Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33332e302f32342d3234203d3e203434363835.roa
File:                     352e3138322e33332e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          pdTpe+VgGES8DY1wsZqn155tXXQUBY7xpBoNCv9XLjY=
Subject key identifier:   54:7E:27:C6:EA:D8:11:CA:04:FD:3F:4B:EC:D8:75:08:3B:6E:05:FB
Certificate issuer:       /CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
Certificate serial:       72C50854E05066F5A7922E7EEE38612B82132C00
Authority key identifier: 18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33332e302f32342d3234203d3e203434363835.roa
Signing time:             Tue 01 Dec 2020 23:26:37 +0000
ROA not before:           Tue 01 Dec 2020 23:21:37 +0000
ROA not after:            Tue 30 Nov 2021 23:26:37 +0000
asID:                     44685
IP address blocks:        5.182.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c5:08:54:e0:50:66:f5:a7:92:2e:7e:ee:38:61:2b:82:13:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
        Validity
            Not Before: Dec  1 23:21:37 2020 GMT
            Not After : Nov 30 23:26:37 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:0e:39:19:82:12:a4:e8:d8:99:5a:66:6a:
                    9a:81:44:29:dc:40:7a:72:ca:86:bf:ae:b2:e0:43:
                    9d:63:f1:6e:18:55:b4:c1:51:3b:29:87:55:62:b3:
                    c5:93:ff:c9:5a:22:dd:01:e1:32:79:f5:6e:82:77:
                    12:5c:cb:f3:5b:31:04:e4:e8:df:f2:2d:74:70:98:
                    22:8a:8d:37:eb:dc:ce:66:eb:5e:91:00:ea:e5:f2:
                    fd:aa:a3:08:90:90:39:77:8e:5f:84:c3:96:dd:29:
                    43:42:83:e7:db:53:2d:2d:ac:fe:d8:6d:01:29:72:
                    62:96:0f:eb:a0:33:f7:ea:22:41:5e:2a:f0:7c:95:
                    b2:06:77:bd:31:bf:96:1b:f5:0e:45:7a:7f:e8:53:
                    02:4c:cc:74:22:36:db:9e:7d:2c:bf:a2:21:43:72:
                    39:e8:d4:b7:0a:61:ca:0b:25:f0:71:c5:db:e5:56:
                    19:60:08:c2:b1:c7:15:a4:3e:cd:55:00:28:e4:58:
                    9a:42:ef:1c:47:33:d6:8c:26:cf:09:85:05:6a:bf:
                    74:9f:ea:e6:47:0e:f9:ac:8b:73:94:ab:00:23:7b:
                    9d:57:6d:21:44:9b:11:d1:65:d7:ef:32:00:2f:ef:
                    70:dd:25:35:3a:4d:5a:8b:af:45:4d:6e:37:f8:cc:
                    22:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7E:27:C6:EA:D8:11:CA:04:FD:3F:4B:EC:D8:75:08:3B:6E:05:FB
            X509v3 Authority Key Identifier:
                keyid:18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33332e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:75:a4:67:e7:8a:84:a8:f6:71:f9:f0:77:93:01:2d:4b:
         2a:31:30:f8:64:19:5d:3e:98:60:07:43:6e:d8:2a:78:24:e8:
         03:c1:17:a9:3d:63:ef:90:c7:3f:ef:ca:56:4c:02:82:69:86:
         92:fe:0f:1e:65:f1:ce:dd:9a:d9:11:f5:cb:1c:41:bc:43:a4:
         ab:8e:fe:ea:4f:e9:6d:87:cf:c1:fd:8d:89:91:61:f0:bd:9c:
         aa:6e:87:f4:c9:03:b6:35:5a:ad:de:42:72:e6:d5:c6:3b:0b:
         f7:64:6f:c2:e1:b7:d1:d1:3c:13:62:b9:02:b8:56:24:e1:5a:
         b0:6f:68:a9:a4:c0:1a:f3:49:80:bc:23:63:15:79:69:f7:09:
         3c:57:77:0c:a9:5e:ee:8c:30:93:8c:a5:00:cd:7c:61:09:ef:
         9e:04:19:93:45:03:af:fb:a3:e3:26:48:e1:f1:39:57:3a:9e:
         31:93:d4:fc:f2:9a:65:16:3b:b1:fe:64:23:ad:96:5a:8b:89:
         fe:07:ab:fc:1c:02:0e:fd:b5:58:a7:fa:ba:60:be:57:2d:b1:
         ae:b9:67:29:09:a2:40:cd:30:77:9f:65:42:31:be:c1:53:f4:
         0b:6e:6e:5d:ae:9e:a7:58:5c:83:39:b8:2b:a4:4e:18:f5:7c:
         b8:b3:03:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net