Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130352e302f32342d3234203d3e2030.roa
File:                     34352e3133302e3130352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          b3NcwEhoJ2qC1TBNDd7jjAAvvnOr2hNHJkZg60WXG3E=
Subject key identifier:   BF:4F:1C:57:C0:DA:F4:CF:31:0D:6C:AF:E5:A6:2F:CC:57:42:2A:12
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       37995F34EECFCEBA1E8C56F3AD67F5927775D076
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130352e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:02:35 +0000
ROA not before:           Fri 03 Mar 2023 15:57:35 +0000
ROA not after:            Fri 01 Mar 2024 16:02:35 +0000
asID:                     0
IP address blocks:        45.130.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:99:5f:34:ee:cf:ce:ba:1e:8c:56:f3:ad:67:f5:92:77:75:d0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:57:35 2023 GMT
            Not After : Mar  1 16:02:35 2024 GMT
        Subject: CN=BF4F1C57C0DAF4CF310D6CAFE5A62FCC57422A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:25:0c:05:27:e3:e1:45:ce:aa:0e:ab:41:
                    85:30:8f:0e:a7:be:4c:c1:de:7f:66:93:d5:09:6f:
                    20:d1:97:cb:03:33:c8:85:03:7a:b9:22:7b:37:6f:
                    4d:d7:09:d3:42:f3:88:55:c3:b9:53:ba:27:9d:75:
                    18:7c:dc:41:db:9e:c6:44:39:bb:72:f6:f1:a1:52:
                    6b:66:5b:3a:a2:d5:7b:9c:4d:01:6a:fd:63:2f:e6:
                    b6:65:84:7e:a5:f0:ff:e8:12:1f:b9:c4:70:aa:38:
                    b2:a5:0e:9d:d7:0b:ad:42:29:cb:c1:ee:f8:28:29:
                    b2:bf:52:01:86:01:aa:a5:82:f3:0c:44:03:71:89:
                    cf:38:3f:ec:03:a0:ae:47:3e:a7:79:6c:37:4f:33:
                    ae:c5:41:69:eb:7c:66:16:79:8e:51:e3:21:cb:c8:
                    6d:d7:0a:6a:e0:1b:74:70:2c:29:09:e2:b4:4e:2d:
                    7d:17:d7:4d:5f:d5:4a:c8:9a:07:95:78:3f:f9:b9:
                    4d:0d:06:fc:42:44:e6:c6:92:1e:b7:57:a6:d7:91:
                    82:75:90:40:e5:c8:b6:d0:2e:4f:a0:3d:cf:47:2a:
                    b7:0e:ff:19:f6:66:3b:67:2b:25:41:95:4f:24:cc:
                    39:11:4b:17:3b:7b:cc:c2:a8:40:59:31:47:a5:05:
                    36:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4F:1C:57:C0:DA:F4:CF:31:0D:6C:AF:E5:A6:2F:CC:57:42:2A:12
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:13:72:0a:95:69:6c:fe:c7:9b:10:26:44:8c:c0:a7:1e:08:
         d7:06:cc:dd:ae:55:0c:9c:f4:39:10:38:ff:05:f1:de:e8:74:
         cb:3f:89:1c:90:8e:37:f9:58:6c:e2:cd:d4:1b:45:a8:77:23:
         1f:ca:03:60:23:ba:02:76:48:9a:a6:ec:4f:5f:e3:4e:dc:1c:
         dc:15:f6:9a:a6:c0:0e:38:cd:6e:96:9b:c8:61:54:b9:06:ab:
         88:c2:80:60:dc:1a:2d:6a:cb:74:9f:01:9d:28:ef:84:eb:ff:
         80:c1:35:db:69:b2:53:d2:82:6b:54:05:e0:bb:37:6f:ca:be:
         b6:d6:5a:b9:34:61:cd:8b:3c:a8:fc:ea:02:81:bb:28:db:05:
         9d:07:38:5b:9f:04:8d:ac:66:bf:4d:0f:5e:44:45:ca:b4:7b:
         57:80:fb:1f:2f:77:c5:39:4d:13:b6:4d:b2:25:ee:f8:de:f2:
         70:59:11:76:4f:77:30:13:3e:bb:78:fc:da:bf:60:19:f4:f7:
         26:53:f6:c8:9f:90:4c:c2:6f:50:f2:f9:35:94:7d:ad:c2:f2:
         02:ac:5f:01:b4:a3:d3:83:08:16:8d:d6:08:67:9c:54:46:79:
         85:d2:a1:4d:59:e7:d5:5d:01:ee:da:1b:26:e0:bb:f2:d0:c4:
         71:31:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org