Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33352e302f32342d3234203d3e203132313839.roa
File:                     352e3138322e33352e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          /7qTrXEUK12dU1fZvhW752oJv2uOx5gnXqXzEYB16Rk=
Subject key identifier:   06:DB:7C:FB:2B:8C:E6:CD:5E:DB:DD:B2:E7:3F:4A:F5:4B:D7:5A:80
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       4621510F941F40AD7045F8E4446DC3BC23AD6CEE
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33352e302f32342d3234203d3e203132313839.roa
Signing time:             Sat 22 Oct 2022 04:33:57 +0000
ROA not before:           Sat 22 Oct 2022 04:28:57 +0000
ROA not after:            Sat 21 Oct 2023 04:33:57 +0000
asID:                     12189
IP address blocks:        5.182.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:21:51:0f:94:1f:40:ad:70:45:f8:e4:44:6d:c3:bc:23:ad:6c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:57 2022 GMT
            Not After : Oct 21 04:33:57 2023 GMT
        Subject: CN=06DB7CFB2B8CE6CD5EDBDDB2E73F4AF54BD75A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:48:4b:d8:d1:41:de:52:24:a1:f5:60:70:2e:
                    44:1e:bd:81:eb:ec:05:05:01:a9:fc:62:2c:da:9e:
                    45:f7:09:ed:c3:7e:1e:e7:10:82:41:0c:e0:be:cc:
                    a9:a2:1c:4f:77:1e:7d:35:ec:87:b1:7e:f2:48:5f:
                    f3:aa:b1:00:5b:71:7f:35:28:35:7b:92:6f:1d:a2:
                    ff:88:27:3c:cd:96:91:6c:37:42:c2:55:7c:e3:d8:
                    e6:88:00:2f:84:72:d0:92:29:a5:f0:a3:2e:2e:1f:
                    f7:0a:0a:9c:66:52:6c:6b:ec:cd:90:df:3b:16:98:
                    86:5e:b5:ee:79:92:70:c9:be:d6:9b:1d:eb:88:a7:
                    54:a5:f3:85:69:24:48:c3:2e:3a:f5:18:3f:84:04:
                    a4:12:2e:7e:a9:ef:5c:55:19:71:4a:d9:eb:de:0b:
                    b7:69:58:84:3d:22:d5:9f:9d:83:46:3e:11:0f:52:
                    56:7c:84:60:e6:c8:16:1b:80:cc:e3:cb:d3:8a:e6:
                    07:8d:75:52:31:53:8e:ed:06:df:5f:78:65:b6:b0:
                    f0:c5:18:0a:e4:67:d0:81:21:c3:be:74:37:e2:26:
                    ed:a5:c8:12:48:47:91:b2:27:0b:b5:78:ff:79:15:
                    91:a7:06:3e:fc:e1:e4:63:df:00:62:ea:14:19:86:
                    38:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DB:7C:FB:2B:8C:E6:CD:5E:DB:DD:B2:E7:3F:4A:F5:4B:D7:5A:80
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33352e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:25:66:c9:ac:5b:99:dc:c3:2b:24:93:f0:d5:5a:90:2b:
         e5:c9:94:08:4a:3c:17:89:ea:de:8b:bb:9d:23:de:33:c4:db:
         0f:87:5f:68:ef:1e:c5:0e:c7:a9:f5:8e:f9:fb:69:3d:b7:95:
         5f:51:21:14:e1:67:3a:07:48:df:4e:91:d6:08:35:6d:b1:87:
         75:e6:59:c3:64:8c:9a:4b:1e:92:4c:f5:b7:31:ba:1a:2a:4a:
         67:ec:86:bf:fc:b6:d6:aa:a6:d8:d5:b5:52:fc:f3:b7:d7:b8:
         88:35:54:ba:ea:a2:24:19:aa:29:6f:ee:2b:c1:e7:cf:69:7a:
         7b:23:6f:1a:8c:f9:8e:5a:26:fa:12:22:df:49:79:ef:52:d9:
         48:85:d3:45:35:22:0d:0a:9a:0e:40:99:29:4f:88:57:0f:11:
         fc:31:f4:d3:4b:e0:71:2c:f4:c9:95:03:10:cd:46:01:89:e4:
         1d:85:3c:1b:cf:27:84:2d:98:63:6b:ef:84:04:90:24:bb:9c:
         a3:ec:10:3b:ee:af:84:c4:c9:6e:67:6b:41:ee:10:64:a1:f1:
         b4:75:a6:fd:d9:1f:f6:5e:d9:1a:d4:df:90:45:41:f5:2a:26:
         ed:70:44:34:a8:01:98:f4:e2:ad:55:fd:62:ac:a9:cf:3a:9d:
         c6:8e:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net