Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/164/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
File:                     3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          aa/wF3AWsrdynchAxHXCZOhNfKZW547DtRuEIeSCKeE=
Subject key identifier:   F5:99:AC:39:C8:D4:DE:80:0B:46:2E:16:53:B1:1B:56:68:B6:41:F9
Certificate issuer:       /CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Certificate serial:       6B0EE9EE7A6C849CDE2323AD84BF18411B39657F
Authority key identifier: 7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/164/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:39:29 +0000
ROA not before:           Wed 28 Dec 2022 09:34:29 +0000
ROA not after:            Wed 27 Dec 2023 09:39:29 +0000
asID:                     136787
IP address blocks:        195.216.219.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0e:e9:ee:7a:6c:84:9c:de:23:23:ad:84:bf:18:41:1b:39:65:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
        Validity
            Not Before: Dec 28 09:34:29 2022 GMT
            Not After : Dec 27 09:39:29 2023 GMT
        Subject: CN=F599AC39C8D4DE800B462E1653B11B5668B641F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:03:3f:db:cf:35:00:fc:a7:c8:df:86:9d:
                    e4:2c:a9:a6:50:a6:bb:75:92:c1:be:c6:f2:46:b5:
                    a6:68:3e:db:72:23:76:be:7c:0d:f1:b2:b1:be:21:
                    2b:75:39:38:a4:be:88:f7:dc:7d:e0:76:83:0f:78:
                    f0:79:a9:a1:c1:de:13:91:e3:23:08:24:21:e0:8b:
                    d8:98:3e:8e:fb:3a:db:24:bb:7b:aa:a4:e3:e9:88:
                    05:05:4b:24:fe:ca:36:98:47:8d:b7:6b:94:60:b0:
                    ca:0e:66:12:e4:41:cd:8c:cb:f5:0d:30:6e:62:66:
                    46:46:20:b6:fb:45:d8:8d:81:17:e5:de:67:58:13:
                    5b:53:e8:b9:13:8e:a5:80:00:8c:b3:a1:39:75:e7:
                    dc:fc:c5:9c:80:63:3d:62:b4:b4:16:1e:31:86:67:
                    98:6a:80:b1:74:20:bc:99:e8:95:1f:ce:e3:31:45:
                    ee:cc:fe:6f:23:3e:f2:b0:3f:1b:0e:ad:81:af:5a:
                    ed:dd:24:2a:9a:c1:67:d2:a1:a3:65:dc:9e:69:2d:
                    ea:cb:7b:e8:f7:68:56:47:e6:be:fb:5c:4b:16:06:
                    83:22:d2:ee:4e:d5:94:d5:ec:e0:e1:c2:bb:01:70:
                    fe:10:30:bc:c6:13:5b:fd:d1:b4:8d:7c:f2:f6:65:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:99:AC:39:C8:D4:DE:80:0B:46:2E:16:53:B1:1B:56:68:B6:41:F9
            X509v3 Authority Key Identifier:
                keyid:7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/7EBD1421D6EE46B714647FB7D198AE4601B63729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:93:ef:36:35:e4:8e:fe:1e:a8:3f:44:c3:6e:bb:2d:33:7f:
         80:62:18:2e:e9:73:8e:cd:d1:97:f0:56:2d:bf:a1:7c:24:47:
         59:72:aa:9e:62:c4:8b:cc:49:80:64:c2:ef:52:a6:4a:cf:c1:
         9c:68:cf:07:26:66:8b:10:3e:d5:eb:8b:6c:39:41:45:3a:fb:
         55:0e:ec:c5:8a:cc:24:12:15:90:c4:a2:5a:61:cb:3a:80:d5:
         00:3b:32:7b:64:de:66:3e:3f:70:44:c5:91:6e:97:15:dd:8b:
         79:56:9c:68:4c:2a:8f:cb:7a:06:f9:7c:03:2a:bb:8a:75:04:
         34:b6:55:e9:6a:4a:8e:4b:c2:43:2b:dd:17:db:06:b6:e4:68:
         33:1b:44:c5:01:ce:8f:05:b2:83:af:63:ed:06:50:04:bc:8f:
         e5:06:4f:d8:87:a6:2a:c1:82:63:95:7c:fd:87:d9:e1:3b:72:
         80:91:67:70:87:8d:25:00:65:ef:2f:28:ea:d7:d9:64:56:68:
         b9:6f:10:99:87:76:7c:40:0b:d9:7b:63:21:37:e1:8b:42:7f:
         b8:72:fc:84:32:a6:25:50:30:23:16:8e:86:2e:7f:53:dc:bf:
         2e:a1:80:75:bb:95:79:9b:cf:b4:93:fd:d8:a9:dd:f3:64:d3:
         dc:e7:1f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net