Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
File:                     34352e38392e3230342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          wzZry/SoFwxVLlfQX3eirsAz3ockRaRJ4i7xztwnxRE=
Subject key identifier:   8D:D3:C3:6C:A1:95:DA:FE:F0:B2:C0:D8:11:34:A8:AD:FF:A5:39:08
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       23C3281D81D0714FD0AB51FE34EFD73D8B4CA71D
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:04 +0000
ROA not before:           Sat 22 Oct 2022 04:29:04 +0000
ROA not after:            Sat 21 Oct 2023 04:34:04 +0000
asID:                     47583
IP address blocks:        45.89.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c3:28:1d:81:d0:71:4f:d0:ab:51:fe:34:ef:d7:3d:8b:4c:a7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:04 2022 GMT
            Not After : Oct 21 04:34:04 2023 GMT
        Subject: CN=8DD3C36CA195DAFEF0B2C0D81134A8ADFFA53908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:ec:69:66:de:29:67:8d:62:eb:64:97:0b:
                    a8:16:32:38:bd:aa:24:02:ee:ff:fa:13:c1:51:41:
                    38:d7:4e:c7:4d:47:65:0e:d2:4e:35:cc:d6:27:8c:
                    ba:1e:12:3a:7c:2b:d2:1f:46:3a:fd:96:92:22:55:
                    91:54:eb:88:5d:96:56:8c:86:63:dc:fa:ef:ca:a7:
                    06:35:9a:89:a6:07:3a:cd:8c:a3:8e:f2:b7:96:87:
                    d2:d1:05:bf:c6:cc:34:99:de:ab:48:f6:38:81:c7:
                    4d:bf:97:24:fc:5c:fb:4f:e6:87:05:45:8d:40:71:
                    79:a9:4f:ea:6e:16:6c:44:ee:47:64:de:ec:02:b6:
                    bc:14:47:0b:f6:ac:c3:9f:81:6f:35:d0:c2:49:cd:
                    5e:70:d2:bc:20:10:78:06:a2:9a:6d:a0:8a:d0:4a:
                    40:6f:61:89:07:04:5f:cd:67:ed:9b:71:58:52:2b:
                    35:1e:fd:b8:30:c8:6d:f5:0a:58:77:a6:c9:02:e1:
                    58:32:52:6d:95:dc:50:2b:ef:3f:8b:3f:c6:c2:9e:
                    79:f9:f7:ab:49:57:f9:f8:3e:ac:b0:2e:3b:70:6e:
                    5d:11:b9:79:8e:d0:61:4c:29:77:66:2e:a7:b2:39:
                    d5:cf:25:6e:72:17:67:aa:ce:64:65:a6:dc:ed:5e:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D3:C3:6C:A1:95:DA:FE:F0:B2:C0:D8:11:34:A8:AD:FF:A5:39:08
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e38392e3230342e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:8e:15:f4:17:23:e0:a1:40:da:e0:46:f1:fa:39:8e:3c:3c:
         b7:00:b5:cb:74:a0:85:c3:17:6f:d0:ac:fe:1c:dc:ab:92:8d:
         ce:55:7c:f2:a1:25:c2:9e:7a:d8:6d:ae:f8:8c:3a:cb:c3:a8:
         92:7a:31:c7:77:3b:11:cc:02:0a:9d:f0:45:74:e4:61:af:ba:
         23:ed:b8:c0:f8:db:d5:42:fe:31:0e:71:f0:2c:8b:1c:c2:f8:
         ed:25:b8:a9:c1:45:5e:b3:f3:ed:d0:54:6f:75:35:bd:57:96:
         34:ec:91:e9:44:8c:8d:45:f9:e0:21:c9:ed:66:a3:bf:2e:ad:
         5e:b3:09:3a:fc:1b:f6:2b:78:15:e2:00:0d:e8:e0:c0:d6:36:
         08:43:9f:92:50:63:f2:0c:a1:93:65:c6:1e:67:80:0b:75:df:
         cc:f1:b8:c2:99:aa:ec:ea:32:8c:c7:c3:b0:32:04:fe:6b:04:
         cf:fe:d5:8b:9f:53:82:5b:b5:e3:fb:4c:b3:5a:14:43:dc:96:
         45:a7:a1:b0:25:ae:4e:0b:a3:e7:15:52:54:e7:ed:e4:64:e7:
         8f:a0:05:3b:4d:ea:98:1a:59:25:d2:c9:00:51:9f:95:b8:8a:
         77:2a:44:16:7c:f1:33:7b:f3:2b:22:80:22:0d:82:57:77:55:
         9f:9e:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org