Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323037313131.roa
File:                     3139332e34322e302e302f32342d3234203d3e20323037313131.roa (raw, json)
Hash identifier:          up4PaQwtvyQTuUVZaMgJY53P8Nty1csyIDoml/9ZA88=
Subject key identifier:   47:32:61:17:A8:74:B1:23:0C:8D:3D:5A:6E:94:7E:D7:E4:92:54:7B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2F5C5A66627726D9894E7504F929D34A4924CA59
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323037313131.roa
Signing time:             Tue 28 Jun 2022 04:40:42 +0000
ROA not before:           Tue 28 Jun 2022 04:35:42 +0000
ROA not after:            Tue 27 Jun 2023 04:40:42 +0000
asID:                     207111
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5c:5a:66:62:77:26:d9:89:4e:75:04:f9:29:d3:4a:49:24:ca:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:42 2022 GMT
            Not After : Jun 27 04:40:42 2023 GMT
        Subject: CN=47326117A874B1230C8D3D5A6E947ED7E492547B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:18:60:32:72:36:be:ef:15:9e:1b:3e:2e:
                    cc:29:34:83:ee:25:97:c3:10:1e:2e:6a:1d:d3:96:
                    29:67:95:93:f3:8b:8f:7d:51:0b:a3:93:07:0a:d2:
                    a5:a3:99:c2:d7:74:f9:d8:8a:d5:e9:3c:8b:97:7a:
                    2d:80:28:a3:56:4f:be:84:87:23:90:0b:8e:5b:a0:
                    ca:26:5a:79:32:d4:c6:20:19:5e:6b:70:2a:38:72:
                    cf:91:00:d8:99:4d:79:7b:25:eb:cc:e0:96:36:1e:
                    f7:9d:1d:2c:ad:81:5c:a9:dc:74:b3:49:e6:aa:bd:
                    5e:5f:c0:1d:ac:81:3f:06:aa:77:24:6b:4c:ca:cb:
                    4d:32:fa:2b:31:b6:cb:76:be:37:6c:51:90:3b:79:
                    fa:de:d2:04:e6:a0:2c:5e:5b:c9:4b:4a:ea:f2:01:
                    99:88:d1:08:3d:88:06:b2:ce:88:05:89:8d:c7:14:
                    ea:9c:09:91:13:37:55:c9:3b:40:d3:b1:3d:03:a9:
                    cd:ae:dd:02:cf:5a:a0:38:64:e4:e3:ca:74:40:f1:
                    8f:14:23:c3:dd:4b:73:4a:bc:9d:da:d4:e2:9d:a4:
                    45:68:f7:f6:e5:b0:2f:07:fb:58:1c:73:93:23:3f:
                    33:d7:45:87:df:78:94:7e:d8:98:7c:38:5e:cc:f9:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:32:61:17:A8:74:B1:23:0C:8D:3D:5A:6E:94:7E:D7:E4:92:54:7B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323037313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:9e:3a:a0:4c:63:84:cc:3c:51:b8:77:05:7e:54:c6:95:
         47:93:80:72:4a:f0:41:59:53:dd:a4:c5:26:c6:0e:bc:38:0a:
         37:3d:a6:93:c3:bb:70:d1:bd:7c:34:d5:7b:8d:8a:6b:b6:0e:
         52:87:75:da:9f:08:c5:19:71:84:9f:7c:32:24:a4:80:ad:31:
         3a:7b:cf:b7:cb:24:b3:c6:86:86:e6:69:74:dd:bc:21:36:a2:
         50:4a:4f:1b:0a:39:3d:70:af:4e:a2:89:d3:da:34:d7:07:03:
         1f:3a:02:ff:f4:aa:e1:3f:3c:f2:f2:ac:a1:62:5d:ef:f2:54:
         25:2e:9e:a9:87:2c:b1:45:03:8e:3f:35:93:9e:e8:3a:d1:c5:
         e1:13:f8:e5:98:fc:ae:71:0e:39:c8:55:45:4d:03:aa:39:bd:
         a0:48:ba:ce:27:a8:ee:68:e7:23:0a:ef:ee:73:fa:6a:8a:b4:
         94:eb:13:3b:6d:cc:ec:fa:ff:4e:99:34:a1:35:ba:d6:58:00:
         db:64:b4:3e:44:05:32:98:56:07:08:24:20:51:8b:59:b7:71:
         58:7e:e1:2e:21:14:08:52:69:7d:69:8b:84:c1:2c:29:25:51:
         df:2b:ac:28:41:19:ae:62:7c:36:bd:b1:b1:5c:ec:9e:18:6b:
         0f:2e:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net