Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138302e36302e302f32342d3234203d3e203437353833.roa
File:                     352e3138302e36302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          2DVBg/tjxpv2Le3janb7YLXYenDaXnOG0T5marleim0=
Subject key identifier:   04:38:D4:35:8C:BC:C8:B1:D0:94:1E:1E:D9:4F:F2:8F:53:DF:5F:4E
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       7B6A536E8F6B1BE28E46B4E00E79BA50485629B7
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138302e36302e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:58 +0000
ROA not before:           Sat 22 Oct 2022 04:28:58 +0000
ROA not after:            Sat 21 Oct 2023 04:33:58 +0000
asID:                     47583
IP address blocks:        5.180.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6a:53:6e:8f:6b:1b:e2:8e:46:b4:e0:0e:79:ba:50:48:56:29:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:58 2022 GMT
            Not After : Oct 21 04:33:58 2023 GMT
        Subject: CN=0438D4358CBCC8B1D0941E1ED94FF28F53DF5F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:52:46:ac:e4:bc:0d:9d:06:1d:5b:6c:70:
                    a0:85:73:7c:11:6d:9d:eb:c7:95:3f:e5:27:fb:5f:
                    23:ef:6c:be:9d:d1:c0:04:36:f3:0a:99:5a:a1:b4:
                    9d:4b:24:00:26:f9:45:f2:da:c6:f3:51:c7:c1:fa:
                    83:8a:17:9e:d2:66:88:38:8f:dd:0a:d8:f9:a1:42:
                    d7:6f:8a:80:27:4a:3c:f6:69:c6:e2:17:51:9f:90:
                    27:68:d5:09:2a:74:6e:80:51:77:c4:c6:49:ee:83:
                    71:a2:e5:1c:98:a1:98:da:a8:dd:37:53:99:94:c2:
                    00:8f:e0:35:e1:08:31:59:f6:d6:b1:e5:53:74:33:
                    32:f0:4f:df:48:19:5f:c6:6d:91:9f:21:2e:75:93:
                    01:b0:35:5c:20:a0:56:be:24:10:9e:de:3c:76:45:
                    69:3b:f5:89:85:1f:e2:a3:15:ab:5f:b2:ad:39:7d:
                    0a:f6:ee:7a:9d:1f:32:52:58:e1:81:58:bc:93:67:
                    a9:34:05:54:2e:fd:a4:6f:79:47:a3:2c:31:97:ac:
                    00:bd:d3:c7:8c:a7:f3:90:db:18:86:cc:f9:94:03:
                    3e:18:75:88:92:5f:fa:00:f7:b8:e2:a5:59:33:e0:
                    4c:61:83:07:2a:88:6a:cd:98:b7:8e:9f:b0:f1:5f:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:38:D4:35:8C:BC:C8:B1:D0:94:1E:1E:D9:4F:F2:8F:53:DF:5F:4E
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138302e36302e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:fe:8c:5f:fb:60:aa:1a:c5:e9:fa:83:c7:f0:a3:8c:e5:e1:
         06:8e:9f:6f:07:d0:1f:ec:18:21:b2:e6:8e:ca:51:cf:b7:f1:
         b8:c4:dd:c8:93:86:da:b6:16:a0:31:1b:de:ba:1b:28:cc:f1:
         4e:12:f1:5c:76:1c:58:96:64:67:cb:78:10:9b:f4:b4:58:fd:
         ee:91:a6:7f:c4:38:85:51:23:fd:bd:be:36:d0:c5:51:69:26:
         cd:92:bb:a9:a6:51:a1:9b:22:be:d3:84:e6:53:7a:10:15:cb:
         47:b9:05:af:fb:eb:c9:99:86:4d:0f:d6:49:95:c5:70:32:3d:
         8a:73:d1:3a:17:b4:99:5b:2e:60:cb:19:5c:f7:95:1e:8e:f1:
         88:72:58:7d:66:25:02:9f:74:99:75:b2:10:24:b5:c3:3b:f1:
         d0:e3:f5:35:a1:be:d0:e8:0a:3c:29:db:0f:cd:e5:26:ba:8d:
         6c:0e:1b:e1:12:39:10:98:20:8d:77:7e:5e:9c:20:f4:75:2a:
         ff:48:6e:d9:bc:7d:b7:07:93:e2:bc:6a:03:25:54:b2:cf:1c:
         f6:3e:35:ef:d2:fd:ac:4c:75:67:9a:4c:46:3e:7d:94:35:36:
         c8:e1:a6:70:5a:46:de:38:ee:13:97:89:4a:f4:f4:1d:9e:f6:
         c8:e4:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net