Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e2037383537.roa
File:                     3139332e3230332e31352e302f32342d3234203d3e2037383537.roa (raw, json)
Hash identifier:          fe7NmtS+zmJxrfQP5Z/bgmTAgvxhx8b91rXwUG1uEpE=
Subject key identifier:   9A:A4:5B:A4:0F:15:9E:ED:05:6A:89:26:28:D1:2E:7B:78:35:0C:0B
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       3E9C7485F711C36459E24BBF7B914FA1AD7E1DD8
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e2037383537.roa
Signing time:             Tue 28 Jun 2022 04:41:16 +0000
ROA not before:           Tue 28 Jun 2022 04:36:16 +0000
ROA not after:            Tue 27 Jun 2023 04:41:16 +0000
asID:                     7857
IP address blocks:        193.203.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9c:74:85:f7:11:c3:64:59:e2:4b:bf:7b:91:4f:a1:ad:7e:1d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:16 2022 GMT
            Not After : Jun 27 04:41:16 2023 GMT
        Subject: CN=9AA45BA40F159EED056A892628D12E7B78350C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:66:e4:dd:f5:e6:c0:dd:ec:86:82:ef:e0:
                    74:fd:7f:d1:f7:6b:9a:f5:cd:0a:46:b0:d1:15:2d:
                    5c:8b:98:ff:01:43:c2:6a:9f:d5:96:66:c1:63:d6:
                    8a:d1:3d:11:ff:31:23:07:ff:da:9f:67:a9:75:39:
                    cb:9a:c3:08:77:e6:30:d7:f7:c1:b7:59:92:5e:10:
                    af:c3:11:40:36:06:88:ff:cf:6a:15:da:92:fc:6f:
                    43:c2:c5:a3:68:ce:b1:da:5d:dd:d1:ef:c0:fc:f3:
                    72:44:02:ac:06:63:52:87:99:f9:88:1f:03:99:85:
                    4b:3c:19:65:80:bf:46:eb:24:3b:62:6b:ff:6f:e3:
                    fb:60:32:e1:a0:48:59:0d:be:e0:74:c8:f1:3b:fd:
                    35:4e:55:ba:9c:d2:c8:6e:97:0d:5c:51:46:1b:6d:
                    80:58:54:30:a6:a4:ce:75:d6:ff:f1:90:c6:57:3f:
                    55:cc:c4:63:6f:50:d6:3d:7f:4a:b1:98:fd:28:9f:
                    6a:7d:46:d1:32:f8:fd:bf:70:4a:d3:1d:5f:95:92:
                    55:a5:96:96:57:4a:4a:ce:90:87:7e:40:76:81:97:
                    aa:de:8f:45:90:58:0a:a6:2a:7a:a1:8a:70:79:16:
                    47:d9:ed:00:1d:10:40:09:1a:88:85:08:4d:7d:5d:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A4:5B:A4:0F:15:9E:ED:05:6A:89:26:28:D1:2E:7B:78:35:0C:0B
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e2037383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:f7:c4:46:fc:bb:f9:23:a1:09:1a:e2:29:0f:49:52:01:
         f6:40:69:73:e9:85:f5:73:61:14:57:d1:c6:ec:5e:72:2e:84:
         a4:47:d8:17:92:fa:3e:0e:53:b1:5d:42:2d:99:72:72:18:3e:
         9b:d7:11:6e:4b:2d:c7:88:a6:c9:6b:9a:05:3f:10:c3:50:f3:
         bc:31:ea:08:ac:70:5b:7e:18:58:9b:27:ae:cc:45:35:98:b6:
         ce:f9:34:96:c1:87:be:4f:22:c0:e5:50:4f:5c:f6:30:5b:cb:
         e2:4b:80:4f:28:1b:46:90:ed:43:67:d8:de:54:d4:ac:ed:c7:
         bf:d1:ed:f2:d3:da:72:aa:ba:76:90:a8:9e:61:49:8c:8c:a2:
         ef:1e:4d:5e:ef:c0:21:14:2c:07:5e:ac:2f:4b:8d:a5:88:68:
         45:29:00:35:e0:6c:b9:23:08:51:07:cf:73:56:ee:0d:40:01:
         a3:b1:7a:52:bc:a7:9b:09:b8:7b:36:12:89:6a:69:5a:99:f2:
         15:a8:90:b3:a8:06:cd:d4:02:46:01:d5:a1:54:c2:ef:4f:23:
         49:1f:8d:ae:58:f3:9b:5c:7f:bc:51:b2:09:78:16:bd:78:20:
         cc:36:33:12:e4:0e:27:5c:4b:db:1a:e3:0e:54:5b:17:56:a2:
         3d:3e:06:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:59 2023 by rpki-client on console.sobornost.net