Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32342d3234203d3e203538303631.roa
File:                     352e3138322e33342e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier:          l653TTZHLVg93qOOKVUWLSwBl+xeiraeoirMfpHB6+Q=
Subject key identifier:   B5:DE:33:C0:78:F0:BD:35:8A:C8:6B:B1:45:9D:3F:70:DA:90:81:65
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       2AC2C92E8EA12E7DE59A364EF925C669CE25C922
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32342d3234203d3e203538303631.roa
Signing time:             Sat 22 Oct 2022 04:33:56 +0000
ROA not before:           Sat 22 Oct 2022 04:28:56 +0000
ROA not after:            Sat 21 Oct 2023 04:33:56 +0000
asID:                     58061
IP address blocks:        5.182.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c2:c9:2e:8e:a1:2e:7d:e5:9a:36:4e:f9:25:c6:69:ce:25:c9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:56 2022 GMT
            Not After : Oct 21 04:33:56 2023 GMT
        Subject: CN=B5DE33C078F0BD358AC86BB1459D3F70DA908165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ec:33:aa:11:cb:9f:14:38:75:4f:45:bf:c1:
                    62:a5:e6:5c:ba:e8:14:3e:6b:87:2c:51:6a:bf:67:
                    c1:a2:9e:bc:4b:51:0f:6d:68:52:bd:70:a0:93:16:
                    32:7e:ff:a0:8b:da:85:60:35:b4:06:da:ca:f3:4b:
                    9d:c8:71:0f:db:61:a9:3b:46:8f:d1:99:95:33:fe:
                    69:91:7c:bb:9c:e6:cc:31:32:e1:92:c6:da:91:91:
                    03:52:e6:de:78:89:fc:55:da:c0:33:45:58:ae:d8:
                    d0:57:65:d5:9c:ba:97:93:ef:bc:5c:74:ee:83:fd:
                    1b:67:0a:de:a0:79:0b:66:a3:8f:1a:e6:7c:a6:99:
                    b2:42:a6:0f:c5:4a:0a:1f:ae:84:f8:0d:7e:de:dd:
                    89:be:92:53:b4:ef:e0:6b:3f:a0:46:e1:84:32:52:
                    69:35:ad:7e:aa:11:e5:f2:dd:23:28:58:22:c0:7d:
                    b4:0b:5c:35:98:2f:af:91:51:e4:05:25:46:98:5c:
                    38:c6:93:b0:cc:70:06:b1:24:1b:de:25:f4:78:01:
                    df:04:b7:e4:c2:5a:a0:25:17:61:60:a5:d9:ad:a0:
                    d9:90:31:b9:71:db:a6:09:f5:fa:f2:df:8a:45:31:
                    33:fc:ab:a4:51:16:7a:cf:10:a2:48:42:74:02:b3:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:33:C0:78:F0:BD:35:8A:C8:6B:B1:45:9D:3F:70:DA:90:81:65
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32342d3234203d3e203538303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ac:2f:48:f0:ab:7b:ad:07:2a:3c:18:66:2e:a4:6e:c8:28:
         fc:18:26:75:81:eb:db:78:be:9f:e2:13:14:9c:43:b8:3f:4d:
         12:bf:61:c8:b2:e5:99:a0:94:a4:2f:27:22:3b:79:9f:88:68:
         9e:57:a6:7f:a2:15:01:8f:d6:91:49:5f:0e:5c:af:25:0a:60:
         24:67:bc:a0:9f:3f:3d:18:61:6b:80:bd:9a:2b:49:0a:7e:53:
         1b:1f:fb:40:45:26:52:45:5d:e2:7e:dd:31:4a:a9:97:05:9f:
         5f:85:07:f2:be:fb:fd:91:b7:71:30:20:ae:ab:e7:0b:4e:88:
         3e:f2:7a:eb:09:48:f3:bb:af:56:1f:75:84:ed:4e:4f:6d:04:
         8c:5c:0d:34:18:b4:71:e5:97:a9:97:54:17:28:53:cb:e3:5b:
         aa:3d:3a:ef:02:04:0c:49:96:47:0e:48:de:23:e9:96:0c:9a:
         8b:77:e1:08:23:97:2c:5c:71:92:13:e2:a2:cf:8a:f8:16:9a:
         f0:09:4e:3e:d3:aa:12:a4:14:7f:ff:73:68:bb:7b:db:a5:0e:
         fd:4c:d9:73:75:6f:99:15:03:bf:e7:e6:ed:55:da:c4:ee:e5:
         48:2d:b5:14:36:2a:db:44:86:85:af:9c:2c:50:ec:85:f2:b5:
         82:66:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net