Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e20323132353630.roa
File:                     33312e3138372e37322e302f32342d3234203d3e20323132353630.roa (raw, json)
Hash identifier:          jzphhEexs8Vr8mpdSznqayDUVX6TzKIgrXpCOxtvM1A=
Subject key identifier:   A6:A6:51:68:24:C3:99:92:16:21:5A:B2:E0:E4:A0:70:F8:DB:D3:25
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       29A6F67EF550CBC44BC98B0140928B293BF66C75
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e20323132353630.roa
Signing time:             Thu 10 Dec 2020 16:09:55 +0000
ROA not before:           Thu 10 Dec 2020 16:04:55 +0000
ROA not after:            Thu 09 Dec 2021 16:09:55 +0000
asID:                     212560
IP address blocks:        31.187.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a6:f6:7e:f5:50:cb:c4:4b:c9:8b:01:40:92:8b:29:3b:f6:6c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 10 16:04:55 2020 GMT
            Not After : Dec  9 16:09:55 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:1b:57:ed:e9:ff:56:52:a6:b0:24:09:3c:
                    c4:ae:ed:c1:82:01:85:f6:7f:35:d5:3f:cf:2b:95:
                    ce:5d:6e:f5:4e:e0:d3:92:76:cf:2b:1b:72:a6:ab:
                    b2:5d:1d:d2:8a:b4:d9:45:44:1f:06:27:40:8f:bb:
                    9c:0b:6b:81:42:c6:4b:bf:70:4f:fa:6d:fb:2b:aa:
                    9e:27:5c:e4:04:4f:e7:d4:1b:be:88:b6:af:db:0a:
                    52:84:f9:42:2b:32:53:a8:18:6b:00:7b:f8:c8:97:
                    9b:91:47:7c:51:ff:66:a4:d1:b4:dc:e5:43:56:d2:
                    1b:82:ac:af:9d:5f:ff:9d:42:9d:01:dd:8f:50:79:
                    e2:f2:78:5a:07:a8:0f:51:e4:5c:e1:de:33:5e:8a:
                    23:57:a6:77:c1:56:4a:7b:e2:35:51:22:04:b8:7d:
                    98:bd:c3:f5:a5:4a:b3:48:b2:f7:85:77:5b:c3:a5:
                    ac:de:c2:30:5e:04:6f:8a:a3:00:6c:6e:a9:f1:74:
                    22:b4:40:5f:35:96:eb:f3:ea:41:ff:73:be:9b:d6:
                    67:05:c7:a2:fe:7a:cb:5c:3d:ff:94:3d:b1:7a:ca:
                    b8:23:da:12:44:dd:4b:aa:82:3f:08:f6:9a:61:9e:
                    86:f9:4c:ad:12:28:18:d5:92:5d:46:4b:f1:eb:77:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A6:51:68:24:C3:99:92:16:21:5A:B2:E0:E4:A0:70:F8:DB:D3:25
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e20323132353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:95:aa:ec:a9:72:bf:de:d2:4d:db:40:8c:bd:26:47:b7:f9:
         91:24:b9:c4:59:55:38:68:8a:4b:08:c6:29:0f:4e:ce:e9:fb:
         99:40:cf:51:2d:33:16:b7:d1:1f:52:99:ee:50:d3:79:a0:af:
         6d:2c:ed:a9:fd:96:3c:d9:b4:e8:c3:e9:31:3d:c8:76:fd:db:
         18:ae:ed:33:69:b5:50:19:e0:9a:c2:99:e6:0a:bc:54:d3:5e:
         1f:e8:49:2a:d0:31:c7:3d:93:a2:78:aa:25:15:3e:de:1e:52:
         cb:13:f5:09:9b:d7:14:57:be:ab:3a:12:b7:1d:74:e0:41:17:
         3f:10:0a:e2:ba:ed:57:fc:5c:8c:04:91:54:70:69:6f:e3:55:
         af:c7:75:ba:b3:9b:76:c9:1c:31:7d:bb:02:a8:23:78:b6:35:
         1e:e4:a7:6d:fe:07:f1:92:44:4a:e2:b2:9b:ad:03:04:12:88:
         53:01:ba:67:73:45:45:18:4a:03:b0:f0:3a:76:5c:94:63:e5:
         3a:49:94:d8:a4:e1:11:cc:d7:8c:e9:84:23:4f:17:d0:42:fb:
         34:10:f6:07:4f:1c:fe:a2:e9:06:d2:95:ec:30:80:8c:ae:62:
         64:10:88:eb:28:a7:79:7a:5c:5a:74:70:5a:9f:5d:80:67:8b:
         5e:cf:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net