Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e312e302f32342d3234203d3e203434373335.roa
File:                     3139332e34322e312e302f32342d3234203d3e203434373335.roa (raw, json)
Hash identifier:          y/OmC4YfgjgovoKMjxZAgxep459W54+N+kpt61aMmXg=
Subject key identifier:   43:11:BC:95:19:F0:14:8C:58:7D:10:8A:59:0B:CA:57:D2:AF:7B:05
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       0D77AE17CC7B1E952B3ECF410F5F1E29DA312404
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e312e302f32342d3234203d3e203434373335.roa
Signing time:             Thu 03 Dec 2020 15:57:09 +0000
ROA not before:           Thu 03 Dec 2020 15:52:09 +0000
ROA not after:            Thu 02 Dec 2021 15:57:09 +0000
asID:                     44735
IP address blocks:        193.42.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:77:ae:17:cc:7b:1e:95:2b:3e:cf:41:0f:5f:1e:29:da:31:24:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Dec  3 15:52:09 2020 GMT
            Not After : Dec  2 15:57:09 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:d0:d7:63:6a:4d:25:be:bb:0c:30:37:83:
                    c0:1c:8e:26:5f:70:7e:45:57:15:5c:6e:1b:b0:34:
                    c0:c2:8d:07:c7:8d:19:ce:04:b2:87:54:5d:a3:ea:
                    4a:a1:f9:19:dd:49:54:14:ba:8d:58:60:06:cb:36:
                    9f:80:2e:04:34:63:ea:59:fc:e8:5b:8e:c2:80:f6:
                    3a:ac:fc:e3:c0:9e:ad:a9:f4:b3:d6:d7:8d:bb:c8:
                    b9:1c:ae:60:34:08:ae:22:ae:db:f3:2b:55:d1:7f:
                    c3:f5:69:01:2b:9a:d2:3d:27:d3:b0:6d:df:a5:02:
                    54:0b:fc:75:da:a0:22:a3:54:be:d2:6e:5e:23:f6:
                    66:f3:2e:66:16:9d:f4:fb:f4:f0:c7:98:43:3e:0b:
                    d1:ac:d1:80:7b:9e:54:da:5e:ba:aa:0b:0c:b3:0d:
                    f3:ac:c6:d0:32:36:ce:c1:de:09:61:11:9e:23:30:
                    db:d3:ba:b3:d3:21:cf:d1:84:68:ca:e4:7f:03:d4:
                    b8:41:fc:c2:16:80:2d:6b:8a:63:4d:36:25:07:23:
                    2d:2e:2d:ab:ce:76:b4:e7:64:f2:35:79:80:4e:fe:
                    87:de:4f:e6:e2:06:e4:84:6c:21:b5:a2:5f:00:2e:
                    2d:7f:6d:ad:ec:a2:f0:d9:7d:e5:88:e5:09:1f:62:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:11:BC:95:19:F0:14:8C:58:7D:10:8A:59:0B:CA:57:D2:AF:7B:05
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e312e302f32342d3234203d3e203434373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f2:67:01:be:02:e9:4d:91:28:4d:f5:e6:c5:bc:11:50:0b:
         80:7f:5e:5e:b9:10:ef:20:d7:b2:21:e8:44:12:36:0b:b3:5a:
         c2:fc:3e:13:ee:b8:df:b4:99:dd:7f:fb:f8:8a:9b:70:47:7c:
         ec:23:19:41:fb:c2:1e:97:19:70:4e:54:c8:5f:54:f3:7b:0a:
         28:f3:d8:20:65:60:4c:58:c9:b0:d2:37:9b:44:ed:3d:9c:00:
         36:9f:71:74:3d:dd:73:23:0e:34:14:46:56:7c:0b:fc:c9:34:
         5a:42:96:ab:21:1d:cc:70:b8:4d:3c:03:cf:16:c0:0a:d1:08:
