Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e203232373733.roa
File:                     3139332e3230332e31352e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          XStYXYz8zSuxKyj6U0Amy8WuBaLmcJKRVSUdDVL10UY=
Subject key identifier:   4E:A9:8A:5E:73:9A:4A:98:3C:7B:E6:59:A0:03:99:63:65:5C:0C:67
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       7CAD8A2199AF11BB6BF97ED9A080DE0AFF7EB114
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e203232373733.roa
Signing time:             Tue 28 Jun 2022 04:41:19 +0000
ROA not before:           Tue 28 Jun 2022 04:36:19 +0000
ROA not after:            Tue 27 Jun 2023 04:41:19 +0000
asID:                     22773
IP address blocks:        193.203.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ad:8a:21:99:af:11:bb:6b:f9:7e:d9:a0:80:de:0a:ff:7e:b1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:19 2022 GMT
            Not After : Jun 27 04:41:19 2023 GMT
        Subject: CN=4EA98A5E739A4A983C7BE659A0039963655C0C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:dc:f8:1b:03:ff:4c:df:49:69:52:d2:6d:
                    3c:df:2c:37:1f:d1:ca:4b:03:64:27:3f:45:4f:84:
                    68:2e:7f:9f:25:34:c5:6b:3a:99:55:e4:57:94:20:
                    bc:ac:c4:69:df:96:a0:b6:f8:d4:37:93:76:32:4d:
                    5b:05:f1:a2:b1:64:84:98:e6:7f:e8:93:8e:88:e2:
                    7d:2e:f3:8e:68:b4:d6:b6:21:0c:5d:22:76:a7:02:
                    bd:b9:31:55:33:82:a8:44:12:f1:c4:8e:f3:2f:b0:
                    15:99:ee:5d:16:2c:aa:9e:4c:6f:b5:e7:59:ec:e8:
                    62:16:2a:89:df:b5:9a:f1:1f:12:33:15:9e:cd:c5:
                    a5:a9:51:1a:4b:f5:b3:e6:1a:c7:0d:91:28:69:71:
                    aa:2c:bd:03:0c:23:a3:a3:11:84:2a:9c:fc:ce:c2:
                    2e:77:87:f2:8f:29:3f:55:b5:f6:48:5d:0b:25:10:
                    53:c9:b4:2d:65:db:39:b0:c0:45:41:94:c5:ac:a2:
                    9b:38:65:b3:52:89:85:ac:67:29:61:e2:6a:ce:ea:
                    61:88:db:ff:63:eb:e8:6b:95:e4:a4:37:cb:66:6a:
                    c7:4b:5c:dc:b8:ad:de:f8:de:ad:e5:f0:42:3f:2e:
                    eb:23:c1:a5:d5:be:e1:2e:7d:7a:a6:72:3f:a4:67:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A9:8A:5E:73:9A:4A:98:3C:7B:E6:59:A0:03:99:63:65:5C:0C:67
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:7f:19:5b:03:2f:6e:ad:2a:f1:08:3f:00:39:df:ae:e3:17:
         61:61:cf:07:c9:4c:07:db:2a:a7:b0:b9:cc:cf:e0:3c:44:e1:
         23:16:2c:ac:eb:cf:8b:4b:d2:d4:e8:61:64:38:73:1a:8f:ab:
         c5:00:97:be:8c:e6:db:a9:96:6c:02:46:5a:0a:c7:23:10:21:
         92:88:dc:6e:51:40:7f:8f:23:fb:c2:a5:ad:3c:52:91:87:e8:
         05:b4:fd:48:08:06:d0:3e:fd:96:1a:69:c3:c1:e1:d4:74:11:
         9c:96:1d:b8:ab:1b:0b:dd:a5:96:fe:b0:2e:b2:47:9d:05:4e:
         fb:3c:03:3d:8f:8c:68:d7:15:96:7f:b9:22:ad:70:d4:9c:5f:
         36:99:dd:d2:f0:d7:40:10:15:96:b0:41:f2:72:31:4b:06:e7:
         7b:a1:b9:47:e2:53:88:76:48:d1:7b:92:d3:b4:59:65:8b:46:
         d7:6b:38:7d:06:1c:0c:f4:36:62:a0:0d:eb:05:aa:5b:47:91:
         70:89:a5:bb:61:b0:20:b3:51:08:2f:59:63:53:16:5d:d6:bc:
         ed:43:96:14:82:31:f7:b9:ee:e9:ba:46:96:5e:e1:b9:b9:62:
         46:11:10:13:e6:53:12:49:57:9e:60:0f:07:fc:86:27:ca:39:
         be:da:31:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net