Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323132323938.roa
File:                     3139332e34322e302e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier:          lXpgknd25CnWTWBpfSE8k5SIn8oJqIcoGv08T2/vUvk=
Subject key identifier:   40:1C:12:DF:5C:4E:5D:1A:BE:D3:52:0F:04:3B:69:29:7B:1A:9F:66
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       44D3F703A1D4ABC15C96DF839053B0A1A1731150
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323132323938.roa
Signing time:             Tue 28 Jun 2022 04:40:52 +0000
ROA not before:           Tue 28 Jun 2022 04:35:52 +0000
ROA not after:            Tue 27 Jun 2023 04:40:52 +0000
asID:                     212298
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d3:f7:03:a1:d4:ab:c1:5c:96:df:83:90:53:b0:a1:a1:73:11:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:52 2022 GMT
            Not After : Jun 27 04:40:52 2023 GMT
        Subject: CN=401C12DF5C4E5D1ABED3520F043B69297B1A9F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:c2:b9:7c:1e:45:4d:72:34:21:0f:39:a6:
                    53:2b:b1:18:54:1b:dc:61:b4:00:19:37:18:12:11:
                    18:4c:6d:98:e4:2f:d3:bb:bd:e2:7e:49:54:66:37:
                    a9:fa:21:4e:f9:bb:c7:2a:51:e6:02:d7:f7:4a:82:
                    31:74:c3:9c:ad:8a:43:82:c3:c4:42:a0:b5:c0:b1:
                    d7:82:9e:90:88:60:36:52:9a:85:2e:30:e2:ed:00:
                    ec:8a:bc:ce:1e:bc:5b:1d:13:04:87:f9:82:da:c4:
                    da:c6:44:ff:6c:ca:f0:5e:1b:24:8b:96:27:3e:5c:
                    6b:0a:fc:45:21:b6:0a:5f:11:24:d5:2b:0f:f3:4e:
                    3f:fb:88:82:d8:33:5d:88:0f:4d:04:6c:22:2d:95:
                    ad:3e:c5:b3:e7:37:2c:42:c3:c2:4e:08:be:03:41:
                    67:b1:71:31:4d:6e:24:7a:81:a4:a9:ad:c0:dd:7c:
                    8d:09:5a:2e:39:33:82:22:10:03:aa:9b:69:70:66:
                    1a:64:1d:16:e8:19:3a:07:67:42:78:b9:46:af:39:
                    43:a6:48:25:1c:14:e8:19:68:c9:1b:63:7c:2a:cb:
                    44:63:2d:5a:07:e9:4a:1f:c6:0d:fa:55:60:b9:18:
                    b4:f3:a9:2f:ea:6e:6c:09:6e:e0:a2:8b:07:22:c6:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1C:12:DF:5C:4E:5D:1A:BE:D3:52:0F:04:3B:69:29:7B:1A:9F:66
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20323132323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:78:58:45:0e:6d:99:78:18:4e:02:c9:f6:2f:5e:3e:47:de:
         14:6d:d9:6c:0c:92:ff:00:8f:7e:7a:36:87:25:3e:4e:4a:96:
         ff:68:3e:2c:55:8b:06:74:24:6d:cb:fc:81:ef:aa:0c:1b:b3:
         87:b8:3d:bd:56:d1:9b:57:15:98:bd:ce:9f:c5:93:7d:02:30:
         19:57:46:fb:45:b4:35:95:ee:18:53:e8:34:68:02:c6:1e:86:
         90:2a:f9:f0:2e:24:fa:58:b9:1a:66:6a:17:71:9f:3c:68:e3:
         c6:26:e7:d1:f0:ec:40:46:34:20:77:a7:9a:62:4b:31:63:09:
         9b:82:eb:49:de:d6:81:93:31:38:73:53:f4:c9:f7:ba:38:58:
         37:16:ca:60:df:a6:54:17:f2:6c:25:03:c7:c2:65:94:ae:96:
         9e:26:59:5b:bc:0c:dc:16:7f:94:79:07:3e:6e:02:e2:51:cd:
         d7:74:9d:e9:6e:f6:46:7a:32:d4:2f:0b:d0:79:39:91:e4:e5:
         52:9a:b0:ea:89:26:99:af:a0:8f:dd:7e:91:64:b6:3e:53:4a:
         1a:b9:02:be:be:e2:db:db:37:fd:3e:b8:27:00:ac:24:5e:b7:
         24:98:7c:64:b2:d5:a7:b5:b7:1a:32:4c:6d:d5:52:18:98:12:
         29:cd:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net