Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35372e302f32342d3234203d3e203630373231.roa
File:                     34352e39342e35372e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          ZK03FjazqzvUeTBh8JknZJ+88XJmm2ZiY+iov43osgY=
Subject key identifier:   B1:F9:3D:B8:E1:70:C0:6A:70:24:39:C5:13:F0:3A:38:3B:34:5C:F8
Certificate issuer:       /CN=37e4374c116e3e8adf1985a19577cbca011a9695
Certificate serial:       20AE48D43E43561411C22F3ADC5222AD1ED88933
Authority key identifier: 37:E4:37:4C:11:6E:3E:8A:DF:19:85:A1:95:77:CB:CA:01:1A:96:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-Q3TBFuPorfGYWhlXfLygEalpU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35372e302f32342d3234203d3e203630373231.roa
Signing time:             Thu 10 Dec 2020 16:05:10 +0000
ROA not before:           Thu 10 Dec 2020 16:00:10 +0000
ROA not after:            Thu 09 Dec 2021 16:05:10 +0000
asID:                     60721
IP address blocks:        45.94.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ae:48:d4:3e:43:56:14:11:c2:2f:3a:dc:52:22:ad:1e:d8:89:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e4374c116e3e8adf1985a19577cbca011a9695
        Validity
            Not Before: Dec 10 16:00:10 2020 GMT
            Not After : Dec  9 16:05:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:62:a4:8c:23:8a:93:cd:bc:e0:54:cd:d0:
                    a1:61:8d:76:5a:f4:57:51:b2:b3:47:54:8a:d3:ea:
                    82:d9:87:e6:14:5b:76:81:d2:f5:1e:11:fc:52:f3:
                    4c:58:da:d6:ae:d3:c7:34:16:04:9d:28:86:47:d7:
                    a0:e7:71:e8:cc:e1:4a:a0:21:0b:e0:ab:e7:a0:16:
                    ed:3c:51:70:94:0a:e0:e1:47:62:fd:f0:f2:e0:ef:
                    c9:b5:c2:5f:46:29:45:9f:97:9f:30:22:3f:6a:34:
                    ac:f6:6f:72:5c:db:48:8d:17:fb:2f:f0:70:0b:3b:
                    25:88:0c:fc:8c:84:34:e2:0b:80:e6:0e:18:2f:3e:
                    ec:f3:99:fc:69:04:c8:b1:d1:18:2c:99:56:d7:ba:
                    f1:86:63:9c:c2:39:85:28:11:cf:77:83:3e:b5:87:
                    c8:d3:2a:4f:74:ad:5f:a1:29:3d:b1:1d:96:d3:e0:
                    8d:cd:36:bc:16:e1:4b:92:0b:b2:6d:e8:cc:35:e8:
                    24:4a:76:94:76:2c:4d:24:24:de:aa:e6:cd:35:28:
                    a8:a6:8b:cf:17:53:c6:26:6b:bb:2e:08:fa:95:56:
                    f5:51:d8:5e:f1:bf:b2:e5:e1:d4:ed:b8:95:7d:9e:
                    43:20:96:82:08:50:fe:3f:c2:f9:20:38:55:cf:59:
                    25:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:3D:B8:E1:70:C0:6A:70:24:39:C5:13:F0:3A:38:3B:34:5C:F8
            X509v3 Authority Key Identifier:
                keyid:37:E4:37:4C:11:6E:3E:8A:DF:19:85:A1:95:77:CB:CA:01:1A:96:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/166/37E4374C116E3E8ADF1985A19577CBCA011A9695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-Q3TBFuPorfGYWhlXfLygEalpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35372e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:9a:cd:58:3e:d2:f0:1d:58:f8:cd:d8:07:a8:b2:ec:ac:07:
         53:b1:21:42:9c:ee:9a:bd:0d:94:5b:2d:1f:aa:e3:67:39:c2:
         02:95:85:ae:e4:4d:c9:12:ac:7f:64:23:29:c6:e1:82:1c:35:
         b4:ad:b4:92:f0:27:b5:32:a4:bd:b0:13:8b:db:fb:f1:78:ab:
         6f:46:dd:da:e8:7a:4a:46:67:d3:46:2b:62:70:28:85:f0:d8:
         cc:6c:f7:92:8d:e8:7b:7d:ff:f1:55:9c:47:bb:bf:e3:74:93:
         36:2e:6f:85:fd:50:fa:20:c5:df:93:7d:d0:2b:e3:8f:fd:a4:
         41:2b:ce:ef:f6:64:0e:9b:7e:e2:ee:0a:09:55:61:cf:68:86:
         de:3d:0a:62:17:11:17:41:53:b5:15:1e:b3:48:b4:58:6a:ff:
         28:87:21:5b:f8:bc:da:a2:09:9e:08:5c:c0:bb:e2:ee:78:8a:
         49:db:bf:29:22:cf:01:6a:92:96:14:41:0d:ab:f0:2f:34:56:
         65:f7:70:13:7d:f6:80:40:ed:24:aa:f7:11:cb:0f:eb:70:b7:
         7e:e5:2b:de:78:c6:d4:0d:bc:0e:f6:86:99:6e:82:24:01:d4:
         b4:36:13:82:cc:e9:63:52:53:b4:75:17:43:ab:0a:cb:30:82:
         36:bd:5e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:27 2024 by rpki-client on console-fra.rpki-client.org