Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35362e302f32332d3234203d3e203631333137.roa
File:                     34352e39342e35362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Q1sZyOkKxikNcnYPycnKwjAu6XOGvCqtBEanEu7qpgM=
Subject key identifier:   3B:E9:8A:FB:44:E5:57:C4:43:EC:9C:AD:D4:5E:31:02:6C:A0:1D:90
Certificate issuer:       /CN=37e4374c116e3e8adf1985a19577cbca011a9695
Certificate serial:       7A22DDA4ADDA2BE9A4CCF8559A5D986CDA04EC5A
Authority key identifier: 37:E4:37:4C:11:6E:3E:8A:DF:19:85:A1:95:77:CB:CA:01:1A:96:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-Q3TBFuPorfGYWhlXfLygEalpU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35362e302f32332d3234203d3e203631333137.roa
Signing time:             Thu 03 Dec 2020 16:43:26 +0000
ROA not before:           Thu 03 Dec 2020 16:38:26 +0000
ROA not after:            Thu 02 Dec 2021 16:43:26 +0000
asID:                     61317
IP address blocks:        45.94.56.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:22:dd:a4:ad:da:2b:e9:a4:cc:f8:55:9a:5d:98:6c:da:04:ec:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e4374c116e3e8adf1985a19577cbca011a9695
        Validity
            Not Before: Dec  3 16:38:26 2020 GMT
            Not After : Dec  2 16:43:26 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:c2:17:a8:18:73:9c:cf:2d:6b:88:81:9f:
                    78:14:45:63:29:f4:15:67:18:ac:4e:d1:2d:7a:d0:
                    6c:61:b9:bb:7d:dc:a9:01:ae:7d:c3:79:e0:cc:3a:
                    75:03:73:7c:4a:ca:4f:50:16:fd:87:55:f8:96:aa:
                    67:97:23:d7:72:99:87:ee:94:eb:73:7a:d0:66:6b:
                    e7:00:40:da:86:e4:ce:14:f0:e4:df:c9:10:30:3c:
                    0c:16:85:2a:dd:7d:72:ea:fb:22:01:ba:68:97:91:
                    93:53:29:df:72:ee:41:92:9e:94:8d:21:a3:0b:58:
                    19:03:01:bb:5a:59:2a:d2:6c:00:3d:6d:fb:d1:86:
                    30:46:dc:84:ef:05:7d:82:59:ae:dc:84:a3:1b:b7:
                    ad:25:53:7f:71:ac:a2:0a:b1:18:fb:e1:b1:cf:5d:
                    cb:65:65:e2:c2:1f:9c:41:53:f5:c9:f5:74:1b:2a:
                    a5:60:ce:53:0b:07:04:cc:cc:7e:3e:ce:f3:18:91:
                    33:e5:a0:f9:9d:79:15:30:3d:58:fd:83:1d:68:7f:
                    70:48:ef:af:b0:02:36:7b:63:63:b7:8d:43:ca:81:
                    24:ec:63:78:bd:b3:67:52:b5:01:3e:5f:11:c6:5a:
                    46:26:fb:f9:3a:16:16:ed:6a:64:fe:d7:da:03:f1:
                    f9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E9:8A:FB:44:E5:57:C4:43:EC:9C:AD:D4:5E:31:02:6C:A0:1D:90
            X509v3 Authority Key Identifier:
                keyid:37:E4:37:4C:11:6E:3E:8A:DF:19:85:A1:95:77:CB:CA:01:1A:96:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/166/37E4374C116E3E8ADF1985A19577CBCA011A9695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-Q3TBFuPorfGYWhlXfLygEalpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:e1:86:6d:47:b4:e3:19:18:16:c6:9b:64:25:90:7b:09:15:
         de:10:f4:e0:9b:52:8b:3d:53:3b:4e:7a:6e:85:04:1c:84:ac:
         17:1c:bd:48:57:76:38:8e:41:99:d5:4f:f0:09:84:dd:21:aa:
         a1:a2:f3:f5:a3:e5:a5:e0:cd:99:5b:50:34:6d:6f:a5:fe:b6:
         05:d8:44:ff:e7:e6:15:25:bf:d4:30:28:63:3a:3a:49:50:97:
         f4:43:83:b6:0c:63:ab:2c:21:b0:ba:2c:f2:97:ac:7c:ce:f7:
         8d:50:93:7a:21:23:68:f4:be:5c:d7:32:c0:4e:c5:a9:95:25:
         3b:03:be:08:65:e9:a9:81:68:cc:97:7e:35:76:7d:74:58:3c:
         8f:a6:0c:d4:2a:71:1e:c1:f4:65:f0:6a:b5:f4:48:9a:1e:71:
         6b:11:ad:ed:26:be:36:f4:03:f1:9a:26:c3:43:b0:99:92:78:
         6a:3d:32:80:9c:b4:11:40:cb:f0:64:cd:35:0f:5b:e2:2c:56:
         3b:5f:aa:57:a9:6a:41:e2:a1:8b:bf:ab:db:62:04:63:2b:55:
         3d:39:30:c9:fb:03:d8:25:e6:09:34:68:45:33:56:c1:be:d3:
         61:94:bd:1c:33:cd:21:7e:31:8f:2b:99:14:ab:8c:b2:bb:ce:
         e7:54:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-fra.rpki-client.org