Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa
File:                     34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier:          3Q06crNucjD+axyFYO8/ON18S13mXbjD2bd0nJ6Thvk=
Subject key identifier:   F0:2C:64:65:BE:13:0F:E4:97:94:02:75:1D:D7:CC:DD:F4:AE:9E:62
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       06FD93BA57534FDF7C936C5D048200B83272011C
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:01 +0000
ROA not before:           Sat 22 Oct 2022 04:29:01 +0000
ROA not after:            Sat 21 Oct 2023 04:34:01 +0000
asID:                     201341
IP address blocks:        45.141.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fd:93:ba:57:53:4f:df:7c:93:6c:5d:04:82:00:b8:32:72:01:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:01 2022 GMT
            Not After : Oct 21 04:34:01 2023 GMT
        Subject: CN=F02C6465BE130FE4979402751DD7CCDDF4AE9E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b0:e8:8d:6d:d0:7d:7b:8c:9c:16:23:98:c1:
                    64:f1:2e:38:b6:a9:3b:93:f9:77:22:9d:81:a6:5a:
                    4f:a1:74:d9:a6:84:c6:6e:18:c0:31:75:0f:4b:f1:
                    f4:16:0d:c6:4b:54:db:0d:79:31:60:84:74:bc:9a:
                    d8:b7:ed:34:72:a7:e5:a8:9f:2f:4b:d4:e0:ae:ac:
                    a9:93:5a:6a:b6:77:de:1f:5a:b9:02:4f:4a:62:bc:
                    29:2a:44:a5:8b:58:86:8c:a4:7c:52:9d:4d:1a:e2:
                    cb:38:81:54:c7:c3:b2:95:e6:5f:49:fb:fc:b7:66:
                    3f:43:88:a0:67:01:0d:c0:bd:95:d8:89:6c:c1:cb:
                    ca:1d:bf:ad:9e:93:42:d0:d6:ca:82:eb:44:25:dd:
                    b0:49:97:48:bd:d7:a7:8f:6d:86:a0:0b:88:90:95:
                    23:1b:4e:4a:ac:c0:eb:95:71:79:8c:f9:da:dc:81:
                    45:e1:4a:c8:c1:c2:67:57:a6:52:df:d5:4f:41:69:
                    43:f7:02:49:4a:16:1d:79:1b:c6:63:c0:71:08:9c:
                    fa:5f:3b:54:ab:67:37:69:99:46:a7:ce:4d:d7:52:
                    db:86:ad:f5:95:cc:de:fa:12:ee:85:c3:bc:0b:fa:
                    cf:95:b6:cd:a4:8b:a8:2a:9a:63:be:e1:17:d3:9a:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2C:64:65:BE:13:0F:E4:97:94:02:75:1D:D7:CC:DD:F4:AE:9E:62
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:11:23:66:7b:08:55:60:fa:94:82:b1:ff:c3:bb:30:28:7c:
         ef:27:3a:eb:20:95:ce:d8:f0:34:a0:44:52:9e:ba:8e:74:27:
         64:8b:7a:46:d7:99:ba:e0:fc:9e:96:b7:34:6f:89:fb:e9:89:
         7c:01:b1:d6:8f:99:41:96:c0:95:37:08:df:2e:2c:cb:f4:9b:
         ea:eb:ed:83:28:ee:8f:b8:d6:91:51:09:a4:10:d8:65:ee:55:
         c8:f3:4b:3f:05:8d:5a:8c:45:71:81:fa:c0:5f:98:e3:ed:13:
         f6:91:c3:6d:b7:b0:52:96:ac:f6:6d:b7:79:2f:b7:44:0b:c4:
         b1:1b:86:9e:fc:6b:9c:df:fb:41:d4:4a:41:1c:9d:b0:82:29:
         ba:82:12:7c:0f:ef:40:29:81:c2:cd:b5:f3:a3:7b:61:26:de:
         64:78:77:c5:a6:2b:aa:b5:46:5d:9d:34:ad:f7:37:d2:ad:a2:
         90:be:a5:bd:fe:0f:dc:5f:ad:cb:dc:c3:69:12:7c:24:5d:be:
         49:1c:48:39:8a:e4:60:37:81:0d:e0:ad:74:05:1e:03:31:88:
         6c:3d:3a:22:b9:a6:4c:b3:c9:6e:61:69:ea:d3:bb:f5:3d:74:
         3b:cc:25:9a:74:98:ea:0b:4c:93:34:d3:2c:3d:2e:74:1f:5e:
         2d:b8:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org