Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232302e302f32342d3234203d3e20323132323133.roa
File:                     34352e39302e3232302e302f32342d3234203d3e20323132323133.roa (raw, json)
Hash identifier:          0sUQDHba1V50GH38aQfjluUlJnTSDpWXS3uLZUUWd6E=
Subject key identifier:   18:EF:F9:FE:2A:12:77:46:E7:75:48:EB:24:0C:6D:87:84:43:DE:34
Certificate issuer:       /CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
Certificate serial:       7DA6B7BD533596B595D76F45723D44F9437613D5
Authority key identifier: 67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232302e302f32342d3234203d3e20323132323133.roa
Signing time:             Fri 18 Dec 2020 11:45:03 +0000
ROA not before:           Fri 18 Dec 2020 11:40:03 +0000
ROA not after:            Fri 17 Dec 2021 11:45:03 +0000
asID:                     212213
IP address blocks:        45.90.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:b7:bd:53:35:96:b5:95:d7:6f:45:72:3d:44:f9:43:76:13:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
        Validity
            Not Before: Dec 18 11:40:03 2020 GMT
            Not After : Dec 17 11:45:03 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:ac:de:5f:fa:bd:b5:cc:07:af:a6:82:b3:
                    ff:a2:32:ec:33:6a:3b:fd:96:8d:7b:a3:37:d5:3c:
                    3c:b0:84:ba:5b:a6:a8:2b:6e:df:10:bc:8a:6b:fd:
                    83:95:11:c3:b9:0e:24:71:c6:c0:97:da:bd:16:98:
                    1a:48:aa:8e:80:16:2a:09:40:36:9b:c6:a0:9b:46:
                    a7:be:cf:90:c3:b5:19:85:e6:61:cf:be:9d:74:03:
                    91:9d:75:9e:4a:56:cf:d5:eb:b6:2d:21:dc:41:09:
                    59:12:4b:cf:3b:7f:a4:d5:cb:cb:62:c9:18:4f:70:
                    72:2c:6a:94:5d:3e:c4:1a:01:02:5b:b3:5d:0d:e4:
                    c8:27:0b:8f:22:59:fa:a2:31:73:7a:b6:d3:3b:34:
                    c7:5a:18:4e:4e:f4:2f:7b:32:31:e5:75:8f:b8:2a:
                    88:6e:10:fc:56:46:e3:dd:12:42:5e:78:84:39:6d:
                    04:84:38:b2:a1:68:60:3c:22:a9:ee:04:c1:09:ed:
                    87:9a:be:25:1e:55:d4:f9:15:21:3e:a6:e1:fd:a6:
                    9f:00:4f:02:68:6a:be:ad:b6:f0:6c:49:d9:f5:a2:
                    5f:fb:5b:17:31:00:a4:42:83:5b:42:4c:92:bd:bb:
                    be:a9:c8:14:7f:43:b9:ea:46:39:72:ad:c9:d9:84:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EF:F9:FE:2A:12:77:46:E7:75:48:EB:24:0C:6D:87:84:43:DE:34
            X509v3 Authority Key Identifier:
                keyid:67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/67596B6A4CD6BFE459E1A9C589B881FF37ABDA27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232302e302f32342d3234203d3e20323132323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b3:2e:ca:59:5d:8c:a5:2e:9b:24:35:f5:f0:99:ae:f2:43:
         68:ce:85:58:41:f1:2d:4d:ff:dc:29:94:cd:78:d7:5e:67:4c:
         8f:02:d4:33:06:92:09:b3:72:f2:6b:e3:eb:f7:b9:f1:29:ed:
         08:a8:e8:f0:66:9a:b4:e4:39:15:ab:aa:cb:14:73:7c:a0:f2:
         a7:50:b2:5b:75:8c:b8:b2:c9:00:04:d9:5e:20:5f:95:22:aa:
         bc:ff:e1:5d:9a:ce:27:c1:77:f4:a7:d0:da:bd:b9:bc:b3:aa:
         a6:8c:a8:c6:29:9c:63:03:41:5e:b4:29:c6:7a:1d:ee:4d:a6:
         8e:0c:8b:5e:14:90:1a:9d:0b:d5:59:4d:3d:7d:af:30:72:7f:
         d8:a5:fe:d7:73:60:a9:27:d3:40:51:31:f2:fd:aa:23:1a:7f:
         b3:5f:2b:ab:65:50:b7:01:34:d7:a2:e6:66:85:6c:2e:c5:65:
         47:50:2a:87:73:a1:2d:0a:f8:43:ba:90:bb:e8:b1:17:53:3f:
         61:56:11:03:40:cd:a2:30:7c:53:3e:cc:1d:ab:43:1b:a4:fd:
         4a:55:4b:0f:f3:be:ba:ab:a1:71:6d:ab:37:4b:95:0c:9c:74:
         60:d0:6e:04:2e:cc:2f:11:0c:b5:af:98:c5:48:f1:6e:f0:18:
         1f:c6:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net