Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e203439353434.roa
File:                     3139332e34322e302e302f32342d3234203d3e203439353434.roa (raw, json)
Hash identifier:          J8dWkgcwWdQ8fXKnxOWzT6UeQc5z49Sf1gtZY0ElbEE=
Subject key identifier:   82:B7:00:58:44:46:1E:5A:37:34:59:93:78:E4:BE:7E:8D:4D:29:8A
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       089D43113AF532504DB45661B1D3258479A19618
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e203439353434.roa
Signing time:             Thu 03 Dec 2020 15:57:08 +0000
ROA not before:           Thu 03 Dec 2020 15:52:08 +0000
ROA not after:            Thu 02 Dec 2021 15:57:08 +0000
asID:                     49544
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9d:43:11:3a:f5:32:50:4d:b4:56:61:b1:d3:25:84:79:a1:96:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Dec  3 15:52:08 2020 GMT
            Not After : Dec  2 15:57:08 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:19:16:83:ac:c0:8d:98:66:d3:ae:a2:54:
                    18:a0:14:6a:20:57:a8:15:42:7e:83:f4:e1:65:62:
                    5a:94:11:c5:31:17:a5:8b:3a:37:dd:1a:41:48:88:
                    04:12:d6:30:44:10:d2:48:b2:b0:2d:b2:d2:1b:92:
                    3b:aa:f7:f1:52:f3:33:08:a9:a9:10:6b:4b:6f:dd:
                    43:fd:a0:97:e9:10:ce:06:6e:e8:60:06:47:f5:f5:
                    99:91:1f:06:76:3c:be:2e:b9:f4:80:bb:ec:1d:6b:
                    2e:5b:b1:3e:9a:d6:33:0b:34:ca:e6:eb:51:61:c6:
                    d4:e1:bb:a2:9b:39:dd:b6:27:52:e0:b7:a7:07:c3:
                    44:c9:83:d6:95:56:b3:a2:1b:34:38:ec:cb:15:40:
                    18:40:a0:1e:2f:bd:eb:88:7f:44:67:c9:7e:b8:fa:
                    0e:c5:9f:5c:43:9b:7b:a0:81:2c:4e:c3:b1:12:60:
                    24:9a:31:60:c1:ad:bd:58:37:5e:f9:0c:77:63:c3:
                    c1:f4:d9:b4:84:91:00:ad:8f:b6:fa:2f:e2:a5:e7:
                    7e:2e:7c:86:e1:13:6d:ce:ac:3e:c0:d5:45:8e:43:
                    7a:fc:6e:8a:35:33:b8:82:68:95:ac:19:a9:d7:85:
                    ed:95:85:7c:40:bf:90:5c:e9:6d:34:41:5f:b2:be:
                    13:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B7:00:58:44:46:1E:5A:37:34:59:93:78:E4:BE:7E:8D:4D:29:8A
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e203439353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:d4:bc:0b:18:f8:a0:9d:5c:7d:0e:a4:05:9c:d2:19:fc:
         4d:14:65:f6:29:bf:39:57:f1:d0:e3:59:c4:a0:97:06:9f:2c:
         47:2e:57:9a:18:6b:3f:80:1a:65:19:67:53:a6:f0:14:1e:ab:
         b1:56:30:22:88:44:58:f3:28:17:35:fd:cf:ad:8a:18:c2:0f:
         9a:d8:38:91:49:f8:8d:e2:58:95:fb:cf:42:76:81:e3:d7:b2:
         ce:51:fe:80:bf:fa:22:bb:36:03:a3:c4:33:f9:ed:89:25:ab:
         23:05:4c:69:a9:28:c6:8e:4d:b1:97:9f:f9:22:80:02:0c:e8:
         e2:a8:e1:b1:21:aa:55:e5:ea:dc:cd:7b:68:7b:e6:e1:ce:87:
         49:86:dc:1b:e3:68:97:d2:af:a0:24:0c:56:28:f8:4a:ba:1c:
         7b:29:4b:25:c1:06:f0:e3:33:aa:8c:db:5e:8c:5e:01:64:c6:
         2f:61:e7:96:a1:77:b2:0f:2d:2c:61:c9:77:8a:e8:0f:36:df:
         bf:c9:89:80:d2:7e:8e:32:cd:55:51:0e:2e:a4:df:cc:f5:c9:
         c8:1e:8f:26:a9:71:0a:34:6f:ec:37:d1:cf:c7:2a:6a:ac:4a:
         40:9c:ca:a3:7c:3b:7c:12:96:8e:a7:6e:3e:a2:17:2e:4d:5d:
         26:0d:46:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net