Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e312e302f32342d3234203d3e203631333137.roa
File:                     3139332e34322e312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          JvyFLIzvAEGEOtqBgILk4QHKSo68NHhfeO8sdGobJlM=
Subject key identifier:   11:D3:21:65:D8:0E:C0:32:24:48:5B:B1:99:6A:6E:4B:2E:FC:68:4D
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       51892B71A75DFBDD5920994C90D7ADEF4FC148D4
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e312e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 03 Dec 2020 15:57:08 +0000
ROA not before:           Thu 03 Dec 2020 15:52:08 +0000
ROA not after:            Thu 02 Dec 2021 15:57:08 +0000
asID:                     61317
IP address blocks:        193.42.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:89:2b:71:a7:5d:fb:dd:59:20:99:4c:90:d7:ad:ef:4f:c1:48:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Dec  3 15:52:08 2020 GMT
            Not After : Dec  2 15:57:08 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ae:8d:e5:1b:69:53:5c:47:43:77:df:58:7e:
                    6b:29:b4:d4:b3:d7:0e:8f:71:83:0e:c4:50:8d:ce:
                    39:a0:a7:12:7f:5a:ac:fb:eb:af:0b:7b:2e:b5:f7:
                    e1:bd:a0:a9:41:21:bb:24:c9:d7:d6:60:37:f8:7b:
                    b6:69:d9:7f:3a:ff:55:e4:a1:6b:fc:53:95:d9:69:
                    a8:79:3b:17:20:43:db:29:1a:4a:9c:d5:76:95:d4:
                    71:d7:ae:37:b4:9f:3d:d0:e4:83:b3:24:6c:38:78:
                    b1:88:64:2d:22:50:f8:91:28:d2:cf:25:04:37:ca:
                    d7:d8:6f:cf:9b:4d:77:b2:36:ae:47:c3:8f:11:8c:
                    5d:cc:47:bf:06:d0:20:2c:20:db:bf:65:22:1c:c4:
                    15:11:5e:ff:44:a3:ea:22:1b:d2:b5:4f:7a:29:6d:
                    b1:11:07:08:c3:58:fe:cf:d0:0c:42:1c:c3:ca:bf:
                    95:42:45:7c:02:a8:1c:2b:df:31:49:f5:39:5e:d4:
                    5e:56:c4:d4:93:ed:dc:1e:a6:03:37:6f:d8:d1:df:
                    18:f5:87:8b:ec:53:1b:4c:ce:18:99:d9:4c:ac:94:
                    14:49:17:c7:40:4d:32:fe:41:f0:eb:69:01:1c:34:
                    e2:7c:d2:4b:7a:de:17:e0:ce:83:35:aa:c2:15:38:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D3:21:65:D8:0E:C0:32:24:48:5B:B1:99:6A:6E:4B:2E:FC:68:4D
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:0e:de:e3:2b:1b:ed:a8:1a:7d:eb:eb:40:34:ec:16:bf:31:
         96:e7:56:80:67:95:16:aa:ec:15:ce:38:8b:ec:25:1e:d2:0f:
         15:00:65:76:da:e0:b1:26:4a:bd:e7:48:5d:d2:b9:49:f6:ed:
         9b:4f:ef:0d:6f:78:9a:5d:6c:2e:e1:f3:32:2c:44:82:ff:f6:
         9d:1d:ed:b2:ab:17:cc:0e:ab:c4:e4:7d:d7:f1:3b:2e:9e:7a:
         6c:33:8a:75:c7:87:b0:9f:fa:f8:86:a5:84:99:ab:99:6f:c0:
         a5:36:17:05:4f:7f:6e:ae:9b:e4:fe:5e:8f:28:02:e5:83:01:
