Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/34/34352e3132392e33332e302f32342d3234203d3e20323038303436.roa
File:                     34352e3132392e33332e302f32342d3234203d3e20323038303436.roa (raw, json)
Hash identifier:          F4w7QqlpE3gvlNFHY5pQVcE7WdaLC6dWeTiDUJmp14c=
Subject key identifier:   5F:5B:B3:B2:33:35:F3:73:2D:CD:E0:FC:C9:5D:C0:7D:6A:95:1B:D0
Certificate issuer:       /CN=c87179c1501e173869629be525afd3206b2588d9
Certificate serial:       5A4F26E379EDC09A53BF51718256C328387DC955
Authority key identifier: C8:71:79:C1:50:1E:17:38:69:62:9B:E5:25:AF:D3:20:6B:25:88:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHF5wVAeFzhpYpvlJa_TIGsliNk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/34/34352e3132392e33332e302f32342d3234203d3e20323038303436.roa
Signing time:             Mon 11 Jan 2021 12:34:24 +0000
ROA not before:           Mon 11 Jan 2021 12:29:24 +0000
ROA not after:            Mon 10 Jan 2022 12:34:24 +0000
asID:                     208046
IP address blocks:        45.129.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4f:26:e3:79:ed:c0:9a:53:bf:51:71:82:56:c3:28:38:7d:c9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87179c1501e173869629be525afd3206b2588d9
        Validity
            Not Before: Jan 11 12:29:24 2021 GMT
            Not After : Jan 10 12:34:24 2022 GMT
        Subject: CN=3082010A0282010100D478B33016B6C7A6C459AE7D0A87BD3FF4D5129424FEF08EA636D806AE7FC272EBE4CCA712BDB3D1897295A782F629EDBF01087914F55E6F58DDDCDD416A845AA72491AC14237672A39B98EA634E5E90650D8E572953C5BB297D849958D826D06C2D3BCE3D7F378CD342312F7D259E5BABA7D6BFC352FA2959B48FB7B00D06216D871C8918176B33374D78DA1AE161D30C2E15EFFBF183A8952FCE50C53B53857A3F7AF3D86741B4D688AD11BA9FCA7E953951768103E81BF2CDB03A3A8215E0B43C2451889B51415327714D7CAE81C6DA85C643EED24F5369950D6CCC76527E9D93602AB82934D283A14D6630AC2B4B049D80654E326B50F8635423D59AE0B90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:78:b3:30:16:b6:c7:a6:c4:59:ae:7d:0a:87:
                    bd:3f:f4:d5:12:94:24:fe:f0:8e:a6:36:d8:06:ae:
                    7f:c2:72:eb:e4:cc:a7:12:bd:b3:d1:89:72:95:a7:
                    82:f6:29:ed:bf:01:08:79:14:f5:5e:6f:58:dd:dc:
                    dd:41:6a:84:5a:a7:24:91:ac:14:23:76:72:a3:9b:
                    98:ea:63:4e:5e:90:65:0d:8e:57:29:53:c5:bb:29:
                    7d:84:99:58:d8:26:d0:6c:2d:3b:ce:3d:7f:37:8c:
                    d3:42:31:2f:7d:25:9e:5b:ab:a7:d6:bf:c3:52:fa:
                    29:59:b4:8f:b7:b0:0d:06:21:6d:87:1c:89:18:17:
                    6b:33:37:4d:78:da:1a:e1:61:d3:0c:2e:15:ef:fb:
                    f1:83:a8:95:2f:ce:50:c5:3b:53:85:7a:3f:7a:f3:
                    d8:67:41:b4:d6:88:ad:11:ba:9f:ca:7e:95:39:51:
                    76:81:03:e8:1b:f2:cd:b0:3a:3a:82:15:e0:b4:3c:
                    24:51:88:9b:51:41:53:27:71:4d:7c:ae:81:c6:da:
                    85:c6:43:ee:d2:4f:53:69:95:0d:6c:cc:76:52:7e:
                    9d:93:60:2a:b8:29:34:d2:83:a1:4d:66:30:ac:2b:
                    4b:04:9d:80:65:4e:32:6b:50:f8:63:54:23:d5:9a:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5B:B3:B2:33:35:F3:73:2D:CD:E0:FC:C9:5D:C0:7D:6A:95:1B:D0
            X509v3 Authority Key Identifier:
                keyid:C8:71:79:C1:50:1E:17:38:69:62:9B:E5:25:AF:D3:20:6B:25:88:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/34/C87179C1501E173869629BE525AFD3206B2588D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHF5wVAeFzhpYpvlJa_TIGsliNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/34/34352e3132392e33332e302f32342d3234203d3e20323038303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:78:e1:e0:d1:d8:fa:82:54:51:bd:e2:8c:9a:b4:6d:35:c1:
