Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35372e302f32342d3234203d3e2037383431.roa
File:                     3139342e3234322e35372e302f32342d3234203d3e2037383431.roa (raw, json)
Hash identifier:          CHPIq4x4j1gLVQoSlmXRhJfNmHVkb8yvYWwA15MK+oQ=
Subject key identifier:   39:6C:6C:BE:D4:9A:F4:92:F8:71:F0:B7:D9:38:76:1F:EC:B4:71:E1
Certificate issuer:       /CN=e9fc48331f2e461a51bcf68c86c0f1c52df5b50f
Certificate serial:       3BB8C613B91637BE499DDF8357019B0A2457C049
Authority key identifier: E9:FC:48:33:1F:2E:46:1A:51:BC:F6:8C:86:C0:F1:C5:2D:F5:B5:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fxIMx8uRhpRvPaMhsDxxS31tQ8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35372e302f32342d3234203d3e2037383431.roa
Signing time:             Wed 09 Dec 2020 09:10:07 +0000
ROA not before:           Wed 09 Dec 2020 09:05:07 +0000
ROA not after:            Wed 08 Dec 2021 09:10:07 +0000
asID:                     7841
IP address blocks:        194.242.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b8:c6:13:b9:16:37:be:49:9d:df:83:57:01:9b:0a:24:57:c0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fc48331f2e461a51bcf68c86c0f1c52df5b50f
        Validity
            Not Before: Dec  9 09:05:07 2020 GMT
            Not After : Dec  8 09:10:07 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:45:65:87:80:54:23:13:cd:9e:fd:1d:a4:d2:
                    34:26:5a:3c:d4:89:26:bb:66:9b:dd:73:84:a4:a3:
                    18:e4:17:df:ea:57:45:8a:e2:98:86:cc:f2:94:73:
                    6f:77:d0:06:aa:4f:49:b0:37:33:e7:f9:72:d7:34:
                    ac:4b:65:c3:22:4b:aa:6a:22:6f:75:95:7d:c4:1d:
                    04:37:4a:bf:a1:43:dd:e6:f6:5b:7e:a0:a4:9c:3c:
                    6c:fe:75:e1:26:22:d6:06:2d:e7:a0:10:bf:16:3c:
                    35:41:39:3b:0c:f9:e8:d7:4b:d2:65:e6:7a:28:93:
                    e4:5d:e8:25:41:5a:a7:b1:3b:19:c8:71:a0:f8:01:
                    e8:99:c5:1a:09:fa:e9:49:46:24:bd:f6:b0:9c:3c:
                    bd:aa:1e:7d:41:fa:02:e6:7d:fe:45:67:ba:25:b6:
                    5e:46:2a:63:16:9e:52:1e:74:12:14:41:35:30:ed:
                    e8:51:57:48:2d:f9:16:a0:e6:26:7d:c7:6a:d6:38:
                    ee:e1:21:a6:3e:ab:37:d6:3a:51:65:b3:ad:29:4d:
                    2a:29:f2:00:93:13:7e:89:4a:e2:d4:5c:f7:a7:d6:
                    02:6f:b7:b4:8c:15:66:85:06:7b:53:84:de:df:a2:
                    be:2a:3e:d3:23:e5:78:9e:92:fc:93:82:b6:61:4e:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6C:6C:BE:D4:9A:F4:92:F8:71:F0:B7:D9:38:76:1F:EC:B4:71:E1
            X509v3 Authority Key Identifier:
                keyid:E9:FC:48:33:1F:2E:46:1A:51:BC:F6:8C:86:C0:F1:C5:2D:F5:B5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/38/E9FC48331F2E461A51BCF68C86C0F1C52DF5B50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxIMx8uRhpRvPaMhsDxxS31tQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35372e302f32342d3234203d3e2037383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.242.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:24:0f:26:0a:1e:52:04:13:9f:a4:3a:84:ed:d9:fe:44:93:
         41:d0:4e:25:96:2a:d4:5c:5b:2d:4c:61:3f:23:93:17:93:44:
         6f:c4:61:65:e1:3c:ca:65:5a:67:4d:93:fd:0f:0e:15:99:8a:
         56:75:6f:1d:d7:5d:d6:07:fe:20:0d:c4:35:49:37:7a:54:8b:
         1e:2f:e1:c5:9d:d0:58:1c:bd:a4:b8:ef:c7:21:fa:0a:07:66:
         0c:60:b1:33:17:c6:d9:54:d8:c9:2b:55:b7:13:28:b4:1a:f9:
         63:88:ef:ab:ed:95:c0:8c:8b:21:96:34:67:9f:bb:9f:4d:b9:
         0b:09:fa:c7:2e:ff:00:bd:e5:3b:22:69:2b:dd:a8:47:a3:a7:
         42:b5:38:2a:35:a7:99:f7:13:e4:08:be:2c:e3:4c:3d:19:58:
         a2:1a:4f:4e:15:9a:1a:7b:7d:23:10:81:2f:ed:a7:f6:c2:c3:
         36:40:1e:fe:c0:31:1f:18:46:b8:e6:c2:16:92:ed:08:de:58:
         ab:0c:02:89:35:6d:e2:82:49:b2:7c:c1:ec:f1:5a:7f:2f:52:
         a5:4c:dc:3b:e3:7d:ec:af:31:7a:9c:5c:76:83:fc:ea:79:d9:
         32:ba:24:11:06:c6:04:e4:eb:88:10:83:f7:f6:6d:71:18:ec:
         12:88:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net