Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e203631333137.roa
File:                     34352e38352e3235302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          VIoH5YhbOe2p9amr0Dh4jZz4MyY1ACEj+sYeL0UlH1w=
Subject key identifier:   9F:83:50:D8:23:8B:02:6F:74:26:F6:BA:EA:8F:4C:FC:33:C9:6F:7C
Certificate issuer:       /CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
Certificate serial:       6F8B0D8A58158B3776F51E111D4B8A6F281033C6
Authority key identifier: EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:30:27 +0000
ROA not before:           Tue 01 Dec 2020 23:25:27 +0000
ROA not after:            Tue 30 Nov 2021 23:30:27 +0000
asID:                     61317
IP address blocks:        45.85.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8b:0d:8a:58:15:8b:37:76:f5:1e:11:1d:4b:8a:6f:28:10:33:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
        Validity
            Not Before: Dec  1 23:25:27 2020 GMT
            Not After : Nov 30 23:30:27 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:f2:36:05:99:42:58:20:c2:4b:62:8c:3d:
                    18:0f:e0:93:f5:a3:28:1c:c1:24:fc:50:be:a9:85:
                    a6:3d:c6:0a:3a:f4:65:68:0f:5c:48:82:2d:f0:9b:
                    4c:c4:8b:96:73:5e:3c:ff:f5:c6:86:7f:0e:28:61:
                    46:10:2c:18:8d:72:35:8a:b5:68:70:0b:7a:78:b5:
                    8c:7e:73:d1:a7:34:a2:d8:1e:d0:05:2d:7d:6d:ba:
                    8a:f4:0b:22:8f:39:3b:0c:ce:f5:a2:fb:69:ea:7b:
                    9e:dd:76:41:bd:45:3d:ef:fc:7e:89:13:c5:08:12:
                    f5:e9:28:f1:fd:44:e2:f8:00:37:25:21:77:a7:f4:
                    ed:2e:0f:f1:c5:ea:67:e9:96:19:9a:d7:8a:32:20:
                    27:99:11:78:73:a4:97:12:8d:0c:5e:3b:70:2a:f4:
                    85:67:16:65:2c:f6:2d:0e:da:2e:6a:91:e2:ae:bf:
                    9e:12:ec:23:6d:c7:d8:da:15:fa:a6:2f:79:9d:13:
                    f0:58:43:e6:82:2d:da:2b:45:f7:5c:d5:a5:7c:4f:
                    d6:37:a7:3b:37:e0:05:d3:3e:5f:3d:b4:df:fd:7d:
                    11:27:f9:27:a1:ba:de:c4:73:65:21:8d:e7:0d:97:
                    e3:ec:e7:a2:94:ea:e8:a2:22:52:68:46:b1:d8:56:
                    8e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:83:50:D8:23:8B:02:6F:74:26:F6:BA:EA:8F:4C:FC:33:C9:6F:7C
            X509v3 Authority Key Identifier:
                keyid:EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:0c:ea:f5:a1:b1:4b:15:58:3c:f6:fa:bc:1b:65:0e:ba:e8:
         a8:38:ae:07:25:3f:3e:ca:27:14:ab:1a:0d:dd:18:d9:eb:54:
         54:9d:77:73:52:47:95:2b:b2:30:93:04:c8:34:00:a4:c0:f8:
         15:5a:52:a3:2e:31:b0:d5:c1:6c:b1:4c:a9:b0:9f:0f:3c:dc:
         d4:04:b2:fe:3e:54:dc:ab:d9:6c:dc:b7:ef:70:40:04:46:b5:
         65:5c:77:f6:30:78:37:0d:e1:35:d0:dc:72:07:34:34:26:a4:
         41:ce:0c:15:83:90:5e:16:b4:1b:f9:df:67:81:df:1f:c5:0b:
         c2:90:29:69:c3:a6:f9:a5:77:fe:d9:bd:fe:07:e7:79:58:51:
         0b:51:87:8b:bf:2b:9b:ff:94:b5:b2:44:3a:f5:b5:93:8e:b6:
         fc:df:b3:bc:df:de:ac:55:d8:c8:f2:86:89:5e:ed:87:65:27:
         df:03:2a:40:f2:0b:cd:45:bb:21:6a:7a:02:46:80:6a:1a:bd:
         4a:47:a5:ff:e8:af:dc:70:29:b1:d6:dd:8a:a0:0c:15:b8:cb:
         90:7b:77:30:a9:d5:11:d5:bc:67:57:a3:71:e2:ff:cd:1e:f2:
         f8:f6:e5:af:79:6a:74:6a:d7:0e:cf:fb:36:30:a4:e8:0a:f1:
         a6:97:8c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-fra.rpki-client.org