Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38332e302f32342d3234203d3e203631333137.roa
File:                     34352e3134332e38332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          2rFp/M5fSxjVUa/uWwDmFI6QkYFe62vn+7GEucihnVA=
Subject key identifier:   B0:E9:FE:C3:07:94:00:59:FC:8E:C7:A1:FC:BC:45:D7:D3:1F:4F:19
Certificate issuer:       /CN=3bc02841ee05535614927daa2cd69e043e5a6286
Certificate serial:       0B39106FCE4A691AE81C933C4729E78F89457F11
Authority key identifier: 3B:C0:28:41:EE:05:53:56:14:92:7D:AA:2C:D6:9E:04:3E:5A:62:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8AoQe4FU1YUkn2qLNaeBD5aYoY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38332e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 05 Jan 2021 14:17:26 +0000
ROA not before:           Tue 05 Jan 2021 14:12:26 +0000
ROA not after:            Tue 04 Jan 2022 14:17:26 +0000
asID:                     61317
IP address blocks:        45.143.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:39:10:6f:ce:4a:69:1a:e8:1c:93:3c:47:29:e7:8f:89:45:7f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc02841ee05535614927daa2cd69e043e5a6286
        Validity
            Not Before: Jan  5 14:12:26 2021 GMT
            Not After : Jan  4 14:17:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:5e:a9:49:ea:e9:89:a7:31:21:21:8c:af:
                    c6:f5:da:2f:94:e6:d1:b9:aa:3f:f3:95:e1:ab:75:
                    1e:cc:86:d3:4e:19:d3:18:94:d8:99:6f:9b:a4:50:
                    e4:c9:bd:85:9f:37:a3:51:2e:e2:cb:4e:4c:70:04:
                    79:0b:ce:d1:0d:32:ef:bb:c2:29:ea:bb:4e:42:1a:
                    de:fd:fa:b4:3b:6e:f7:24:88:5e:12:24:49:84:aa:
                    81:57:12:53:b7:eb:a0:d2:d8:7b:5d:4c:d7:f9:9b:
                    7b:c6:a3:15:2c:84:e4:84:1c:44:89:df:3e:6f:7b:
                    92:90:db:1c:32:52:99:57:8e:99:9e:00:93:56:a7:
                    b7:3d:1d:52:c3:8e:54:88:69:b9:58:47:a0:dd:ca:
                    50:ca:4a:ac:e8:a7:64:01:fb:9e:1e:fc:4f:35:e6:
                    88:6f:fb:9e:ab:cd:86:2c:02:ed:36:6f:b6:47:70:
                    98:c6:f4:08:b4:db:af:0b:3d:73:4d:cb:94:4f:cf:
                    d7:7f:43:73:3f:54:b0:06:16:d9:86:f2:61:33:ea:
                    8c:a8:14:64:be:16:7d:59:98:1a:41:0b:f0:6c:e6:
                    ab:b3:92:b5:45:60:ec:ab:de:48:3a:db:45:82:cc:
                    23:60:b1:79:ee:3f:8d:83:3d:f8:16:94:8e:68:4c:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E9:FE:C3:07:94:00:59:FC:8E:C7:A1:FC:BC:45:D7:D3:1F:4F:19
            X509v3 Authority Key Identifier:
                keyid:3B:C0:28:41:EE:05:53:56:14:92:7D:AA:2C:D6:9E:04:3E:5A:62:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/95/3BC02841EE05535614927DAA2CD69E043E5A6286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8AoQe4FU1YUkn2qLNaeBD5aYoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:fd:5a:61:82:75:78:02:87:db:8b:8b:59:ef:b0:72:d0:8f:
         af:65:28:06:ee:3a:0b:9d:b2:f7:df:c6:94:18:2d:65:e7:04:
         1e:5f:1c:c0:5f:27:89:b5:e8:9f:4e:57:9b:ef:03:6d:01:08:
         b1:fd:5f:3b:08:59:71:94:89:c9:48:44:dc:63:7a:fd:45:c2:
         fb:b9:24:3b:5e:f2:5a:21:7e:c3:b5:d7:31:fd:71:49:26:04:
         52:81:0f:bb:e1:95:86:5c:76:ca:c1:02:e8:f8:ba:c8:67:a9:
         8c:c3:56:34:be:dc:89:f2:7d:e5:9b:db:51:08:df:09:0d:cd:
         e4:19:f9:e5:82:1c:5b:ec:f7:4d:8d:c1:14:f3:f3:45:c7:c8:
         32:33:bb:02:e7:5f:b9:85:8c:27:8c:78:22:36:ac:49:75:77:
         36:3b:ec:9f:93:a7:1f:57:dc:48:8d:98:8f:39:e9:cb:c7:4e:
         fd:dd:c9:53:55:88:92:fe:e4:08:53:35:3c:03:2c:0f:84:15:
         2d:41:4a:da:ae:17:35:55:80:bc:a4:ff:7b:96:ee:b5:9e:2e:
         fd:bc:b4:e7:8e:bf:ad:a3:f3:57:eb:e8:92:ee:d1:92:40:d5:
         a0:38:b8:2e:31:56:6d:da:a3:c4:13:58:5f:81:20:dc:5c:21:
         7a:60:71:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:53 2023 by rpki-client on console-fra.rpki-client.org