Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3137322e302f32322d3234203d3e203437353833.roa
File:                     38322e3138302e3137322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          8uxx6LOYYOgjAKKBy70kCtK1NSBARXOV8U5feNKFZLo=
Subject key identifier:   CF:CE:FC:CE:33:8F:BF:77:7E:2B:B6:3F:E0:E8:39:01:95:F9:34:2D
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4022915FF50022273941905A4E5F79E57F0D4935
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3137322e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:27 +0000
ROA not before:           Sat 22 Oct 2022 04:29:27 +0000
ROA not after:            Sat 21 Oct 2023 04:34:27 +0000
asID:                     47583
IP address blocks:        82.180.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:22:91:5f:f5:00:22:27:39:41:90:5a:4e:5f:79:e5:7f:0d:49:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:27 2022 GMT
            Not After : Oct 21 04:34:27 2023 GMT
        Subject: CN=CFCEFCCE338FBF777E2BB63FE0E8390195F9342D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4e:22:dc:cf:ac:59:4e:30:c9:93:8e:f7:a4:
                    d0:6c:a3:a9:2b:31:95:fc:ee:93:57:4a:0e:34:10:
                    e3:ed:1c:9e:40:99:20:23:9a:51:96:e2:07:9b:7a:
                    67:04:66:40:e7:50:42:71:23:a4:1c:bf:73:c5:4e:
                    49:2b:74:29:78:a2:19:0f:25:18:3d:1e:e1:31:19:
                    79:52:ff:c3:d5:da:08:af:18:d1:6c:cb:22:38:9c:
                    79:c1:27:aa:d1:b4:b9:da:65:af:3d:ca:f9:0c:33:
                    b4:fa:22:51:9b:ef:bd:5a:98:d3:14:38:53:b0:b9:
                    9f:0a:81:cd:1e:04:6c:e9:9e:b2:73:3a:d8:a8:90:
                    17:a0:c0:b2:43:86:1b:7a:e2:b9:78:e8:e7:49:55:
                    ba:cf:9e:0d:75:65:db:b8:08:fd:72:d1:22:2d:44:
                    9e:23:2e:60:b2:fd:ab:94:8e:35:f9:c6:40:72:7e:
                    22:09:19:a3:8b:50:19:8e:dc:5c:58:6a:4b:b8:47:
                    4a:09:cb:5d:c4:f2:f3:b1:9d:54:de:6f:40:a4:a0:
                    02:bd:a7:2b:77:50:4d:ad:4e:ff:65:4b:47:a4:2f:
                    a4:c8:7c:06:8f:49:78:71:7a:98:13:f4:5c:a1:9f:
                    c7:26:56:ed:97:c7:65:99:00:a7:3d:b7:fc:a7:5d:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CE:FC:CE:33:8F:BF:77:7E:2B:B6:3F:E0:E8:39:01:95:F9:34:2D
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38322e3138302e3137322e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.180.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:17:c8:e6:a2:4c:c8:dc:23:2f:7b:25:bb:67:01:c4:38:6a:
         26:59:47:97:37:37:b7:18:8a:3e:b2:1d:83:9f:ec:5a:49:6b:
         90:15:4f:27:0a:a1:4b:7c:24:2c:ad:2a:ba:98:19:ac:5c:77:
         37:01:11:28:13:53:35:37:61:89:61:c0:1e:57:16:7e:b8:20:
         27:d5:e3:ee:fb:8b:85:65:48:e3:9e:52:61:8f:8d:e6:35:24:
         4a:75:32:6d:d5:7e:66:12:a9:ae:f9:90:38:d3:a6:3a:8c:49:
         26:c4:6d:38:56:57:6f:4f:93:99:87:96:2d:b5:ad:82:8a:72:
         ec:d3:4a:58:b7:38:21:e1:0c:5a:e9:ec:e5:da:be:bd:67:cc:
         d9:8f:35:68:92:4c:9e:00:69:f6:db:7a:17:21:6e:93:68:ac:
         cd:fc:1c:ca:80:81:c5:70:4e:fd:04:a8:06:49:63:91:ee:c6:
         c6:0b:8f:e0:15:e3:91:8b:30:1d:9c:78:6d:90:66:60:3a:a1:
         9e:90:e4:a3:14:11:5e:4f:c6:31:56:b7:be:0a:df:8f:38:c7:
         3c:71:39:57:18:81:fb:7e:ff:92:3d:04:1a:8e:4f:96:34:51:
         40:41:70:c3:08:ec:e9:7d:0d:db:25:68:b1:7e:6e:f9:55:7e:
         e2:aa:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net