Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3234203d3e20323037343239.roa
File:                     3139342e3139352e38382e302f32332d3234203d3e20323037343239.roa (raw, json)
Hash identifier:          bJqVXELwTloHBjksUnZqxTDRpbduwIyPTI0S3ClrqxQ=
Subject key identifier:   BC:F7:31:AF:72:1E:CF:22:68:FE:DF:5C:4A:29:92:49:7B:46:7B:CF
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5765EEF0F914B82A446B5751F5E0C79F74978125
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3234203d3e20323037343239.roa
Signing time:             Wed 05 May 2021 08:29:09 +0000
ROA not before:           Wed 05 May 2021 08:24:09 +0000
ROA not after:            Wed 04 May 2022 08:29:09 +0000
asID:                     207429
IP address blocks:        194.195.88.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:65:ee:f0:f9:14:b8:2a:44:6b:57:51:f5:e0:c7:9f:74:97:81:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: May  5 08:24:09 2021 GMT
            Not After : May  4 08:29:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:85:b0:8d:c0:df:59:30:4d:55:63:a5:18:
                    41:e3:8c:f8:b1:99:7b:52:90:1b:86:5f:3b:42:f3:
                    05:4d:b0:ed:9f:f8:44:0f:dd:43:53:08:5b:48:f3:
                    f4:48:9f:e5:70:ec:50:f7:c6:9b:82:3a:e7:91:34:
                    79:7e:ca:88:d8:2c:fe:1a:fb:79:88:f1:bd:9c:cc:
                    6e:03:88:a9:48:aa:7d:cf:b6:17:8e:bd:80:7f:4f:
                    db:a4:5f:c8:1b:5d:12:44:31:2d:d2:63:e7:eb:ab:
                    f1:28:12:2a:71:77:11:93:44:48:29:94:3b:0a:8d:
                    1f:52:1d:bb:d0:a0:a8:d6:7b:d7:7c:5b:21:ee:07:
                    f0:ec:31:c0:f3:d5:c8:4f:44:c4:3f:fe:09:9b:e8:
                    15:a8:5c:dd:83:7c:e9:1f:2f:a7:5f:e8:2e:c3:71:
                    82:a7:be:b0:d1:c5:ed:ed:14:70:68:3c:bb:b5:7c:
                    75:7f:10:b8:7b:37:ac:90:92:f4:77:89:43:46:0e:
                    dd:b1:68:de:a4:e7:fc:cc:51:84:7b:7a:30:96:da:
                    95:f4:27:52:52:6b:9c:3f:ba:1b:8b:58:ac:7d:a0:
                    73:76:ea:55:ee:41:fc:e7:ad:b7:de:0f:c4:10:e2:
                    6a:ed:25:25:7d:d9:fe:ec:77:f1:3e:13:44:bb:00:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F7:31:AF:72:1E:CF:22:68:FE:DF:5C:4A:29:92:49:7B:46:7B:CF
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3234203d3e20323037343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:8b:66:92:57:0f:1e:07:01:4a:67:2d:0c:df:89:7e:08:c7:
         b9:4b:2f:57:9c:0c:31:6f:ab:41:d9:cc:c8:d6:33:f8:17:39:
         4d:a3:36:22:9d:9a:7f:59:a3:04:fa:de:21:37:e8:75:a3:bc:
         77:28:3c:16:07:ce:84:0d:d8:5f:47:50:28:ad:b2:86:e0:cc:
         a4:d6:ba:73:be:f8:2f:a8:ae:04:41:dc:df:ef:5b:8b:1d:7f:
         6c:8c:c3:41:0f:0d:f3:30:fd:28:51:5b:2b:5c:dc:cb:a1:44:
         6c:f5:66:e1:cd:ab:90:db:1b:f6:25:92:79:f2:5a:d0:cf:59:
         13:4d:14:64:45:04:99:0d:0b:1d:c8:43:a8:4e:82:9f:1e:da:
         c6:b0:04:a6:7a:62:16:5b:78:31:bc:d3:51:ce:ac:b4:b4:87:
         48:81:76:c1:f0:2b:1b:e9:3c:59:62:89:a2:21:56:92:74:d7:
         aa:8e:b5:5b:f1:a1:91:17:73:8e:69:ad:fe:dc:37:b6:dd:ef:
         0d:76:01:f7:7b:fe:81:17:47:30:d9:b0:ef:d3:80:4f:fd:1f:
         d8:8d:04:c8:b1:af:9c:c9:c4:95:f0:cc:ec:a8:47:e8:ad:9a:
         55:95:9f:fa:e9:16:28:b3:92:4d:39:fe:ad:fe:26:84:0a:d2:
         0d:14:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net