Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e39342e3230392e302f32342d3332203d3e203531313637.roa
File:                     34352e39342e3230392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          VYeHsHa9lolWGaiXX+Czup3EkKPapLkNEHcX3GNLSDo=
Subject key identifier:   0E:47:CA:4A:78:55:56:59:28:8A:20:C7:A1:A2:FA:F5:83:CF:C2:1F
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       45FCF51C17218E5305C65E15123AC36587E0A0C9
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e39342e3230392e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:41 +0000
ROA not before:           Sat 22 Oct 2022 04:28:41 +0000
ROA not after:            Sat 21 Oct 2023 04:33:41 +0000
asID:                     51167
IP address blocks:        45.94.209.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fc:f5:1c:17:21:8e:53:05:c6:5e:15:12:3a:c3:65:87:e0:a0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:41 2022 GMT
            Not After : Oct 21 04:33:41 2023 GMT
        Subject: CN=0E47CA4A78555659288A20C7A1A2FAF583CFC21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:96:02:1b:74:4c:8d:d4:5d:bd:24:f5:a4:
                    30:2d:3f:bf:1f:b1:57:89:9c:40:85:a5:be:67:7e:
                    3f:6a:00:73:7b:9d:d7:3e:c7:b9:1c:f7:b0:ed:23:
                    b0:b2:c4:bd:bd:7d:9d:2f:b8:2d:a8:1f:ab:7e:eb:
                    94:34:5e:81:e7:97:16:20:df:4b:89:39:fc:ac:2b:
                    d9:d2:9d:aa:09:76:e0:99:69:59:c8:90:d8:4f:3d:
                    6e:93:63:b1:7a:21:94:27:fd:46:02:39:94:9f:98:
                    a1:51:fc:1c:c5:22:fb:cb:ba:95:df:77:aa:c1:c8:
                    f3:0b:f9:8e:88:11:39:07:83:a0:6f:96:3d:5b:3c:
                    0c:9a:29:b1:30:c1:0a:8f:2a:d1:78:e3:9c:5a:56:
                    93:65:9f:fe:34:ed:b7:31:ef:ae:40:a0:4c:b8:2c:
                    a8:9e:3a:c2:26:b8:26:f4:d6:57:df:07:d7:75:b8:
                    48:28:b4:03:26:aa:e4:bb:c6:80:f0:78:b5:ee:e4:
                    93:e4:e2:15:cf:f0:4f:40:87:cf:28:80:d9:57:c4:
                    ac:79:20:aa:ba:87:d2:e3:76:e5:e7:e5:ae:2f:e0:
                    46:17:a9:6b:3b:12:32:b8:85:08:54:4a:15:6b:a8:
                    0a:57:5c:32:66:ba:b5:4d:c1:45:8d:90:3f:d3:ef:
                    2c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:47:CA:4A:78:55:56:59:28:8A:20:C7:A1:A2:FA:F5:83:CF:C2:1F
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e39342e3230392e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:46:b9:2c:ab:8c:2a:bf:45:8e:60:f2:53:85:98:4a:5b:3a:
         d1:0d:27:8a:7f:d1:ef:09:1b:a7:0c:12:76:f7:40:ff:f0:d5:
         ab:da:6d:21:0c:f6:95:f1:f4:52:e2:5d:6c:79:5c:c5:23:f9:
         9c:d4:84:e9:7a:eb:b4:4e:fb:7a:86:c9:61:09:f4:2a:38:74:
         21:29:40:3c:5b:d4:eb:50:a4:16:84:49:40:cb:41:d8:bc:6e:
         f0:a7:5d:10:b8:8c:ad:2e:f3:62:4f:e8:91:dd:5c:2b:fb:bd:
         de:5c:aa:74:9a:61:84:14:9e:61:5d:63:64:e4:a5:31:9c:50:
         df:0a:3c:7f:04:cb:b6:63:02:08:8b:c9:e6:d3:02:5c:89:43:
         9a:9b:07:b7:a0:d7:8b:5a:fa:b7:2c:ed:ca:5a:61:51:9e:ec:
         72:d0:c0:50:80:ba:69:a3:dd:5f:b6:66:4a:55:50:57:69:c9:
         a5:7c:99:7b:ce:c8:1f:f7:0b:23:52:fe:1c:2e:77:da:df:28:
         8b:27:94:e7:f9:34:ee:41:b4:9c:7d:1f:1a:6f:b4:35:67:6e:
         12:2c:0b:fe:97:0a:9b:a9:d3:a5:39:bc:c6:16:e7:e7:e7:f8:
         02:ee:94:db:b9:2a:3f:35:3f:5a:53:29:6d:c3:47:d2:60:f2:
         98:6f:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org