         fe:29:7e:8a:9b:97:74:54:ee:e5:e2:6c:75:5c:95:0a:74:de:
         99:bc:12:01:04:d0:d0:fb:12:28:f2:b2:84:7b:4f:54:f1:49:
         ac:2f:aa:c7:d7:b6:56:8c:62:9b:84:e8:62:9b:10:cd:29:82:
         c8:e0:4d:fd:2d:c3:0d:8a:00:5f:4f:8a:40:ce:ca:03:e0:df:
         ad:0f:4c:41:61:52:c8:9a:87:10:53:b3:53:6c:15:8a:10:98:
         37:9b:10:29:07:ab:ab:54:90:84:d5:30:ed:b5:06:2e:27:dd:
         eb:4e:8e:54:de:fc:8a:fb:b7:30:a7:ef:cb:0f:e1:92:13:bb:
         20:ba:69:7c
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUUYkrcadd+91ZIJlMkNet70/BSNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdhNmU1MjA2YmUzNTAxZGRkMzhkNmYzMWMzMzY4MjAw
YzQzYTQ3MzAeFw0yMDEyMDMxNTUyMDhaFw0yMTEyMDIxNTU3MDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRERBRThERTUxQjY5NTM1QzQ3
NDM3N0RGNTg3RTZCMjlCNEQ0QjNENzBFOEY3MTgzMEVDNDUwOERDRTM5QTBBNzEy
N0Y1QUFDRkJFQkFGMEI3QjJFQjVGN0UxQkRBMEE5NDEyMUJCMjRDOUQ3RDY2MDM3
Rjg3QkI2NjlEOTdGM0FGRjU1RTRBMTZCRkM1Mzk1RDk2OUE4NzkzQjE3MjA0M0RC
MjkxQTRBOUNENTc2OTVENDcxRDdBRTM3QjQ5RjNERDBFNDgzQjMyNDZDMzg3OEIx
ODg2NDJEMjI1MEY4OTEyOEQyQ0YyNTA0MzdDQUQ3RDg2RkNGOUI0RDc3QjIzNkFF
NDdDMzhGMTE4QzVEQ0M0N0JGMDZEMDIwMkMyMERCQkY2NTIyMUNDNDE1MTE1RUZG
NDRBM0VBMjIxQkQyQjU0RjdBMjk2REIxMTEwNzA4QzM1OEZFQ0ZEMDBDNDIxQ0Mz
Q0FCRjk1NDI0NTdDMDJBODFDMkJERjMxNDlGNTM5NUVENDVFNTZDNEQ0OTNFRERD
MUVBNjAzMzc2RkQ4RDFERjE4RjU4NzhCRUM1MzFCNENDRTE4OTlEOTRDQUM5NDE0
NDkxN0M3NDA0RDMyRkU0MUYwRUI2OTAxMUMzNEUyN0NEMjRCN0FERTE3RTBDRTgz
MzVBQUMyMTUzODI1RTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3a6N5RtpU1xHQ3ffWH5rKbTUs9cOj3GDDsRQjc45oKcSf1qs++uv
C3sutffhvaCpQSG7JMnX1mA3+Hu2adl/Ov9V5KFr/FOV2WmoeTsXIEPbKRpKnNV2
ldRx1643tJ890OSDsyRsOHixiGQtIlD4kSjSzyUEN8rX2G/Pm013sjauR8OPEYxd
zEe/BtAgLCDbv2UiHMQVEV7/RKPqIhvStU96KW2xEQcIw1j+z9AMQhzDyr+VQkV8
AqgcK98xSfU5XtReVsTUk+3cHqYDN2/Y0d8Y9YeL7FMbTM4YmdlMrJQUSRfHQE0y
/kHw62kBHDTifNJLet4X4M6DNarCFTgl6QIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FBHTIWXYDsAyJEhbsZlqbksu/GhNMB8GA1UdIwQYMBaAFGem5SBr41Ad3TjW8xwz
aCAMQ6RzMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNzgvNjdB
NkU1MjA2QkUzNTAxREREMzhENkYzMUMzMzY4MjAwQzQzQTQ3My5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL1o2YmxJR3ZqVUIzZE9OYnpIRE5vSUF4RHBITS5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTc4LzMxMzkzMzJlMzQzMjJl
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wSoBMA0GCSqGSIb3DQEBCwUAA4IBAQAYDt7jKxvtqBp96+tANOwWvzGW51aAZ5UW
quwVzjiL7CUe0g8VAGV22uCxJkq950hd0rlJ9u2bT+8Nb3iaXWwu4fMyLESC//ad
He2yqxfMDqvE5H3X8TsunnpsM4p1x4ewn/r4hqWEmauZb8ClNhcFT39urpvk/l6P
KALlgwH+KX6Km5d0VO7l4mx1XJUKdN6ZvBIBBNDQ+xIo8rKEe09U8UmsL6rH17ZW
jGKbhOhimxDNKYLI4E39LcMNigBfT4pAzsoD4N+tD0xBYVLImocQU7NTbBWKEJg3
mxApB6urVJCE1TDttQYuJ93rTo5U3vyK+7cwp+/LD+GSE7sguml8
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net