         54:13:ba:0b:88:36:c4:43:fe:9f:21:29:99:f0:5c:8b:4c:b6:
         8b:c3:b7:c4:a0:4c:bb:9a:1e:75:93:ad:24:c8:b1:5a:7b:58:
         5c:19:d2:de:3e:8c:a9:1b:92:6d:de:63:ba:93:de:0a:a8:b9:
         48:a0:28:bd:d2:74:42:0d:78:bb:20:fe:c7:bd:d9:aa:5f:07:
         c3:32:b7:9e:19:ba:7f:a6:c9:ba:14:e9:d0:0f:5e:ea:33:1a:
         88:3c:8b:21:a8:15:d0:14:4a:18:02:64:91:5b:7d:77:5c:bf:
         0f:b5:66:f8:3c:88:e3:73:69:72:e0:05:ca:a2:47:e3:9c:94:
         04:58:bd:5a:25:08:b8:a7:73:7b:fa:8e:e4:c6:60:ce:bb:c8:
         62:6d:16:d9:4a:94:7b:c5:19:f1:4c:5d:85:d4:d2:a0:24:42:
         3b:71:d1:45:5a:6c:c3:0f:46:cc:7a:dd:db:79:2c:4f:90:89:
         78:a8:ce:45:79:4f:5f:98:76:21:9a:29:fc:d2:2c:9f:70:a8:
         60:29:5f:dd:ae:4e:ec:dd:e7:51:1f:0c:af:b5:ab:10:88:6b:
         e6:a4:6a:01:7c:cb:52:83:96:af:6b:b4:c7:c9:66:6a:ba:46:
         b8:5e:4c:e3
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUWk8m43ntwJpTv1FxglbDKDh9yVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzg3MTc5YzE1MDFlMTczODY5NjI5YmU1MjVhZmQzMjA2
YjI1ODhkOTAeFw0yMTAxMTExMjI5MjRaFw0yMjAxMTAxMjM0MjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDQ3OEIzMzAxNkI2QzdBNkM0
NTlBRTdEMEE4N0JEM0ZGNEQ1MTI5NDI0RkVGMDhFQTYzNkQ4MDZBRTdGQzI3MkVC
RTRDQ0E3MTJCREIzRDE4OTcyOTVBNzgyRjYyOUVEQkYwMTA4NzkxNEY1NUU2RjU4
REREQ0RENDE2QTg0NUFBNzI0OTFBQzE0MjM3NjcyQTM5Qjk4RUE2MzRFNUU5MDY1
MEQ4RTU3Mjk1M0M1QkIyOTdEODQ5OTU4RDgyNkQwNkMyRDNCQ0UzRDdGMzc4Q0Qz
NDIzMTJGN0QyNTlFNUJBQkE3RDZCRkMzNTJGQTI5NTlCNDhGQjdCMDBEMDYyMTZE
ODcxQzg5MTgxNzZCMzMzNzRENzhEQTFBRTE2MUQzMEMyRTE1RUZGQkYxODNBODk1
MkZDRTUwQzUzQjUzODU3QTNGN0FGM0Q4Njc0MUI0RDY4OEFEMTFCQTlGQ0E3RTk1
Mzk1MTc2ODEwM0U4MUJGMkNEQjAzQTNBODIxNUUwQjQzQzI0NTE4ODlCNTE0MTUz
Mjc3MTREN0NBRTgxQzZEQTg1QzY0M0VFRDI0RjUzNjk5NTBENkNDQzc2NTI3RTlE
OTM2MDJBQjgyOTM0RDI4M0ExNEQ2NjMwQUMyQjRCMDQ5RDgwNjU0RTMyNkI1MEY4
NjM1NDIzRDU5QUUwQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1HizMBa2x6bEWa59Coe9P/TVEpQk/vCOpjbYBq5/wnLr5MynEr2z
0YlylaeC9intvwEIeRT1Xm9Y3dzdQWqEWqckkawUI3Zyo5uY6mNOXpBlDY5XKVPF
uyl9hJlY2CbQbC07zj1/N4zTQjEvfSWeW6un1r/DUvopWbSPt7ANBiFthxyJGBdr
MzdNeNoa4WHTDC4V7/vxg6iVL85QxTtThXo/evPYZ0G01oitEbqfyn6VOVF2gQPo
G/LNsDo6ghXgtDwkUYibUUFTJ3FNfK6BxtqFxkPu0k9TaZUNbMx2Un6dk2AquCk0
0oOhTWYwrCtLBJ2AZU4ya1D4Y1Qj1ZrguQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FF9bs7IzNfNzLc3g/MldwH1qlRvQMB8GA1UdIwQYMBaAFMhxecFQHhc4aWKb5SWv
0yBrJYjZMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zNC9DODcx
NzlDMTUwMUUxNzM4Njk2MjlCRTUyNUFGRDMyMDZCMjU4OEQ5LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhGNXdWQWVGemhwWXB2bEphX1RJR3NsaU5rLmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zNC8zNDM1MmUzMTMyMzkyZTMz
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzMDM0MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtgSEwDQYJKoZIhvcNAQELBQADggEBABN44eDR2PqCVFG94oyatG01wVQTuguI
NsRD/p8hKZnwXItMtovDt8SgTLuaHnWTrSTIsVp7WFwZ0t4+jKkbkm3eY7qT3gqo
uUigKL3SdEINeLsg/se92apfB8Myt54Zun+myboU6dAPXuozGog8iyGoFdAUShgC
ZJFbfXdcvw+1Zvg8iONzaXLgBcqiR+OclARYvVolCLinc3v6juTGYM67yGJtFtlK
lHvFGfFMXYXU0qAkQjtx0UVabMMPRsx63dt5LE+QiXiozkV5T1+YdiGaKfzSLJ9w
qGApX92uTuzd51EfDK+1qxCIa+akagF8y1KDlq9rtMfJZmq6RrheTOM=
-----END CERTIFICATE-----
Generated at Wed May 14 01:58:05 2025 by rpki-client