Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3234203d3e2033333536.roa
File:                     3139342e3139352e38372e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          prz/ONjDS+0E+/jZkFyPr7Y7wx3XlQck1dOWg2pn2uA=
Subject key identifier:   8E:44:88:4F:67:5C:A6:44:50:62:5B:FE:B0:A4:FE:DB:EE:22:13:E7
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3B604647870C0C739A355C6E926CD47E205432CB
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:40:50 +0000
ROA not before:           Tue 28 Jun 2022 04:35:50 +0000
ROA not after:            Tue 27 Jun 2023 04:40:50 +0000
asID:                     3356
IP address blocks:        194.195.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:60:46:47:87:0c:0c:73:9a:35:5c:6e:92:6c:d4:7e:20:54:32:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:50 2022 GMT
            Not After : Jun 27 04:40:50 2023 GMT
        Subject: CN=8E44884F675CA64450625BFEB0A4FEDBEE2213E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:34:d8:57:50:40:a7:9c:32:b9:30:da:b0:
                    28:f1:13:af:9d:53:3a:fa:44:73:d4:1d:72:6f:fd:
                    8e:41:e0:7c:1b:f1:85:e6:3a:bf:a6:48:48:48:ed:
                    3c:14:99:71:55:ce:51:c9:a9:a1:47:45:1a:92:2e:
                    12:70:f2:e6:76:c4:26:05:4d:7b:d8:00:53:bd:9e:
                    71:5b:f5:1b:96:45:42:13:34:02:59:18:51:50:3d:
                    51:38:11:ec:d4:8a:a3:ff:90:ec:a1:c7:8f:ea:f9:
                    d3:23:fe:ae:75:e4:ff:7c:82:64:54:d4:ac:12:87:
                    44:ab:a5:11:b0:d2:fa:43:25:7c:8a:c5:c0:be:e7:
                    e8:60:b5:f6:ee:fe:a8:1b:cc:96:db:cd:ff:3e:64:
                    6f:3a:6a:09:9d:39:f7:63:04:f6:dd:cd:ef:7e:81:
                    36:31:80:b1:a6:a0:79:5a:95:46:16:d1:ef:ba:cf:
                    02:58:25:a7:c4:19:aa:29:09:bf:7e:cc:e4:25:61:
                    5a:b2:34:21:ef:05:00:54:58:e6:ff:fc:a3:67:91:
                    d0:83:f4:40:ba:43:b7:89:ad:a1:bc:7f:5c:de:b4:
                    e8:10:63:1d:11:f8:93:e9:4e:a2:9a:2c:a9:83:1d:
                    76:e8:b0:7c:f6:21:52:91:f5:03:73:d3:c4:72:9a:
                    42:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:44:88:4F:67:5C:A6:44:50:62:5B:FE:B0:A4:FE:DB:EE:22:13:E7
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38372e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:d7:26:ad:12:5a:57:6d:1c:4c:03:cc:f2:73:59:a9:6b:21:
         db:0e:e4:a2:ad:8f:8d:76:3d:1b:e6:6f:8c:18:c0:06:c5:1f:
         ae:1e:91:a2:b8:b3:67:d5:a0:b3:07:c0:64:77:2a:f2:61:05:
         f5:74:a8:55:ca:d4:63:b5:3b:11:57:ba:19:82:e9:74:c2:99:
         7f:6e:3e:aa:06:70:5c:3a:40:b1:e3:1d:b1:86:81:17:21:0e:
         54:82:3d:a3:d1:4b:ef:d1:58:92:7f:f5:8c:c3:1b:b2:b7:20:
         52:ab:ad:56:c3:98:70:2c:c1:b6:27:de:48:b4:4b:2b:c0:47:
         49:05:95:10:74:21:af:76:92:e1:a7:e1:2d:18:b7:a5:08:b9:
         d6:d5:82:84:ba:28:76:20:d1:96:61:57:d1:9a:b9:b5:a3:a6:
         ca:05:19:71:94:a5:ea:cb:6c:96:da:5f:52:db:8e:6a:32:a4:
         c3:00:33:55:1f:6c:fc:b3:77:ad:71:84:2c:1b:da:11:ca:bb:
         96:57:20:cc:23:28:09:61:0f:01:9c:89:21:95:23:82:e4:69:
         40:6c:0f:0b:08:3f:58:84:09:ed:ff:37:e6:80:0b:71:bc:b4:
         60:35:51:c4:28:1c:80:15:66:fb:f6:1d:cf:95:0b:62:7f:96:
         df:4a:00:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net