Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135312e302f32342d3234203d3e20333935373837.roa
File:                     34352e382e3135312e302f32342d3234203d3e20333935373837.roa (raw, json)
Hash identifier:          7m47xD/WhpRHYk4m4wqjBfsATkLJHiBubq8LbQbgAxU=
Subject key identifier:   23:A6:2F:2C:07:E3:57:E5:CD:B8:13:DB:31:1A:51:E0:85:DF:1C:BE
Certificate issuer:       /CN=00de5a79794df58205a4c7ab118447e34a5d743c
Certificate serial:       6B5C8DF4B83D599A7D54D724A0054F3B6EBA2766
Authority key identifier: 00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135312e302f32342d3234203d3e20333935373837.roa
Signing time:             Mon 30 Nov 2020 19:11:38 +0000
ROA not before:           Mon 30 Nov 2020 19:06:38 +0000
ROA not after:            Mon 29 Nov 2021 19:11:38 +0000
asID:                     395787
IP address blocks:        45.8.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5c:8d:f4:b8:3d:59:9a:7d:54:d7:24:a0:05:4f:3b:6e:ba:27:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00de5a79794df58205a4c7ab118447e34a5d743c
        Validity
            Not Before: Nov 30 19:06:38 2020 GMT
            Not After : Nov 29 19:11:38 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:64:7a:4e:e1:76:75:6d:23:ff:73:8d:ad:
                    0b:5e:5a:8c:4c:22:70:4e:9f:2d:4e:cb:0a:3e:dd:
                    e4:58:35:63:7f:dd:db:e6:f3:ec:b1:00:d0:69:32:
                    0e:a8:80:64:04:14:a5:40:3e:79:5e:48:a5:2c:ac:
                    be:50:5b:46:22:7a:92:2f:14:57:b6:5f:95:84:c0:
                    1d:bb:10:64:f4:ec:d8:2a:23:da:3f:ca:44:3b:f9:
                    54:81:7f:d7:d6:f0:15:98:79:be:13:04:45:8b:a0:
                    37:34:77:b8:02:5c:78:62:90:a7:08:aa:e6:83:ba:
                    21:79:ab:f2:8d:61:45:c8:4d:a3:e6:98:36:df:c5:
                    8e:97:32:5f:6a:78:ce:e5:a1:3b:ce:61:8d:c1:71:
                    10:dd:af:09:30:14:b9:67:c4:aa:0a:42:e9:8a:b8:
                    e5:8d:43:a9:af:ff:89:29:52:5f:73:22:6a:3c:ba:
                    86:3f:45:55:bb:91:5b:f3:a8:f9:f1:d3:be:4f:5c:
                    e7:ca:bc:63:ab:8b:45:55:10:d0:37:45:62:6a:18:
                    cd:82:4d:9f:41:5f:d9:00:81:75:ea:39:bf:5d:6e:
                    de:2e:b8:bc:9c:f0:49:ab:3f:a2:93:45:3f:37:44:
                    34:f2:5a:8b:0f:f3:2e:73:21:93:42:2d:c3:b9:eb:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A6:2F:2C:07:E3:57:E5:CD:B8:13:DB:31:1A:51:E0:85:DF:1C:BE
            X509v3 Authority Key Identifier:
                keyid:00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/00DE5A79794DF58205A4C7AB118447E34A5D743C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135312e302f32342d3234203d3e20333935373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:81:ae:f5:14:21:42:a1:69:fc:24:ba:1e:f8:74:0f:bd:5d:
         06:1b:aa:33:e4:22:72:66:39:00:68:6c:00:38:1d:b5:6f:f2:
         dd:fa:b2:23:63:12:85:34:c5:29:85:71:3f:74:c0:11:05:db:
         c1:8c:28:c7:fc:80:22:b3:4d:7e:e2:10:38:d2:f3:10:38:3d:
         d7:c9:a0:d6:c9:19:55:66:89:29:ef:ab:c1:fc:1a:61:d0:2b:
         52:a1:8e:d6:52:7c:cc:90:72:db:13:7d:13:97:cb:90:5c:3f:
         90:fc:d3:6d:79:00:f3:e5:08:68:38:8e:c1:63:5a:99:3b:58:
         94:d8:d9:63:e2:31:4e:ba:66:13:73:23:86:09:91:9c:11:a3:
         47:a5:18:50:9b:2d:43:68:31:37:fe:58:5d:62:f7:8b:03:fd:
         04:14:fe:3b:ec:4e:3c:81:82:91:f9:af:2d:5a:fe:51:d6:c7:
         e3:86:fd:f2:9f:43:e8:89:9f:91:1d:fb:7f:f5:6f:ee:1d:48:
         af:0f:e3:74:75:d7:2e:dc:84:19:09:57:a0:33:c0:08:b2:df:
         00:13:c3:cd:28:5d:3b:ca:dd:b7:fd:45:e7:94:4c:d0:1e:72:
         9e:55:8f:cb:d2:f9:fc:99:88:15:cb:bc:b8:61:1c:71:79:c2:
         38:ff:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org