Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/34/34352e3132392e33332e302f32342d3234203d3e20323032343235.roa
File:                     34352e3132392e33332e302f32342d3234203d3e20323032343235.roa (raw, json)
Hash identifier:          RvC8BiUIQ7/ejkkoUXqhBtIgw94r44qhwQfDJ+PgQkA=
Subject key identifier:   4F:7B:B9:F7:CF:EF:93:29:17:7E:F9:08:8C:ED:0D:C2:14:7E:4F:DA
Certificate issuer:       /CN=c87179c1501e173869629be525afd3206b2588d9
Certificate serial:       106844D97F886470C2ECFFD8D886A239205ABE33
Authority key identifier: C8:71:79:C1:50:1E:17:38:69:62:9B:E5:25:AF:D3:20:6B:25:88:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHF5wVAeFzhpYpvlJa_TIGsliNk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/34/34352e3132392e33332e302f32342d3234203d3e20323032343235.roa
Signing time:             Mon 30 Nov 2020 19:12:51 +0000
ROA not before:           Mon 30 Nov 2020 19:07:51 +0000
ROA not after:            Mon 29 Nov 2021 19:12:51 +0000
asID:                     202425
IP address blocks:        45.129.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:68:44:d9:7f:88:64:70:c2:ec:ff:d8:d8:86:a2:39:20:5a:be:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87179c1501e173869629be525afd3206b2588d9
        Validity
            Not Before: Nov 30 19:07:51 2020 GMT
            Not After : Nov 29 19:12:51 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:07:92:ed:6d:52:bf:4f:42:0b:0f:43:d5:
                    a7:29:7f:d2:5f:b3:aa:b2:72:fa:e4:ff:f2:5d:53:
                    63:8b:ac:ef:34:db:23:92:9a:67:40:4a:3d:49:c0:
                    f2:fe:78:97:8a:de:36:7f:3c:7d:41:ce:19:b2:62:
                    af:d2:2f:80:e4:51:83:bd:b3:a1:fa:48:38:87:de:
                    43:94:ce:28:9a:bc:59:1e:37:cf:7f:42:1f:ba:f5:
                    31:98:88:e2:27:ca:09:cb:85:89:ce:74:4c:67:1b:
                    96:8f:c5:56:2e:9d:d3:5b:16:73:cb:89:4d:ae:0f:
                    2d:53:32:44:87:2c:77:d1:c8:9e:eb:86:d6:68:dc:
                    87:4c:0a:46:70:70:0a:70:5e:17:ad:4f:07:50:57:
                    0b:47:e7:ea:66:5c:b0:5d:48:b2:a0:ab:61:31:dc:
                    9d:2d:68:c8:cf:a2:61:ad:f5:b3:ed:0a:a4:83:ee:
                    c0:b1:71:61:b8:d3:6b:61:5d:37:d0:15:37:02:63:
                    c5:26:b6:df:d8:ea:bb:8a:39:4a:09:fe:72:e4:82:
                    95:0d:c6:24:66:be:8e:1a:5c:75:73:44:42:a7:97:
                    43:08:74:b7:8b:9d:3e:08:67:67:de:eb:37:11:49:
                    dd:0d:0d:eb:c5:cb:0e:24:71:b7:40:fe:4f:4a:d5:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7B:B9:F7:CF:EF:93:29:17:7E:F9:08:8C:ED:0D:C2:14:7E:4F:DA
            X509v3 Authority Key Identifier:
                keyid:C8:71:79:C1:50:1E:17:38:69:62:9B:E5:25:AF:D3:20:6B:25:88:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/34/C87179C1501E173869629BE525AFD3206B2588D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHF5wVAeFzhpYpvlJa_TIGsliNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/34/34352e3132392e33332e302f32342d3234203d3e20323032343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f7:bb:bc:6d:d7:c7:88:a9:4f:e7:77:a5:11:cd:ea:dd:53:
         ac:a9:80:0c:e4:45:56:33:85:58:e1:e1:89:e5:7b:6e:24:f2:
         9a:17:d3:f9:48:65:e1:f1:15:4a:7d:6c:46:04:bc:72:28:2c:
         7e:82:8e:17:33:0d:ad:f6:85:2e:f3:53:be:bb:66:25:b2:9c:
         29:f3:27:39:78:f6:1f:ff:6e:2d:ff:62:60:3d:da:5a:84:e4:
         15:93:96:9e:8b:0c:5f:22:ae:33:fc:c4:4a:7f:0b:a5:56:f2:
         da:2e:75:f7:0b:63:44:45:7d:b8:cc:f1:0f:5b:cb:ae:c0:00:
         3f:9d:9f:50:79:ad:84:c1:1e:bd:4a:bf:a6:3b:77:4f:49:4c:
         eb:c1:d2:68:2a:7b:0f:23:41:63:9c:da:d8:9c:fb:22:db:5e:
         3d:37:24:9a:13:af:fb:6c:ed:8a:5c:1c:98:1a:16:07:8b:96:
         f1:bf:a7:10:a3:b7:4f:c6:7f:c4:6e:1a:67:64:63:37:55:26:
         bd:f8:eb:7c:3e:c5:a2:b8:8f:48:ec:45:6f:74:aa:ab:8e:61:
         0c:6b:80:2d:e9:74:99:05:bd:a6:46:84:07:f1:5c:9e:4c:87:
         4a:01:44:b0:a2:98:83:70:b2:97:f0:e6:2e:c8:f3:f4:24:83:
         a6:78:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net