         6c:56:b3:75:29:cc:1a:3f:50:cc:5e:32:61:2b:4e:c1:1b:ed:
         33:ec:35:ba:01:67:e5:65:66:f5:26:32:88:70:f2:5c:fa:d5:
         7d:d5:25:60:cf:20:42:91:95:8b:33:ad:3c:88:f5:56:6a:38:
         e3:ad:cc:2d:72:6c:6b:41:98:2d:e0:7f:17:af:57:ba:29:d6:
         60:80:0d:d9:df:36:33:94:b3:f4:1d:7f:8c:e8:b1:ef:60:2f:
         ca:b7:1c:f8:9e:64:4a:18:02:4e:22:fb:d6:be:68:2c:10:cb:
         b0:10:d3:27:47:c1:92:9e:a7:43:d8:18:33:ee:39:63:62:90:
         38:ee:50:14
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUDXeuF8x7HpUrPs9BD18eKdoxJAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdhNmU1MjA2YmUzNTAxZGRkMzhkNmYzMWMzMzY4MjAw
YzQzYTQ3MzAeFw0yMDEyMDMxNTUyMDlaFw0yMTEyMDIxNTU3MDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTdGRUQwRDc2MzZBNEQyNUJF
QkIwQzMwMzc4M0MwMUM4RTI2NUY3MDdFNDU1NzE1NUM2RTFCQjAzNEMwQzI4RDA3
Qzc4RDE5Q0UwNEIyODc1NDVEQTNFQTRBQTFGOTE5REQ0OTU0MTRCQThENTg2MDA2
Q0IzNjlGODAyRTA0MzQ2M0VBNTlGQ0U4NUI4RUMyODBGNjNBQUNGQ0UzQzA5RUFE
QTlGNEIzRDZENzhEQkJDOEI5MUNBRTYwMzQwOEFFMjJBRURCRjMyQjU1RDE3RkMz
RjU2OTAxMkI5QUQyM0QyN0QzQjA2RERGQTUwMjU0MEJGQzc1REFBMDIyQTM1NEJF
RDI2RTVFMjNGNjY2RjMyRTY2MTY5REY0RkJGNEYwQzc5ODQzM0UwQkQxQUNEMTgw
N0I5RTU0REE1RUJBQUEwQjBDQjMwREYzQUNDNkQwMzIzNkNFQzFERTA5NjExMTlF
MjMzMERCRDNCQUIzRDMyMUNGRDE4NDY4Q0FFNDdGMDNENEI4NDFGQ0MyMTY4MDJE
NkI4QTYzNEQzNjI1MDcyMzJEMkUyREFCQ0U3NkI0RTc2NEYyMzU3OTgwNEVGRTg3
REU0RkU2RTIwNkU0ODQ2QzIxQjVBMjVGMDAyRTJEN0Y2REFERUNBMkYwRDk3REU1
ODhFNTA5MUY2MjM1MjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp/7Q12NqTSW+uwwwN4PAHI4mX3B+RVcVXG4bsDTAwo0Hx40ZzgSy
h1Rdo+pKofkZ3UlUFLqNWGAGyzafgC4ENGPqWfzoW47CgPY6rPzjwJ6tqfSz1teN
u8i5HK5gNAiuIq7b8ytV0X/D9WkBK5rSPSfTsG3fpQJUC/x12qAio1S+0m5eI/Zm
8y5mFp30+/Twx5hDPgvRrNGAe55U2l66qgsMsw3zrMbQMjbOwd4JYRGeIzDb07qz
0yHP0YRoyuR/A9S4QfzCFoAta4pjTTYlByMtLi2rzna052TyNXmATv6H3k/m4gbk
hGwhtaJfAC4tf22t7KLw2X3liOUJH2I1JQIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FEMRvJUZ8BSMWH0QilkLylfSr3sFMB8GA1UdIwQYMBaAFGem5SBr41Ad3TjW8xwz
aCAMQ6RzMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNzgvNjdB
NkU1MjA2QkUzNTAxREREMzhENkYzMUMzMzY4MjAwQzQzQTQ3My5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL1o2YmxJR3ZqVUIzZE9OYnpIRE5vSUF4RHBITS5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTc4LzMxMzkzMzJlMzQzMjJl
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM0MzczMzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wSoBMA0GCSqGSIb3DQEBCwUAA4IBAQAZ8mcBvgLpTZEoTfXmxbwRUAuAf15euRDv
INeyIehEEjYLs1rC/D4T7rjftJndf/v4iptwR3zsIxlB+8IelxlwTlTIX1Tzewoo
89ggZWBMWMmw0jebRO09nAA2n3F0Pd1zIw40FEZWfAv8yTRaQparIR3McLhNPAPP
FsAK0QhsVrN1KcwaP1DMXjJhK07BG+0z7DW6AWflZWb1JjKIcPJc+tV91SVgzyBC
kZWLM608iPVWajjjrcwtcmxrQZgt4H8Xr1e6KdZggA3Z3zYzlLP0HX+M6LHvYC/K
txz4nmRKGAJOIvvWvmgsEMuwENMnR8GSnqdD2Bgz7jljYpA47lAU
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net