Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135362e302f32322d3234203d3e203631333137.roa
File:                     34352e3133322e3135362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          0QayKKUweStGlR2vbdDZQkKHkt9tKmqmRsXXSEwg3ns=
Subject key identifier:   79:FC:1F:6F:3F:A5:46:B0:74:3F:8B:8F:AB:E6:D0:C9:57:9B:98:EA
Certificate issuer:       /CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
Certificate serial:       1DD5824F6797166EBFB9DA0C35AD821A4BB7E801
Authority key identifier: 54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135362e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 19:13:10 +0000
ROA not before:           Mon 30 Nov 2020 19:08:10 +0000
ROA not after:            Mon 29 Nov 2021 19:13:10 +0000
asID:                     61317
IP address blocks:        45.132.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d5:82:4f:67:97:16:6e:bf:b9:da:0c:35:ad:82:1a:4b:b7:e8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
        Validity
            Not Before: Nov 30 19:08:10 2020 GMT
            Not After : Nov 29 19:13:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:d4:3e:29:82:cd:35:2a:4e:65:3d:0e:f5:
                    43:28:dd:e8:85:65:0a:18:13:13:dc:d9:3c:b7:e3:
                    44:a8:da:ff:18:ef:bc:5d:34:ae:de:66:2c:d0:fa:
                    a1:3c:18:ba:1d:70:f2:e0:4f:6e:54:54:5e:87:bb:
                    32:0f:b7:91:e6:8d:76:31:1f:f6:96:f0:6a:38:41:
                    03:5e:06:32:25:4c:a4:65:6a:21:66:11:41:7b:39:
                    3c:da:bd:13:86:8a:04:fb:81:4f:5b:74:a3:86:d9:
                    8b:38:5f:f6:6c:7e:04:10:bb:7a:c8:5d:7d:b9:47:
                    a4:a1:f8:01:5c:42:0f:8e:f8:50:42:70:b5:98:db:
                    da:6a:34:44:bd:07:31:ab:b7:d7:fe:49:70:c7:83:
                    89:a0:e5:8a:d1:8b:a2:1f:50:ac:91:b3:3e:02:61:
                    4a:30:ce:93:30:d0:d0:08:c3:20:d1:f8:7c:d4:29:
                    01:62:d7:21:c5:fc:51:95:55:4d:e1:b5:50:99:a7:
                    87:74:d3:fb:cf:97:c3:9f:62:b8:a3:5d:67:ab:4f:
                    ac:e5:aa:e7:a8:f6:da:46:ed:c3:f5:c0:66:72:7c:
                    47:47:36:c0:68:a4:66:fa:56:f5:70:d7:d3:4b:35:
                    b8:04:d3:50:42:ea:a3:69:05:65:e5:bd:5d:6e:8b:
                    18:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:1F:6F:3F:A5:46:B0:74:3F:8B:8F:AB:E6:D0:C9:57:9B:98:EA
            X509v3 Authority Key Identifier:
                keyid:54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/54F5873C142AB7B29DC4FD7FE7A23A384394C7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135362e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c2:08:df:16:14:1b:59:5a:e9:64:ac:21:96:f4:46:21:c9:
         b8:0e:cc:c2:da:43:54:2d:47:a8:45:1b:61:17:9b:27:1e:53:
         f4:82:1b:56:fb:37:24:cf:a1:63:30:53:3a:cc:0a:c3:39:65:
         35:82:f5:6a:31:02:cb:94:2d:9b:b9:b9:01:23:07:c2:51:45:
         aa:81:56:68:1f:aa:f6:0b:48:d7:ab:d4:a2:f5:54:c5:83:73:
         aa:22:e2:55:f5:29:2c:fd:09:20:a1:78:92:51:45:94:49:35:
         13:5d:bf:9c:d2:51:02:2b:2c:0a:0c:fd:05:2a:b5:4e:04:d3:
         b1:2f:0d:f8:f7:58:36:68:1c:43:e8:eb:a1:1c:96:f6:1e:e2:
         05:6f:d8:8b:7d:f9:d0:81:20:3f:81:ce:7a:d1:6f:1d:8e:f2:
         eb:ac:9f:01:06:a5:b3:64:1a:8c:ae:77:06:ce:3b:73:d8:d3:
         e0:f8:66:81:a5:b6:0a:f1:10:71:04:2c:30:5d:67:e5:77:8f:
         19:4c:d3:7b:53:49:57:29:89:bd:e1:0c:42:41:69:4a:98:2c:
         ae:45:80:ab:66:22:10:58:0f:8c:2d:98:96:22:ca:c8:e6:07:
         bd:d8:fc:ba:a9:3b:b2:d5:df:ec:5a:14:bc:74:e7:e2:93:37:
         ca:ca:d9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:38 2023 by rpki-client on console-ams.rpki-client.org