Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/322e35382e37322e302f32332d3234203d3e2030.roa
File:                     322e35382e37322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          jCG8LAygC4F2yZ8NV0cfwJik2WSvcgVUM/RX2Nl8uiY=
Subject key identifier:   17:3E:7A:CC:AD:89:5A:E8:CD:8D:8E:FF:75:B1:EB:8B:1D:81:EE:4A
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       08DC79B061F068EAD3F95D1D6B9304ED57F7E0C9
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/322e35382e37322e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:58:46 +0000
ROA not before:           Fri 03 Mar 2023 15:53:46 +0000
ROA not after:            Fri 01 Mar 2024 15:58:46 +0000
asID:                     0
IP address blocks:        2.58.72.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:dc:79:b0:61:f0:68:ea:d3:f9:5d:1d:6b:93:04:ed:57:f7:e0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:53:46 2023 GMT
            Not After : Mar  1 15:58:46 2024 GMT
        Subject: CN=173E7ACCAD895AE8CD8D8EFF75B1EB8B1D81EE4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:d2:29:98:a6:73:fb:95:d4:2d:08:3a:10:
                    fd:f5:b3:84:98:93:0c:8b:9c:05:6c:0e:20:4e:eb:
                    4e:d7:d4:40:ab:75:b6:a7:0a:92:42:cd:c3:5b:21:
                    1f:2c:0b:b8:22:2d:56:f0:13:9a:1b:90:b5:f4:ab:
                    ae:c3:7a:f3:55:da:55:9a:03:2f:e7:9c:9e:49:ff:
                    81:39:5a:13:cd:0e:72:c5:37:94:a4:ae:ba:19:67:
                    06:0a:2b:c4:37:6b:06:c8:83:47:89:d5:5b:33:ec:
                    9d:53:24:ba:eb:4a:9d:55:02:8f:9c:c2:4d:6a:a4:
                    c9:93:8c:84:a8:a2:12:1b:7d:43:09:04:3b:84:08:
                    ca:06:1c:94:bf:cd:43:5c:93:94:21:6b:3d:df:17:
                    2e:83:6b:2f:d7:0c:0f:ad:66:2c:36:5c:2d:7d:86:
                    51:f6:55:f8:23:b7:fd:81:3a:19:b5:93:55:ee:a1:
                    d4:bd:eb:18:25:86:5a:a1:79:d9:90:e9:ab:09:48:
                    c6:c1:f2:2a:e3:23:23:b4:c5:c9:02:c1:aa:1a:80:
                    a7:21:32:f8:74:d8:27:bd:00:17:46:7b:3b:41:71:
                    ce:45:c3:44:a5:1c:71:fe:4f:db:04:05:2b:0e:23:
                    9b:97:90:09:e4:0c:b6:fe:12:45:56:3f:8f:0b:22:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3E:7A:CC:AD:89:5A:E8:CD:8D:8E:FF:75:B1:EB:8B:1D:81:EE:4A
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/322e35382e37322e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:f8:03:fa:16:6d:a0:b8:f3:32:4b:19:4f:04:a9:62:65:10:
         c4:3c:5a:1c:f8:a1:58:25:45:f9:a5:1d:13:e0:1b:73:9d:2b:
         4b:40:61:2f:d3:cf:1d:a4:b2:b3:98:20:91:dc:fe:06:d3:fb:
         59:ea:29:1b:03:98:41:6f:cd:33:39:c5:0c:23:bc:f6:5d:b1:
         e0:69:ca:9f:bc:b8:e4:65:4c:0d:cc:fe:c7:33:00:8a:fd:13:
         77:3a:ab:8e:2f:7b:8c:b9:eb:55:10:96:c9:c8:3c:0b:8d:9d:
         49:ee:2d:4f:35:78:6b:1d:14:b4:ac:1e:62:36:26:19:37:1f:
         f9:ff:43:c6:a1:fe:cc:a9:64:ae:e1:4b:bc:5a:e5:3f:4b:5b:
         37:39:f7:53:46:b7:44:30:93:54:f2:ff:5c:4a:fc:13:d3:5a:
         f9:45:b8:75:62:9f:71:47:dc:55:7f:16:98:a1:37:9a:4d:29:
         62:50:3a:19:ae:ca:1c:64:0e:57:65:3e:4d:c9:07:33:0e:59:
         ef:36:80:8c:45:3e:3d:be:45:b7:d1:de:ab:d4:79:ba:fe:9b:
         87:f3:92:1f:f0:15:49:d0:ce:cc:8e:f6:75:e6:6f:7d:b1:8c:
         9e:05:16:87:0d:96:93:0a:bb:2b:51:98:62:73:28:91:64:ba:
         77:08:63:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org