Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e39332e3132342e302f32322d3234203d3e203437353833.roa
File:                     34352e39332e3132342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          jXiPTW+1T/1vDMvZknzvB4uJWzKVF8uqqSX71m2ilxA=
Subject key identifier:   6F:F2:56:53:5A:12:5C:12:4C:F5:F6:3E:8C:7D:FA:8D:77:E4:1F:F7
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       14DF036DD252909BF3BF522C8A61CBE0B9BD7096
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e39332e3132342e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:59 +0000
ROA not before:           Sat 22 Oct 2022 04:28:59 +0000
ROA not after:            Sat 21 Oct 2023 04:33:59 +0000
asID:                     47583
IP address blocks:        45.93.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:df:03:6d:d2:52:90:9b:f3:bf:52:2c:8a:61:cb:e0:b9:bd:70:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:28:59 2022 GMT
            Not After : Oct 21 04:33:59 2023 GMT
        Subject: CN=6FF256535A125C124CF5F63E8C7DFA8D77E41FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:ef:e5:81:94:6f:e1:ec:87:20:a5:ce:d6:
                    98:d4:93:88:e6:80:cb:46:33:df:68:33:35:1d:da:
                    ba:a1:2e:54:38:b5:eb:ab:9c:9a:1a:1a:d8:bd:9e:
                    58:2c:81:79:9b:a2:4e:e2:ee:77:30:3f:24:92:6e:
                    42:fb:c1:a9:89:17:a4:b6:21:0f:b8:31:ce:c5:7f:
                    0e:6b:9a:a8:26:4c:2d:ea:c9:eb:25:48:67:e6:8e:
                    2c:33:ae:0b:1f:32:32:8e:0e:97:40:ff:aa:50:88:
                    31:12:7f:82:99:ec:4c:c7:07:3a:ab:cd:1d:d7:52:
                    e0:72:95:c2:8f:92:c9:a3:a7:c9:7f:d4:e7:18:2e:
                    a4:79:63:9a:6d:7b:c4:19:31:83:e1:e4:4e:01:85:
                    92:12:1a:51:24:27:d5:df:8d:9a:1a:fc:51:12:70:
                    b6:23:1b:c6:c6:34:9d:50:52:11:40:b1:f4:81:51:
                    98:f3:98:7a:c9:a2:78:39:83:bf:e1:52:ff:64:4f:
                    86:00:9f:07:07:35:4a:c4:83:a2:07:c2:74:dd:8f:
                    89:97:1e:0b:dd:02:38:f2:0e:c5:cd:78:2a:fa:d3:
                    df:af:e7:98:66:32:f5:c6:70:34:96:56:de:f7:0d:
                    dd:15:0a:be:62:a5:d5:09:8d:6d:6d:80:f1:7d:04:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F2:56:53:5A:12:5C:12:4C:F5:F6:3E:8C:7D:FA:8D:77:E4:1F:F7
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e39332e3132342e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:65:bb:8b:42:52:14:86:9f:f4:fc:12:64:c0:8e:f6:88:
         72:13:a5:ff:c9:73:af:66:be:87:fc:65:79:ff:13:67:e1:37:
         6f:9b:7b:f8:6f:47:8d:30:dd:ac:3f:31:20:c8:7b:64:9c:0d:
         97:e4:f2:64:4b:d4:59:26:42:f1:bc:15:9e:c6:5d:1c:b2:c8:
         12:08:cd:6f:aa:77:73:77:9e:70:25:36:ac:d7:d4:f1:a1:59:
         a9:59:b1:43:bc:87:f0:ca:a7:80:2c:bb:f8:25:63:9f:e6:2f:
         e3:cd:c3:5d:04:10:09:10:80:6d:12:c5:97:2b:c5:ea:45:42:
         a2:e1:73:89:e2:73:ff:39:eb:d4:58:f8:15:83:f5:1b:86:5c:
         1a:2b:b4:31:c8:ed:0e:f7:69:17:bf:8a:82:18:32:ad:5b:7d:
         fb:0a:8d:1c:52:e7:23:5c:6c:81:c1:87:0d:68:06:2f:f6:9f:
         bd:22:0b:32:1c:08:b6:5c:6b:61:69:18:19:b2:c4:84:0c:8d:
         d2:0d:30:bd:13:13:5a:8f:86:e0:76:f8:ae:dc:5e:40:40:69:
         b6:34:14:2a:52:d6:d6:85:7e:db:27:06:59:1e:30:19:af:b4:
         6e:dc:89:da:96:04:5a:3b:a0:ca:9f:25:bf:e9:12:13:60:ea:
         bf:35:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net