Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e20323037313131.roa
File:                     3139332e34322e302e302f32342d3234203d3e20323037313131.roa (raw, json)
Hash identifier:          eBWJG1otm/hqZd5wnOSP53J/4vSe5ClaMq8JY5PjMVQ=
Subject key identifier:   84:F7:5A:25:C2:75:B0:C0:86:A1:AF:11:CA:FB:44:E8:0E:AB:38:B5
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       6F91FABC725B406C61F3DCD8377A9AC41A37A54C
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e20323037313131.roa
Signing time:             Thu 03 Dec 2020 15:57:07 +0000
ROA not before:           Thu 03 Dec 2020 15:52:07 +0000
ROA not after:            Thu 02 Dec 2021 15:57:07 +0000
asID:                     207111
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:91:fa:bc:72:5b:40:6c:61:f3:dc:d8:37:7a:9a:c4:1a:37:a5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Dec  3 15:52:07 2020 GMT
            Not After : Dec  2 15:57:07 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:5f:5e:a0:d5:d2:eb:f1:e3:4a:df:32:85:
                    fd:8c:56:b2:e5:ef:be:16:2f:f1:a2:d8:08:07:24:
                    76:07:a8:83:e4:bc:ed:44:99:ba:e9:69:54:b3:c7:
                    26:20:ab:43:35:eb:85:53:be:13:47:e3:08:27:98:
                    7c:96:9a:8e:f1:1f:9c:64:45:ac:ba:6c:dc:5c:4a:
                    16:3b:d1:d0:9f:a8:94:73:9d:2d:90:33:49:bd:16:
                    8d:8f:d0:77:97:ff:c7:5d:8b:3f:15:20:e6:05:10:
                    0b:f4:6b:d1:85:2e:82:1a:8b:07:e5:13:a0:45:ef:
                    0f:14:f1:4d:d1:3b:b5:ae:bb:c4:0c:89:1f:b9:1c:
                    c6:3e:79:e0:df:c3:2c:96:ee:80:8a:8d:cd:34:54:
                    78:b3:e1:ea:03:b8:a0:d8:34:46:eb:f1:51:92:76:
                    ab:4e:1c:f1:46:9e:04:f7:72:df:c7:b0:7e:9d:90:
                    6b:5c:b8:fe:f4:63:c4:32:a5:36:c1:f4:27:2d:71:
                    25:a0:cc:df:39:bd:9f:a2:fd:38:32:1c:e1:18:a5:
                    70:cb:fc:51:a2:d6:47:3e:c2:ae:c5:fb:eb:bc:a4:
                    6d:9f:b6:f9:f4:71:ba:fc:ba:db:d5:bf:22:b4:09:
                    bc:97:9e:03:8e:99:46:b0:0b:03:1f:65:09:4f:9e:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F7:5A:25:C2:75:B0:C0:86:A1:AF:11:CA:FB:44:E8:0E:AB:38:B5
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e20323037313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:53:bc:27:ce:71:76:6c:7d:5c:bb:62:23:40:82:5b:f1:
         ea:ca:0d:2a:e6:2e:bf:f1:32:9f:ba:2b:37:9f:b5:24:f9:65:
         9b:56:f3:0b:73:a7:b2:3b:1c:42:33:eb:a6:19:58:51:f6:ef:
         82:17:93:d7:52:50:fc:e5:59:b6:c0:c9:8e:4b:82:e9:08:bd:
         32:dd:0b:cf:db:75:ec:03:cb:6c:a4:3a:8e:ed:ce:33:c0:06:
         8f:48:e3:95:fa:9c:51:cb:4c:29:2e:31:7d:b4:44:7a:6a:f2:
         ca:7b:0e:b8:ba:13:d6:95:3e:35:14:29:57:99:f5:06:65:6c:
