Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/117/322e35392e3135372e302f32342d3234203d3e203532313635.roa
File:                     322e35392e3135372e302f32342d3234203d3e203532313635.roa (raw, json)
Hash identifier:          0eM/43vb6J3d4u3iVsJ0uQ+aFB3uXftigqbc8tWvVLQ=
Subject key identifier:   F5:2A:EA:B3:FB:90:AE:E7:31:AE:11:15:9A:C9:86:88:FC:FB:BB:F7
Certificate issuer:       /CN=7878c3df04dbfd4674ba6706c36e9b455e708bde
Certificate serial:       4623AFBC61926B0CB28FC98A13BDE027502CBF58
Authority key identifier: 78:78:C3:DF:04:DB:FD:46:74:BA:67:06:C3:6E:9B:45:5E:70:8B:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHjD3wTb_UZ0umcGw26bRV5wi94.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/117/322e35392e3135372e302f32342d3234203d3e203532313635.roa
Signing time:             Tue 02 Feb 2021 17:48:41 +0000
ROA not before:           Tue 02 Feb 2021 17:43:41 +0000
ROA not after:            Tue 01 Feb 2022 17:48:41 +0000
asID:                     52165
IP address blocks:        2.59.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:23:af:bc:61:92:6b:0c:b2:8f:c9:8a:13:bd:e0:27:50:2c:bf:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7878c3df04dbfd4674ba6706c36e9b455e708bde
        Validity
            Not Before: Feb  2 17:43:41 2021 GMT
            Not After : Feb  1 17:48:41 2022 GMT
        Subject: CN=3082010A0282010100A8DE9165C21FC1AA1ACE9251C8E19C6202788819D4898E0AB19B8C6198B99D9FEDC3E60814E54644E86C9C594F745C1F334E7DE30E6AB25BE94088CC45228990B82F00B3F8ADE35FFECD99E5DB765A2841C897EF5274D4E16B1DC5EB3518DE05F9A311CD4478B9835F52D47EADEEBF7273448C4D0695055DFD2CFB0A5F1AB311227BF4BB4EC5B3BC878FB1C1506BEFE291ED6060D564433615DFFA97AECC7336872B92D3AB0B141D11A924B02BBC5D1473EFA2ED0B373F9503B6B073CB454B6E6300211E7FBC8175EF309FEC9EA83A3A768C73D0F5633CCD55055C49522BB3C06C50B92B16350B04B8D7E5F0425E0E4A884C61E9EDA6433F31965BA0D617D3890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:91:65:c2:1f:c1:aa:1a:ce:92:51:c8:e1:
                    9c:62:02:78:88:19:d4:89:8e:0a:b1:9b:8c:61:98:
                    b9:9d:9f:ed:c3:e6:08:14:e5:46:44:e8:6c:9c:59:
                    4f:74:5c:1f:33:4e:7d:e3:0e:6a:b2:5b:e9:40:88:
                    cc:45:22:89:90:b8:2f:00:b3:f8:ad:e3:5f:fe:cd:
                    99:e5:db:76:5a:28:41:c8:97:ef:52:74:d4:e1:6b:
                    1d:c5:eb:35:18:de:05:f9:a3:11:cd:44:78:b9:83:
                    5f:52:d4:7e:ad:ee:bf:72:73:44:8c:4d:06:95:05:
                    5d:fd:2c:fb:0a:5f:1a:b3:11:22:7b:f4:bb:4e:c5:
                    b3:bc:87:8f:b1:c1:50:6b:ef:e2:91:ed:60:60:d5:
                    64:43:36:15:df:fa:97:ae:cc:73:36:87:2b:92:d3:
                    ab:0b:14:1d:11:a9:24:b0:2b:bc:5d:14:73:ef:a2:
                    ed:0b:37:3f:95:03:b6:b0:73:cb:45:4b:6e:63:00:
                    21:1e:7f:bc:81:75:ef:30:9f:ec:9e:a8:3a:3a:76:
                    8c:73:d0:f5:63:3c:cd:55:05:5c:49:52:2b:b3:c0:
                    6c:50:b9:2b:16:35:0b:04:b8:d7:e5:f0:42:5e:0e:
                    4a:88:4c:61:e9:ed:a6:43:3f:31:96:5b:a0:d6:17:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2A:EA:B3:FB:90:AE:E7:31:AE:11:15:9A:C9:86:88:FC:FB:BB:F7
            X509v3 Authority Key Identifier:
                keyid:78:78:C3:DF:04:DB:FD:46:74:BA:67:06:C3:6E:9B:45:5E:70:8B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/117/7878C3DF04DBFD4674BA6706C36E9B455E708BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHjD3wTb_UZ0umcGw26bRV5wi94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/117/322e35392e3135372e302f32342d3234203d3e203532313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d1:70:45:c2:7a:f1:82:c3:6b:bd:37:d5:b0:c5:d8:37:33:
