Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3138392e302f32342d3234203d3e203631333137.roa
File:                     34352e3135322e3138392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          eu4bMQ1h3yPmkTuCgbiDLokQ+HfpsQ+Iy1HNhM3lDyQ=
Subject key identifier:   4A:D0:8A:2F:52:1B:C6:45:7C:5B:45:73:02:BA:F3:BB:95:12:40:47
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       27D28EB4BB1B8AD0BA86663C7E94C9DB432C0B27
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3138392e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 26 Jan 2023 11:48:40 +0000
ROA not before:           Thu 26 Jan 2023 11:43:40 +0000
ROA not after:            Thu 25 Jan 2024 11:48:40 +0000
asID:                     61317
IP address blocks:        45.152.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d2:8e:b4:bb:1b:8a:d0:ba:86:66:3c:7e:94:c9:db:43:2c:0b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 26 11:43:40 2023 GMT
            Not After : Jan 25 11:48:40 2024 GMT
        Subject: CN=4AD08A2F521BC6457C5B457302BAF3BB95124047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:67:22:04:24:99:d3:be:69:81:7b:b3:3c:
                    d2:09:d0:7d:42:5a:12:42:21:e2:54:8f:2c:90:e9:
                    39:9e:6b:da:f7:4c:73:96:1c:1b:61:a4:5b:9c:0d:
                    6d:07:13:ce:b9:50:ce:fa:80:34:47:3e:d5:99:16:
                    d2:a6:30:3b:7c:5d:54:c7:55:1c:e6:e4:0c:b4:69:
                    25:5d:b1:a9:7d:a1:a5:86:cc:c2:11:30:a3:dc:c1:
                    86:1b:c1:26:8e:8c:d3:29:f2:d3:c3:4b:f9:46:31:
                    1a:24:92:5d:f7:5f:22:dd:82:57:8b:ad:a3:80:9b:
                    94:fd:35:ae:84:6d:e4:bb:5a:31:78:88:a4:b4:90:
                    f4:bf:e7:74:49:34:6e:3a:23:d1:5d:6c:aa:ae:e3:
                    82:33:51:c7:94:78:6d:88:63:a1:d7:77:b2:44:1c:
                    f5:58:1a:0c:1e:5f:5a:d8:af:c9:72:c7:13:56:b2:
                    ea:9b:b4:63:65:58:42:7d:fa:b5:7e:38:f1:e4:89:
                    a0:ae:eb:f2:8a:d3:30:4a:17:48:21:00:cd:48:df:
                    e1:72:80:8a:54:b8:6d:ae:4c:2e:25:ad:65:43:c0:
                    5d:ed:15:55:4b:fc:42:3a:b3:51:29:cc:7f:96:cd:
                    91:ea:45:f4:eb:7a:8c:18:cc:a9:4d:54:42:a3:46:
                    37:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D0:8A:2F:52:1B:C6:45:7C:5B:45:73:02:BA:F3:BB:95:12:40:47
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3138392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:66:91:23:c6:3c:97:a6:cc:eb:ae:ae:05:10:a9:08:af:31:
         6c:11:19:cb:97:1b:52:5b:08:29:0b:a9:dc:1a:2b:8f:a3:3b:
         5b:b7:91:33:29:33:1d:39:e3:32:7c:3d:df:26:35:e0:0d:72:
         1d:20:e4:0c:d8:0d:c1:4e:11:1b:f8:20:58:da:19:2f:02:5d:
         34:21:07:00:07:c8:47:17:42:21:b3:11:1a:96:2c:06:a3:91:
         b5:80:e9:1c:1e:b4:a7:d3:07:14:0b:cf:49:a1:a2:69:2b:90:
         38:6b:69:bb:06:df:af:0a:86:43:90:49:36:d2:58:9b:3a:96:
         bb:8e:1c:26:65:72:38:80:1e:fd:37:27:bc:12:35:d4:c9:44:
         56:3e:b7:57:67:34:c8:77:7e:30:ad:12:ba:1f:e0:d2:03:72:
         5a:ba:86:d5:fc:29:8b:d7:d4:de:3e:6d:71:a4:88:b6:10:02:
         50:bb:f6:93:72:b5:52:46:59:fb:cc:95:70:53:77:19:5f:25:
         a2:ff:73:9f:c8:45:24:5f:76:16:ff:fe:82:d9:2f:10:6f:eb:
         52:2b:30:5f:68:9e:f5:1d:45:35:4d:e0:a6:46:90:67:9e:fe:
         b6:b9:b7:66:03:6c:3f:96:17:12:25:10:60:d5:d4:9f:03:ba:
         fc:74:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net