Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234352e302f32342d3234203d3e2030.roa
File:                     3139322e3136362e3234352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          0ByO3o3D4eN4YsZlmsvfUe4XIQ9MU2E04XamymlnXEI=
Subject key identifier:   59:26:62:F4:6E:CC:A2:C8:B2:4C:90:96:F6:AF:B2:0D:00:7E:7D:FE
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       47F6F5232F04AD8DE0495B5DD2AEE1FEB220EBE3
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234352e302f32342d3234203d3e2030.roa
Signing time:             Mon 04 Jul 2022 15:44:13 +0000
ROA not before:           Mon 04 Jul 2022 15:39:13 +0000
ROA not after:            Mon 03 Jul 2023 15:44:13 +0000
asID:                     0
IP address blocks:        192.166.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f6:f5:23:2f:04:ad:8d:e0:49:5b:5d:d2:ae:e1:fe:b2:20:eb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jul  4 15:39:13 2022 GMT
            Not After : Jul  3 15:44:13 2023 GMT
        Subject: CN=592662F46ECCA2C8B24C9096F6AFB20D007E7DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5e:c7:f9:54:b6:21:1d:dd:dd:cf:be:cf:d0:
                    fa:10:d2:5f:26:48:2a:82:79:77:fe:45:5e:6e:9c:
                    43:2c:25:52:5f:c2:65:0c:16:ab:da:86:20:c3:75:
                    c1:5f:d6:74:e0:b1:58:f8:7f:58:35:8c:69:1b:87:
                    b6:c6:38:00:e4:0c:96:2a:cf:07:c8:d4:3e:08:bc:
                    31:4f:fe:0a:16:fa:8a:cd:48:0c:bb:fe:07:e6:65:
                    7c:af:e4:03:25:ff:5c:37:28:f9:7c:0a:84:9c:d6:
                    a7:07:ab:03:41:d3:29:0b:10:be:50:5f:5f:11:d2:
                    8b:a3:1f:ca:0c:92:83:ef:67:b9:c4:da:18:28:a7:
                    90:ad:4c:79:ad:de:b1:10:86:c0:1d:d9:bf:f8:02:
                    62:c9:46:53:4a:e1:38:15:2c:88:11:19:80:2a:b9:
                    87:f9:fa:a1:52:36:4a:cc:c1:a5:88:ea:b3:c0:53:
                    c0:3d:52:45:a5:c2:34:0d:33:cd:ec:92:de:ae:79:
                    9a:96:b2:52:92:a5:d2:5c:2a:ca:88:d4:18:d8:ea:
                    ed:bc:25:e8:80:c2:c7:b6:58:9b:b9:c5:68:f7:8b:
                    dd:2e:b4:5a:fb:f8:47:aa:f7:f4:8a:60:03:d4:03:
                    fd:f2:ee:8e:9e:d4:37:3b:1b:03:2b:0f:e1:fa:42:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:26:62:F4:6E:CC:A2:C8:B2:4C:90:96:F6:AF:B2:0D:00:7E:7D:FE
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c3:df:74:96:06:17:a4:74:3b:ad:34:6d:1e:6c:52:82:ab:
         01:87:bb:cd:f3:2d:50:e6:c7:1f:8b:74:0b:d5:3f:17:af:9f:
         7a:76:67:c6:ba:a8:cb:cb:cc:f3:1a:f5:8d:ea:34:03:e5:0a:
         e7:09:87:95:d8:93:a6:9c:cc:1c:c4:34:39:66:b9:07:dd:47:
         f9:d9:fd:94:c5:a3:3c:f1:13:52:93:13:eb:c4:15:7f:a7:71:
         57:c0:53:04:2f:84:15:f5:e1:00:67:84:36:e3:ee:8a:d9:07:
         eb:2d:8c:0e:d8:e6:ef:01:bc:fa:c1:76:c8:0c:fd:ac:0c:70:
         84:e8:47:6c:0a:c7:09:28:52:8b:d6:db:50:64:fe:16:77:6e:
         3f:80:35:40:7e:76:fd:ca:bd:78:6d:5f:d8:2a:eb:4e:16:e5:
         98:4d:15:a7:ea:9a:18:c4:68:db:7f:0e:c0:37:7e:29:20:e9:
         f2:9b:f2:e5:10:f2:67:49:51:90:83:49:81:fb:5c:7f:d6:16:
         b0:92:0e:91:3a:42:62:25:f5:da:76:f4:f7:25:d8:75:fd:d1:
         a8:00:3b:12:6a:e8:55:5c:57:78:a4:60:5b:94:a9:65:a4:d8:
         e6:00:4e:ec:4e:57:2f:bb:bb:0c:76:25:1f:36:a7:b1:88:d5:
         5b:16:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net