Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32332d3234203d3e203132313839.roa
File:                     352e3138322e33342e302f32332d3234203d3e203132313839.roa (raw, json)
Hash identifier:          7P1jMWpMHLXxTDoRgZgOrgXy5Pz93qEcbdxMwnyR4hQ=
Subject key identifier:   7E:26:FF:83:EC:45:94:61:0C:77:17:70:3D:EF:CF:0B:E6:32:1E:34
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       3D980913B401FE19F8183EC6F59B6E2B6736AC6C
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32332d3234203d3e203132313839.roa
Signing time:             Tue 30 Nov 2021 12:49:05 +0000
ROA not before:           Tue 30 Nov 2021 12:44:05 +0000
ROA not after:            Tue 29 Nov 2022 12:49:05 +0000
asID:                     12189
IP address blocks:        5.182.34.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:98:09:13:b4:01:fe:19:f8:18:3e:c6:f5:9b:6e:2b:67:36:ac:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 30 12:44:05 2021 GMT
            Not After : Nov 29 12:49:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:9b:f2:2b:51:00:69:cc:41:5e:e0:b8:e5:
                    73:d9:5e:27:e4:b7:49:bd:54:63:2f:af:50:6f:50:
                    64:65:e2:80:58:c1:99:4a:3b:dc:20:1f:42:51:db:
                    c4:5a:42:5a:ef:c1:ef:64:6e:2e:94:1c:ab:d5:1d:
                    2a:28:f5:18:c5:73:b8:4a:85:98:c1:b0:63:df:bf:
                    d7:df:0e:7d:2a:cd:ec:9d:ad:ab:fe:b1:ff:ff:43:
                    53:79:3a:c0:6b:bf:15:e2:94:a1:e8:3f:0c:ef:c2:
                    a3:33:ab:d8:c9:d3:2f:9a:7f:75:2f:c4:c5:ef:e8:
                    3b:4d:61:27:15:98:9c:d8:8c:72:0e:95:4d:f5:64:
                    e7:78:7e:1d:b4:cb:8c:83:a0:28:58:79:52:c8:15:
                    e2:4d:2e:1a:57:f6:1a:eb:f2:33:9a:84:04:48:be:
                    6d:c6:e4:ca:70:41:d7:65:7f:f8:57:cc:2a:92:38:
                    23:da:a3:14:22:af:67:12:92:8d:0d:af:cb:9d:b0:
                    59:29:da:80:90:78:60:cc:49:8e:63:4f:d9:58:b3:
                    20:df:f0:fb:90:97:30:9f:41:bb:5f:90:25:cd:a8:
                    0b:37:50:0b:05:81:3a:04:94:ea:dc:38:9f:93:59:
                    5c:43:cd:81:e6:6a:c2:74:6f:df:d8:cf:23:fb:76:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:26:FF:83:EC:45:94:61:0C:77:17:70:3D:EF:CF:0B:E6:32:1E:34
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32332d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:7c:9e:a7:99:cb:1c:61:20:99:89:16:a1:2c:5e:9d:92:87:
         04:47:66:65:5d:9e:14:33:4e:5c:91:ad:bf:1c:7f:52:95:d2:
         b0:d3:67:97:0f:42:9e:a3:68:e6:a0:78:29:15:d1:57:d6:10:
         c4:4d:e0:ef:38:f6:17:ce:7b:d6:fb:57:8a:ee:48:0b:78:49:
         9b:c3:97:96:1d:47:6b:3e:75:a8:e7:b5:b1:3e:17:3b:d8:3a:
         d9:43:d0:84:1c:0f:f1:d7:c2:a8:26:b4:03:41:23:e2:62:15:
         48:a2:1e:46:6b:63:59:a5:3c:dd:5b:c7:ac:b7:39:88:33:a1:
         0f:55:3b:a8:1d:81:57:b9:d1:6c:2a:ad:c3:2f:10:f0:70:1a:
         a3:07:69:90:5c:9b:3d:1a:2f:b1:04:1e:25:3c:10:3a:3b:74:
         80:c9:75:8d:39:5a:a9:c7:27:c6:cc:04:6c:e4:cb:e8:46:3f:
         9e:7f:2d:78:f9:23:c2:b2:5e:90:42:59:48:72:06:e2:59:5b:
         7b:86:31:13:21:c8:1d:b8:99:b1:60:b1:d7:01:d1:11:1e:90:
         b0:22:09:d4:1a:ce:03:2a:d3:38:ac:58:79:7d:02:ac:42:0c:
         4a:c6:9e:62:2f:a9:97:8c:c5:d3:02:a5:fe:bf:be:c7:55:ac:
         f3:93:4a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net