Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/164/3139332e3136302e3131382e302f32342d3234203d3e2033333536.roa
File:                     3139332e3136302e3131382e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          w2eDrbk4muHdq6j+ZclS52Rj97h5Ayjes0s/Z9ZmGxo=
Subject key identifier:   87:6D:0A:89:BF:90:A2:75:29:9F:53:8C:98:8F:11:8A:11:62:A6:A8
Certificate issuer:       /CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Certificate serial:       0CF37C39C1EEFEBD58CC00ACEEDAF70498821814
Authority key identifier: 7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/164/3139332e3136302e3131382e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:40:19 +0000
ROA not before:           Tue 28 Jun 2022 04:35:19 +0000
ROA not after:            Tue 27 Jun 2023 04:40:19 +0000
asID:                     3356
IP address blocks:        193.160.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:7c:39:c1:ee:fe:bd:58:cc:00:ac:ee:da:f7:04:98:82:18:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
        Validity
            Not Before: Jun 28 04:35:19 2022 GMT
            Not After : Jun 27 04:40:19 2023 GMT
        Subject: CN=876D0A89BF90A275299F538C988F118A1162A6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:df:46:99:9d:68:a5:49:66:68:5d:97:97:
                    3a:6c:dc:5c:8e:a2:84:13:67:30:f8:55:bc:42:4c:
                    c2:2f:32:37:12:b8:63:5d:00:72:8c:79:15:9d:6f:
                    4c:26:b1:ac:dd:0c:99:83:14:d6:cc:1f:b3:f2:93:
                    cc:a2:d0:62:b5:f9:ff:a8:42:e0:fc:db:32:42:06:
                    ec:97:e2:18:7d:b2:d7:e2:39:e4:9d:f3:30:b5:b6:
                    2f:a3:df:ba:e6:2d:b6:90:30:73:41:70:3b:7b:5b:
                    f8:9b:45:f7:81:62:7d:13:a1:77:7b:02:e4:ea:c3:
                    b8:fc:50:8b:4d:e0:bc:d4:3c:43:26:f2:d6:f4:81:
                    da:52:09:3a:90:7e:cd:34:87:19:fe:3e:0f:ba:f5:
                    0a:ba:92:5f:04:85:74:21:dc:b3:57:99:b8:1b:a9:
                    37:8b:e2:40:c7:66:d7:a0:f5:e6:7d:dd:fa:3e:e9:
                    04:72:2b:0b:49:ac:dd:0c:2d:57:6a:e1:82:3f:00:
                    a3:fe:73:4e:ce:2e:ad:e1:30:c9:c8:1e:a9:0a:d2:
                    c5:f1:22:07:8c:bd:3e:6b:5e:b6:c0:a1:01:bf:96:
                    9b:49:bd:da:54:c3:9b:25:9c:0d:56:04:5d:c1:07:
                    59:5d:23:d7:92:78:49:b7:4c:af:f8:e5:bd:3f:01:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6D:0A:89:BF:90:A2:75:29:9F:53:8C:98:8F:11:8A:11:62:A6:A8
            X509v3 Authority Key Identifier:
                keyid:7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/7EBD1421D6EE46B714647FB7D198AE4601B63729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/3139332e3136302e3131382e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:f2:99:f0:fd:01:19:c3:f1:d5:4f:18:93:9c:71:08:ce:d9:
         47:4f:81:46:10:a5:6f:ca:c5:22:09:1a:06:b2:02:e4:7b:bb:
         45:a1:ac:f5:a8:39:c4:77:08:d4:be:81:0e:29:1e:7e:5a:36:
         b0:fa:94:4d:90:43:00:73:5d:db:38:e3:42:d2:ca:6e:35:cd:
         9c:5d:8d:93:9d:5d:39:09:02:75:af:e2:13:15:ec:ba:d4:05:
         75:b0:11:b0:1f:6c:0d:ad:d5:01:6b:c4:ab:4d:95:18:2c:38:
         4e:ba:a8:59:69:30:15:c6:dc:83:83:40:85:c6:b6:aa:87:0c:
         67:4b:9b:77:6a:e6:23:44:3a:17:55:23:3f:a6:38:74:54:cc:
         31:8f:58:e3:d3:e0:3d:f5:64:f7:87:60:36:06:e8:47:00:20:
         4e:9c:a2:4f:ed:fe:ab:23:aa:1e:67:70:91:b3:4d:b7:62:bf:
         53:f9:e0:e9:01:ad:ef:f6:df:b7:5a:4f:88:e5:cd:66:da:90:
         a6:05:08:bd:e4:b5:74:8a:c5:45:dd:3a:e9:5e:fb:b0:14:50:
         a5:3a:95:e2:c7:97:32:d2:2a:b3:36:d1:ca:cc:58:8d:0c:c7:
         00:e2:f6:8d:4e:89:12:28:aa:64:4b:cd:74:a5:5e:77:87:82:
         33:cd:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net