         e4:a0:ad:75:04:88:c3:22:95:bb:77:7b:ec:d7:58:6e:81:96:
         f8:b4:94:8c:1c:4a:ed:4d:e4:a9:b3:4b:e4:30:a0:10:f6:28:
         8a:c4:a4:01:56:f0:ef:f7:1a:78:93:48:32:6c:b8:bc:8a:53:
         86:b0:81:82:c5:aa:c2:e6:5d:d1:58:22:5e:e2:d3:b5:f4:95:
         e1:aa:2a:d0:b1:fd:63:82:86:9f:2b:5f:ef:de:00:bb:6d:2d:
         48:23:04:e9:a8:c9:d8:3b:ef:e8:64:77:ab:e8:d9:24:f0:40:
         26:82:c8:f3:26:05:4d:17:63:f2:15:68:50:24:fb:79:ec:f2:
         74:ee:d2:cf:d8:c0:0d:81:e2:78:ae:aa:b4:d6:7d:e2:ce:f7:
         d1:3c:a6:3a:1c:88:8e:70:b7:4c:35:8e:a1:29:6c:40:3b:48:
         ca:9f:81:57:6b:0a:74:37:73:e8:fb:df:55:a9:ae:aa:4f:69:
         7b:98:1d:62:1b:f6:2e:25:3f:5d:17:9e:ed:57:17:b7:e6:d3:
         b3:e9:31:2f:e5:84:54:0d:b2:05:b4:19:2c:06:0f:60:4a:1f:
         41:58:ac:40:0b:32:3b:3d:0a:00:94:fa:14:0e:22:e6:a2:d9:
         19:79:2b:dd
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIURiOvvGGSawyyj8mKE73gJ1Asv1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3OGMzZGYwNGRiZmQ0Njc0YmE2NzA2YzM2ZTliNDU1
ZTcwOGJkZTAeFw0yMTAyMDIxNzQzNDFaFw0yMjAyMDExNzQ4NDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQThERTkxNjVDMjFGQzFBQTFB
Q0U5MjUxQzhFMTlDNjIwMjc4ODgxOUQ0ODk4RTBBQjE5QjhDNjE5OEI5OUQ5RkVE
QzNFNjA4MTRFNTQ2NDRFODZDOUM1OTRGNzQ1QzFGMzM0RTdERTMwRTZBQjI1QkU5
NDA4OENDNDUyMjg5OTBCODJGMDBCM0Y4QURFMzVGRkVDRDk5RTVEQjc2NUEyODQx
Qzg5N0VGNTI3NEQ0RTE2QjFEQzVFQjM1MThERTA1RjlBMzExQ0Q0NDc4Qjk4MzVG
NTJENDdFQURFRUJGNzI3MzQ0OEM0RDA2OTUwNTVERkQyQ0ZCMEE1RjFBQjMxMTIy
N0JGNEJCNEVDNUIzQkM4NzhGQjFDMTUwNkJFRkUyOTFFRDYwNjBENTY0NDMzNjE1
REZGQTk3QUVDQzczMzY4NzJCOTJEM0FCMEIxNDFEMTFBOTI0QjAyQkJDNUQxNDcz
RUZBMkVEMEIzNzNGOTUwM0I2QjA3M0NCNDU0QjZFNjMwMDIxMUU3RkJDODE3NUVG
MzA5RkVDOUVBODNBM0E3NjhDNzNEMEY1NjMzQ0NENTUwNTVDNDk1MjJCQjNDMDZD
NTBCOTJCMTYzNTBCMDRCOEQ3RTVGMDQyNUUwRTRBODg0QzYxRTlFREE2NDMzRjMx
OTY1QkEwRDYxN0QzODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqN6RZcIfwaoazpJRyOGcYgJ4iBnUiY4KsZuMYZi5nZ/tw+YIFOVG
ROhsnFlPdFwfM0594w5qslvpQIjMRSKJkLgvALP4reNf/s2Z5dt2WihByJfvUnTU
4Wsdxes1GN4F+aMRzUR4uYNfUtR+re6/cnNEjE0GlQVd/Sz7Cl8asxEie/S7TsWz
vIePscFQa+/ike1gYNVkQzYV3/qXrsxzNocrktOrCxQdEakksCu8XRRz76LtCzc/
lQO2sHPLRUtuYwAhHn+8gXXvMJ/snqg6OnaMc9D1YzzNVQVcSVIrs8BsULkrFjUL
BLjX5fBCXg5KiExh6e2mQz8xllug1hfTiQIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FPUq6rP7kK7nMa4RFZrJhoj8+7v3MB8GA1UdIwQYMBaAFHh4w98E2/1GdLpnBsNu
m0VecIveMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMTcvNzg3
OEMzREYwNERCRkQ0Njc0QkE2NzA2QzM2RTlCNDU1RTcwOEJERS5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL2VIakQzd1RiX1VaMHVtY0d3MjZiUlY1d2k5NC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTE3LzMyMmUzNTM5MmUzMTM1
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzEzNjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
AjudMA0GCSqGSIb3DQEBCwUAA4IBAQBf0XBFwnrxgsNrvTfVsMXYNzPkoK11BIjD
IpW7d3vs11hugZb4tJSMHErtTeSps0vkMKAQ9iiKxKQBVvDv9xp4k0gybLi8ilOG
sIGCxarC5l3RWCJe4tO19JXhqirQsf1jgoafK1/v3gC7bS1IIwTpqMnYO+/oZHer
6Nkk8EAmgsjzJgVNF2PyFWhQJPt57PJ07tLP2MANgeJ4rqq01n3izvfRPKY6HIiO
cLdMNY6hKWxAO0jKn4FXawp0N3Po+99Vqa6qT2l7mB1iG/YuJT9dF57tVxe35tOz
6TEv5YRUDbIFtBksBg9gSh9BWKxACzI7PQoAlPoUDiLmotkZeSvd
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:27 2024 by rpki-client on console-fra.rpki-client.org