         54:5f:8a:1a:ad:1f:f1:6c:22:a3:d0:93:f3:d2:81:7f:1a:d6:
         60:e3:3b:e8:91:29:90:ec:72:00:50:14:b4:36:cc:ed:9d:87:
         95:c5:0e:11:0d:1c:a4:8f:03:45:a8:53:4e:94:69:b0:81:1c:
         36:e1:c0:52:8f:7b:87:15:d2:65:b5:2a:34:c8:d5:ed:17:2d:
         c1:85:4c:28:70:10:1d:2b:90:f6:ae:f9:bb:91:45:9d:a5:35:
         b7:9d:33:41:de:52:0b:dd:39:e5:78:7e:ad:df:af:ab:34:c5:
         82:92:ac:3e:56:e5:24:30:14:e8:1b:80:3a:bd:1e:22:2d:a7:
         dd:03:e4:85
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUb5H6vHJbQGxh89zYN3qaxBo3pUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdhNmU1MjA2YmUzNTAxZGRkMzhkNmYzMWMzMzY4MjAw
YzQzYTQ3MzAeFw0yMDEyMDMxNTUyMDdaFw0yMTEyMDIxNTU3MDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjE1NTVGNUVBMEQ1RDJFQkYx
RTM0QURGMzI4NUZEOEM1NkIyRTVFRkJFMTYyRkYxQTJEODA4MDcyNDc2MDdBODgz
RTRCQ0VENDQ5OUJBRTk2OTU0QjNDNzI2MjBBQjQzMzVFQjg1NTNCRTEzNDdFMzA4
Mjc5ODdDOTY5QThFRjExRjlDNjQ0NUFDQkE2Q0RDNUM0QTE2M0JEMUQwOUZBODk0
NzM5RDJEOTAzMzQ5QkQxNjhEOEZEMDc3OTdGRkM3NUQ4QjNGMTUyMEU2MDUxMDBC
RjQ2QkQxODUyRTgyMUE4QjA3RTUxM0EwNDVFRjBGMTRGMTRERDEzQkI1QUVCQkM0
MEM4OTFGQjkxQ0M2M0U3OUUwREZDMzJDOTZFRTgwOEE4RENEMzQ1NDc4QjNFMUVB
MDNCOEEwRDgzNDQ2RUJGMTUxOTI3NkFCNEUxQ0YxNDY5RTA0Rjc3MkRGQzdCMDdF
OUQ5MDZCNUNCOEZFRjQ2M0M0MzJBNTM2QzFGNDI3MkQ3MTI1QTBDQ0RGMzlCRDlG
QTJGRDM4MzIxQ0UxMThBNTcwQ0JGQzUxQTJENjQ3M0VDMkFFQzVGQkVCQkNBNDZE
OUZCNkY5RjQ3MUJBRkNCQURCRDVCRjIyQjQwOUJDOTc5RTAzOEU5OTQ2QjAwQjAz
MUY2NTA5NEY5RTcwRDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsVVfXqDV0uvx40rfMoX9jFay5e++Fi/xotgIByR2B6iD5LztRJm6
6WlUs8cmIKtDNeuFU74TR+MIJ5h8lpqO8R+cZEWsumzcXEoWO9HQn6iUc50tkDNJ
vRaNj9B3l//HXYs/FSDmBRAL9GvRhS6CGosH5ROgRe8PFPFN0Tu1rrvEDIkfuRzG
Pnng38Mslu6Aio3NNFR4s+HqA7ig2DRG6/FRknarThzxRp4E93Lfx7B+nZBrXLj+
9GPEMqU2wfQnLXEloMzfOb2fov04MhzhGKVwy/xRotZHPsKuxfvrvKRtn7b59HG6
/Lrb1b8itAm8l54DjplGsAsDH2UJT55w0wIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FIT3WiXCdbDAhqGvEcr7ROgOqzi1MB8GA1UdIwQYMBaAFGem5SBr41Ad3TjW8xwz
aCAMQ6RzMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNzgvNjdB
NkU1MjA2QkUzNTAxREREMzhENkYzMUMzMzY4MjAwQzQzQTQ3My5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL1o2YmxJR3ZqVUIzZE9OYnpIRE5vSUF4RHBITS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTc4LzMxMzkzMzJlMzQzMjJl
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBKgAwDQYJKoZIhvcNAQELBQADggEBAG95U7wnznF2bH1cu2IjQIJb8erKDSrm
Lr/xMp+6KzeftST5ZZtW8wtzp7I7HEIz66YZWFH274IXk9dSUPzlWbbAyY5LgukI
vTLdC8/bdewDy2ykOo7tzjPABo9I45X6nFHLTCkuMX20RHpq8sp7Dri6E9aVPjUU
KVeZ9QZlbFRfihqtH/FsIqPQk/PSgX8a1mDjO+iRKZDscgBQFLQ2zO2dh5XFDhEN
HKSPA0WoU06UabCBHDbhwFKPe4cV0mW1KjTI1e0XLcGFTChwEB0rkPau+buRRZ2l
NbedM0HeUgvdOeV4fq3fr6s0xYKSrD5W5SQwFOgbgDq9HiItp90D5IU=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net