Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135332e302f32342d3234203d3e203437353833.roa
File:                     38322e3138302e3135332e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          OZSxGdeZXDJWWs90DeBSR3MD02cVwKxQ7mp9/mSAVZs=
Subject key identifier:   27:0A:61:37:C5:8C:F9:60:CB:02:55:56:E0:5B:50:1B:44:44:17:01
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       088BF5126C5E63598CF12FC1AAD8967E5E308068
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135332e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:12 +0000
ROA not before:           Sat 22 Oct 2022 04:29:12 +0000
ROA not after:            Sat 21 Oct 2023 04:34:12 +0000
asID:                     47583
IP address blocks:        82.180.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8b:f5:12:6c:5e:63:59:8c:f1:2f:c1:aa:d8:96:7e:5e:30:80:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:12 2022 GMT
            Not After : Oct 21 04:34:12 2023 GMT
        Subject: CN=270A6137C58CF960CB025556E05B501B44441701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:b4:8d:c8:79:fd:12:29:27:47:22:2e:fa:
                    85:0a:54:48:c7:53:c0:c0:b8:5c:e2:4e:a1:48:5f:
                    1f:67:b9:57:41:e8:59:63:2d:49:b5:da:3d:7e:ee:
                    7c:bf:27:08:09:26:ac:b9:36:a8:b5:b8:52:e1:9e:
                    56:aa:c0:a9:8e:70:5d:8c:a2:94:ec:ed:2c:29:c3:
                    d2:2c:77:0d:ff:7e:fe:f7:00:4d:b3:1e:22:96:d3:
                    49:c9:fd:0a:7e:03:ff:ef:3d:4f:e5:e5:ce:a1:30:
                    f6:aa:cc:b3:92:c0:08:f8:85:f9:24:97:4d:2b:44:
                    35:a1:db:9b:44:65:5d:20:31:a8:f7:9b:12:00:f5:
                    44:ea:40:76:6e:f1:9c:bc:f9:dc:4a:cf:bd:c3:3f:
                    51:6c:5a:3b:e5:b3:cd:dc:9e:32:b3:47:d1:1f:a9:
                    1f:63:67:74:21:81:6d:a9:cb:c0:e9:7a:40:e5:2e:
                    b0:90:6d:33:10:b0:1f:52:9f:65:de:39:26:86:be:
                    ae:33:ad:57:43:8b:29:e4:8d:2b:77:3f:78:49:db:
                    76:76:3e:d2:c1:fa:2b:41:12:78:77:f1:7d:a3:ee:
                    a0:99:cf:43:3d:d3:6b:56:8a:c8:40:6f:45:bc:62:
                    7b:99:11:87:73:fb:67:8e:cc:44:60:e3:ad:e1:bc:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0A:61:37:C5:8C:F9:60:CB:02:55:56:E0:5B:50:1B:44:44:17:01
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3135332e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:92:fe:5d:42:40:cb:b1:c7:05:9a:30:69:84:7b:f7:4f:61:
         5d:52:85:3a:55:d5:a8:72:cc:f0:50:04:e0:30:e6:4f:1d:29:
         14:e6:df:27:36:18:2f:6c:b2:16:10:cd:9d:53:93:91:fb:0b:
         da:78:53:3f:d0:f0:38:2b:d6:16:e6:14:74:41:1b:b2:1c:77:
         05:3c:eb:44:cb:a6:94:ef:09:14:6e:46:da:a4:8c:89:da:fb:
         8b:e4:96:db:2a:c2:3d:f9:e1:ba:4f:fb:25:63:ee:f5:87:74:
         92:b7:c7:d7:96:17:24:af:97:29:3c:94:20:de:52:97:46:ed:
         be:ff:ce:6a:3a:ae:aa:41:57:bd:59:ef:ce:f8:98:72:f7:ae:
         ab:49:e4:0c:ba:3d:b9:a5:c2:53:db:f4:7f:b1:54:ee:be:c5:
         82:c0:d1:89:86:7e:68:73:d8:6e:d2:b4:bc:a4:20:8a:96:b9:
         5c:ff:b2:b5:34:49:da:10:d0:cb:d5:97:c0:84:29:05:3d:da:
         0b:45:3a:b4:54:5c:57:87:d9:4e:cd:39:aa:33:4e:c2:4f:31:
         9e:07:a1:b0:ca:10:d3:ef:b3:63:f6:3a:0f:fa:5c:6f:53:34:
         d3:4a:31:a6:8e:c2:27:ef:57:c0:7a:c1:dc:6d:43:ba:51:e4:
         3c:ab:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net