Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132322e302f32342d3234203d3e203239313139.roa
File:                     34352e3135312e3132322e302f32342d3234203d3e203239313139.roa (raw, json)
Hash identifier:          u6vd6KxYei0AHKPcolY2IfQCQueycR/PTY6YvTvYHmU=
Subject key identifier:   EE:C5:30:32:36:FB:61:8F:BA:F5:60:45:25:5A:76:C3:95:DC:78:2E
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       5DC8CB6CDEE48281227F775CC95554FF9ED7AF02
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132322e302f32342d3234203d3e203239313139.roa
Signing time:             Tue 28 Jun 2022 04:41:04 +0000
ROA not before:           Tue 28 Jun 2022 04:36:04 +0000
ROA not after:            Tue 27 Jun 2023 04:41:04 +0000
asID:                     29119
IP address blocks:        45.151.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c8:cb:6c:de:e4:82:81:22:7f:77:5c:c9:55:54:ff:9e:d7:af:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:04 2022 GMT
            Not After : Jun 27 04:41:04 2023 GMT
        Subject: CN=EEC5303236FB618FBAF56045255A76C395DC782E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:91:bf:30:dc:4c:b3:62:a9:a3:06:a0:df:
                    94:05:9b:90:0e:ce:fe:cd:74:08:ce:b7:c9:66:e7:
                    d4:12:b6:f7:f6:79:72:a9:27:88:fe:b3:18:54:a2:
                    9b:6d:33:2d:70:5f:4c:26:88:15:70:a2:68:c5:40:
                    f7:f9:39:3f:fc:99:ce:c7:43:ee:ed:8a:42:01:d2:
                    5d:b1:1a:7b:72:46:79:a5:42:df:ce:f6:9f:09:ac:
                    ab:be:5f:19:87:9c:ad:89:4c:6f:53:af:34:ba:a8:
                    cc:18:ac:3b:53:4f:fe:ba:ee:da:68:17:9b:00:6a:
                    c2:bf:53:eb:e3:b2:ff:43:dd:90:96:28:0e:36:80:
                    83:d9:72:cf:c2:2b:de:68:ec:76:a1:43:7c:c6:b4:
                    a8:fd:fa:67:3c:0d:60:9f:e0:28:1b:eb:d0:05:8c:
                    cd:ad:ec:d5:d6:48:c1:12:c2:c7:7f:35:4f:e9:76:
                    ca:16:85:f2:4f:f3:25:4a:a4:30:4a:6d:10:2e:73:
                    15:02:f3:17:b6:df:8a:2a:b3:d6:e2:5b:ec:a2:5e:
                    b7:1a:b0:26:58:00:aa:d6:df:d1:c9:20:d1:2e:1d:
                    13:cf:c2:23:ab:4e:fb:18:d8:2d:1f:be:d8:bf:85:
                    1e:a5:09:2f:f1:44:2f:73:6a:d6:73:6a:6c:5a:a4:
                    a4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C5:30:32:36:FB:61:8F:BA:F5:60:45:25:5A:76:C3:95:DC:78:2E
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132322e302f32342d3234203d3e203239313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f2:0f:08:73:86:20:42:77:06:20:40:c4:9d:3f:9f:b0:9b:
         57:f5:21:79:f9:91:d1:12:d1:a2:f5:76:03:25:0d:71:50:66:
         45:f8:f0:a1:d3:63:38:f2:1c:b9:51:87:0d:c8:66:b6:95:2f:
         d9:2f:95:c0:fc:a2:8b:d0:8a:1e:43:38:0a:d4:ae:2f:3e:42:
         ca:ee:27:85:4c:54:f0:9e:ea:05:2a:07:db:ea:60:e5:49:d6:
         63:bb:cb:c5:7d:eb:5e:2e:59:00:16:0f:f8:d3:61:f4:1d:78:
         5a:a9:cd:11:76:68:a6:7b:00:07:55:f6:47:58:28:0b:00:39:
         5f:75:f7:a1:82:e1:86:34:29:ac:de:fe:56:64:9b:13:8e:45:
         51:bc:99:07:1a:b8:33:bc:6b:a9:37:f6:9d:e7:bd:81:ac:7b:
         60:e5:2e:cb:9c:c9:66:81:a6:ef:1a:64:dc:9f:d2:00:eb:43:
         37:2d:86:42:d8:4f:bf:24:e2:b6:aa:9d:d4:f0:59:d6:be:d5:
         c5:19:c5:61:d1:79:a0:46:c3:c3:d0:2b:88:79:ee:eb:30:e1:
         47:c0:1c:aa:c3:f8:7e:02:2c:4d:0f:d2:28:89:26:ad:71:ea:
         53:37:65:52:8f:51:14:34:1a:d4:5b:45:ad:db:79:00:a4:bd:
         2e:b9:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net