Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133342e302f32342d3234203d3e20323037373837.roa
File:                     34352e382e3133342e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          VJpu0TvayPVeMtfHVBkzl+MYOqWIFvRk6vU7efoEkjs=
Subject key identifier:   FD:53:56:84:5D:29:92:26:0A:F2:9B:E6:46:29:A8:F5:A6:6E:AD:C9
Certificate issuer:       /CN=2727235923158bc2dc42ad8d7cf3618a464ae58c
Certificate serial:       5C66277BA1E94D7BF7C95D915AA8714AF79E520C
Authority key identifier: 27:27:23:59:23:15:8B:C2:DC:42:AD:8D:7C:F3:61:8A:46:4A:E5:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JycjWSMVi8LcQq2NfPNhikZK5Yw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133342e302f32342d3234203d3e20323037373837.roa
Signing time:             Tue 01 Dec 2020 23:26:13 +0000
ROA not before:           Tue 01 Dec 2020 23:21:13 +0000
ROA not after:            Tue 30 Nov 2021 23:26:13 +0000
asID:                     207787
IP address blocks:        45.8.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:66:27:7b:a1:e9:4d:7b:f7:c9:5d:91:5a:a8:71:4a:f7:9e:52:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2727235923158bc2dc42ad8d7cf3618a464ae58c
        Validity
            Not Before: Dec  1 23:21:13 2020 GMT
            Not After : Nov 30 23:26:13 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:d0:4d:fd:c7:be:90:ca:db:45:c9:5a:3b:
                    6e:28:ed:c0:89:f1:b3:85:0b:2c:04:db:f9:5c:2b:
                    4a:b9:dc:c4:9f:88:e7:0a:5f:44:29:7e:9a:2c:f9:
                    16:84:86:52:8c:95:a5:66:9f:e9:21:a5:7e:1a:37:
                    99:c5:f4:13:78:75:ca:a5:5d:83:06:31:b8:53:90:
                    2a:00:eb:2a:59:1b:e3:e4:da:27:ee:1d:77:d7:47:
                    79:cb:7c:22:12:85:8d:37:4a:06:9b:2e:2f:bd:2d:
                    a6:18:e5:09:62:c9:eb:30:d1:31:23:0c:e2:b8:e9:
                    6d:bb:bf:e1:19:83:e0:26:b6:6c:80:77:64:19:95:
                    ad:d1:58:3e:aa:74:c5:c5:37:c0:02:b6:94:eb:dc:
                    62:71:26:5b:73:70:00:2c:04:7c:5a:65:0e:07:49:
                    79:7d:72:79:10:00:f4:b1:c4:0c:17:30:a0:da:4f:
                    96:41:e8:7f:a5:92:c6:0b:2f:36:3b:6c:90:d1:95:
                    ff:40:14:62:9d:65:ca:cf:a1:dd:4a:99:e0:65:50:
                    a9:e1:33:b6:7b:5b:df:44:55:46:94:b5:8d:5f:25:
                    09:9a:25:9a:3f:73:57:05:f6:21:a7:93:72:4a:79:
                    a3:bd:52:ed:f1:3f:da:d1:ae:9d:68:f8:03:ed:05:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:53:56:84:5D:29:92:26:0A:F2:9B:E6:46:29:A8:F5:A6:6E:AD:C9
            X509v3 Authority Key Identifier:
                keyid:27:27:23:59:23:15:8B:C2:DC:42:AD:8D:7C:F3:61:8A:46:4A:E5:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/48/2727235923158BC2DC42AD8D7CF3618A464AE58C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JycjWSMVi8LcQq2NfPNhikZK5Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/48/34352e382e3133342e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:29:0c:50:f7:6b:d5:aa:8e:42:24:dc:21:81:ef:f2:12:b4:
         45:96:10:e7:a9:88:9a:ca:e6:7d:16:85:bb:ea:2b:b3:f1:6f:
         4b:89:b2:fd:0e:aa:8d:f9:ce:5c:e4:47:0d:72:05:27:9d:6c:
         52:f9:a4:d9:53:72:28:c8:1a:cc:0a:79:5f:0f:0b:9d:36:7f:
         fa:b4:77:04:d5:52:c6:86:c5:54:ee:94:ff:cb:ce:db:3b:bf:
         e6:a8:a6:b3:78:58:85:2f:4b:3b:dc:c4:66:38:8c:91:70:c5:
         c2:c3:b8:3c:e9:f8:95:0c:a0:52:4c:00:cb:95:81:54:ee:60:
         6a:4e:18:5f:00:e3:19:4b:96:8c:1d:00:e9:f4:46:18:5a:42:
         d6:c5:4e:6a:c8:56:74:b8:96:10:7c:f5:e8:b8:88:fc:98:be:
         64:65:74:1e:e1:3a:94:21:9e:8a:30:ec:6d:17:ce:03:b0:69:
         ef:b2:b2:e5:50:77:f1:3a:26:be:79:e6:0a:0d:4d:44:60:d4:
         27:ee:b9:93:26:a2:c9:fb:72:0d:0a:ab:ce:13:0d:8e:01:53:
         2e:59:24:b9:1c:62:3e:0a:0d:93:5b:1f:23:67:0f:ca:ff:9b:
         b5:27:f1:24:bf:bc:d7:41:e9:d8:93:f2:b6:a0:03:96:d8:91:
         ea:b2:7d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net