Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3230342e302f32322d3234203d3e203631333137.roa
File:                     3139352e3137392e3230342e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          v8pznclWVLVIjPyXwuX8/3/K+FKBARLeluxyN2mh6hg=
Subject key identifier:   37:68:90:50:3D:79:8F:F1:39:12:31:B7:81:48:F8:09:64:33:F2:27
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       44F811174CDB461B8ABC0C2240673BD8D77F8583
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3230342e302f32322d3234203d3e203631333137.roa
Signing time:             Wed 11 May 2022 09:21:37 +0000
ROA not before:           Wed 11 May 2022 09:16:37 +0000
ROA not after:            Wed 10 May 2023 09:21:37 +0000
asID:                     61317
IP address blocks:        195.179.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f8:11:17:4c:db:46:1b:8a:bc:0c:22:40:67:3b:d8:d7:7f:85:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: May 11 09:16:37 2022 GMT
            Not After : May 10 09:21:37 2023 GMT
        Subject: CN=376890503D798FF1391231B78148F8096433F227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:4d:25:d9:d8:b6:87:09:8b:92:fa:87:36:
                    b7:74:cf:49:2f:d5:e4:6d:2d:a2:86:6f:d0:4f:c8:
                    59:91:df:8e:47:cc:fc:1c:f7:de:85:72:9d:3e:c4:
                    84:6e:02:e3:d1:84:7b:5d:d0:23:69:b2:09:a4:eb:
                    04:b7:f5:0f:d0:66:30:02:f4:1d:30:f3:ab:bb:9c:
                    82:7a:7e:40:70:ad:5a:1b:04:cc:b3:3b:fc:12:4c:
                    e3:aa:28:ea:4e:74:44:31:90:83:56:c3:98:91:df:
                    11:ca:27:e0:64:38:f9:e3:98:0e:79:e0:70:f2:75:
                    f2:eb:99:de:65:f1:9e:22:1c:84:35:f2:33:f9:5f:
                    4c:74:bd:f8:3c:d4:38:cc:e7:98:74:d1:a8:ee:71:
                    93:d3:97:15:5f:83:2e:cf:ae:ef:99:40:0a:0f:fb:
                    a6:63:35:ca:74:77:08:c5:5c:04:37:32:cc:37:78:
                    ff:17:16:da:82:fa:66:ca:a2:64:ca:f9:80:48:97:
                    8d:24:17:43:c2:4f:6b:58:21:c0:5d:a6:b1:c4:96:
                    42:a7:63:34:76:73:ef:d0:0d:f7:34:32:85:a6:3c:
                    06:d4:2e:66:fe:79:4d:45:18:98:fa:2c:83:26:ae:
                    3a:cb:73:57:86:92:3d:4c:b1:8f:29:65:dc:b4:cd:
                    8e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:68:90:50:3D:79:8F:F1:39:12:31:B7:81:48:F8:09:64:33:F2:27
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e3137392e3230342e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.179.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:8a:18:b5:6d:04:74:c3:2c:81:46:bb:5a:0f:1b:dd:02:b6:
         d0:ca:35:31:11:a7:26:52:4b:e4:34:d7:f2:42:58:fe:fa:33:
         c5:98:d2:19:a2:2b:f1:0b:84:a3:16:e9:74:36:89:22:ed:eb:
         68:19:81:09:a6:05:a9:73:ee:19:99:7d:da:07:6a:27:27:f8:
         2b:a7:2f:65:e3:fb:a3:75:92:ef:62:89:22:2c:48:bf:65:0a:
         cd:f3:5a:56:a7:11:e2:f9:06:f0:5b:7e:cb:8d:b7:d0:b9:8d:
         ee:c6:b8:73:af:ce:d5:d4:78:c2:cd:41:de:3c:60:ae:9a:83:
         ec:de:44:39:7c:49:75:18:9e:e6:d6:bc:5b:db:c5:80:48:ba:
         bc:3f:32:36:9e:5c:18:98:08:d1:69:1e:8d:89:1b:7b:ec:7a:
         e6:fd:37:f6:f3:55:e2:41:53:49:c0:dc:e5:6a:1e:19:05:5a:
         e4:8c:2c:f7:eb:1c:d6:f2:28:06:1d:18:3b:38:d5:60:bb:e5:
         fb:a5:e4:02:7a:dd:2c:37:aa:0e:39:35:2f:00:fa:82:3a:23:
         05:0b:f7:10:cf:ea:70:fb:76:7d:63:69:74:95:7a:55:ce:7e:
         8d:1f:b9:09:03:af:c5:eb:26:85:85:f7:15:ad:85:96:39:55:
         e8:5d:e4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net