Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3234392e302f32342d3234203d3e203631333137.roa
File:                     34352e38352e3234392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          TEgxIs4K8Mh+ielupX3kNy1It7q8KG+8rC6INilJoVc=
Subject key identifier:   CC:B5:B4:11:18:CD:F6:D2:1B:56:C8:6E:11:24:BD:49:34:DE:C0:01
Certificate issuer:       /CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
Certificate serial:       414E5DE96C7C911C5BFD118E54BEE55AD6BC4557
Authority key identifier: EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3234392e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:30:26 +0000
ROA not before:           Tue 01 Dec 2020 23:25:26 +0000
ROA not after:            Tue 30 Nov 2021 23:30:26 +0000
asID:                     61317
IP address blocks:        45.85.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4e:5d:e9:6c:7c:91:1c:5b:fd:11:8e:54:be:e5:5a:d6:bc:45:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
        Validity
            Not Before: Dec  1 23:25:26 2020 GMT
            Not After : Nov 30 23:30:26 2021 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:71:c4:3c:e7:f3:48:59:9c:c4:d5:b3:0e:
                    26:94:20:50:66:15:4d:1b:44:b6:94:c3:67:8e:85:
                    e7:45:a3:6f:6d:52:36:4b:32:7a:b9:db:60:f6:ee:
                    40:35:16:1f:df:06:96:c5:2d:b8:c8:d9:c1:d1:cf:
                    9d:46:06:94:f9:d2:5d:15:c1:8f:a8:f1:f7:02:e0:
                    00:6b:79:7b:96:44:59:a3:2b:cf:76:37:58:cb:37:
                    d4:ee:53:58:03:19:2f:63:8e:a1:58:40:f6:6e:d8:
                    17:63:d5:75:2c:45:24:f2:e2:c6:61:1f:45:3d:d0:
                    77:bf:e8:f7:eb:7d:e3:26:7b:11:c5:63:20:be:b6:
                    a7:ce:ef:b3:6e:0d:b1:de:4f:24:1b:9e:5d:f4:f6:
                    d9:7d:70:0b:16:18:4b:d1:3d:3e:a4:29:38:63:18:
                    9a:cb:fe:2a:77:10:96:10:59:e9:07:d1:67:2e:28:
                    38:32:6d:ec:be:d5:c7:28:90:a6:d6:a6:c0:e5:d9:
                    ce:4e:82:54:92:00:54:cc:3d:72:97:54:99:dc:93:
                    8b:c4:44:b5:b5:6d:5e:ec:66:7b:0c:c3:c8:d4:2c:
                    6a:d6:8b:1e:6a:36:99:28:35:26:23:35:6b:b1:06:
                    95:03:86:e5:c6:04:da:32:2f:89:f9:d8:cf:0a:e0:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B5:B4:11:18:CD:F6:D2:1B:56:C8:6E:11:24:BD:49:34:DE:C0:01
            X509v3 Authority Key Identifier:
                keyid:EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3234392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:83:8c:1b:4a:58:7e:e3:21:f5:8f:a0:86:61:6d:b1:bd:79:
         99:bc:09:1d:7f:93:79:54:98:69:c8:86:25:93:02:1f:e1:10:
         0d:e8:8a:a4:e9:3c:1e:b3:93:04:1c:e2:fa:e9:77:86:9a:bb:
         a7:5e:c9:2b:56:63:34:c6:2d:f4:ef:a2:11:77:ff:98:9f:2f:
         3d:1e:96:e0:48:e3:56:44:4d:72:ee:ea:35:6c:29:7f:a7:43:
         55:03:2e:df:8e:a7:2a:a7:89:c2:10:aa:e9:5f:5b:aa:e2:8b:
         e8:ba:fa:c0:29:d6:79:2f:9b:41:6e:13:48:05:29:91:f6:16:
         87:e5:d2:8c:95:e6:c9:58:50:de:3c:cc:18:ca:74:60:e7:62:
         8e:d1:1b:bf:cd:b2:97:20:22:51:ce:83:d3:c5:58:19:16:49:
         64:e4:be:92:7d:ce:4c:1c:a1:9f:8c:50:e9:b0:e6:ad:b0:bb:
         3b:d2:59:84:cf:a5:60:84:bb:ad:60:6a:30:89:fa:82:05:3c:
         0f:5b:24:bf:18:5b:3a:ef:1d:2e:cf:88:04:01:25:c9:33:4b:
         ac:2f:af:7d:65:70:2c:16:15:3a:30:64:7e:f2:45:19:2a:4b:
         c7:e0:c0:64:3c:ba:3f:92:98:24:4c:2a:a4:7a:a9:32:71:7d:
         59:d5:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org