ee:
         31:e8:39:ef:b1:dc:16:11:4d:88:e6:0f:41:d7:e6:ed:14:1d:
         0c:1c:41:02:7c:10:41:d4:7c:31:2d:f5:0d:f1:41:8d:70:7e:
         7d:91:c9:32:af:3f:16:96:67:4c:9c:91:ea:43:4b:82:bf:1e:
         38:5a:67:d8:43:1c:82:ae:fe:5c:8b:14:73:ac:b1:45:d3:22:
         18:9d:8e:32:01:3d:72:b1:6a:1e:38:e9:26:ca:1c:79:89:6e:
         20:aa:36:c8:3f:1a:19:65:5d:c4:b7:d2:33:91:c6:50:c7:87:
         63:96:dd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net