Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/40/3139342e33312e3135302e302f32342d3234203d3e203631333137.roa
File:                     3139342e33312e3135302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          MVaHtDixxeoOa+yn8oQ26bo0pfg28INt1NyR0ldXcEw=
Subject key identifier:   A8:B3:D1:30:BD:3E:82:A4:63:69:A0:93:68:E7:13:44:6B:45:80:7B
Certificate issuer:       /CN=541d1d33145f1775fde0bee29e51cf452af8263b
Certificate serial:       2FF82D130B9420DBD0F753B51A8DF1D6718FE31D
Authority key identifier: 54:1D:1D:33:14:5F:17:75:FD:E0:BE:E2:9E:51:CF:45:2A:F8:26:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VB0dMxRfF3X94L7inlHPRSr4Jjs.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/40/3139342e33312e3135302e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:24:34 +0000
ROA not before:           Tue 01 Dec 2020 23:19:34 +0000
ROA not after:            Tue 30 Nov 2021 23:24:34 +0000
asID:                     61317
IP address blocks:        194.31.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f8:2d:13:0b:94:20:db:d0:f7:53:b5:1a:8d:f1:d6:71:8f:e3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541d1d33145f1775fde0bee29e51cf452af8263b
        Validity
            Not Before: Dec  1 23:19:34 2020 GMT
            Not After : Nov 30 23:24:34 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:5a:c7:cc:56:d0:57:6e:a5:9e:d4:74:04:
                    84:5e:9a:f2:4c:5e:a0:bc:ae:40:1e:a5:3d:0b:b7:
                    8b:94:7d:b2:c5:3d:49:75:71:5a:5c:bc:c8:1f:7c:
                    20:f9:d9:f2:cf:d2:b1:56:b8:38:7f:ff:f2:37:da:
                    e3:2a:bd:9b:4c:d2:35:24:bb:fb:d1:44:97:3c:84:
                    d0:c2:17:03:a2:b3:88:ee:8f:60:d8:c9:46:2e:bf:
                    92:96:c1:8c:bc:df:bd:22:04:66:fb:b9:14:65:b9:
                    09:3e:98:89:ab:ba:5d:af:7c:a6:67:5f:75:66:ed:
                    75:83:0d:45:f6:29:3c:b8:54:09:a2:cf:8f:2b:d1:
                    c1:4f:17:6d:71:6f:80:e3:bc:ec:7a:b9:57:f0:be:
                    bd:b7:4b:65:e8:1f:85:2b:d2:51:4e:5c:9f:0f:89:
                    54:3e:95:0d:1a:f5:a6:c7:5f:a6:e6:44:25:0b:15:
                    4c:56:01:d3:2c:3d:93:06:fc:71:b9:67:11:3d:cd:
                    89:d5:bd:a3:13:9a:77:a8:c0:5b:d2:2e:59:7a:38:
                    5d:3e:d6:3f:24:7d:3d:c5:ef:e5:8c:48:69:db:f2:
                    12:5d:0e:95:84:4a:2f:d9:ed:31:d7:dc:83:d2:e2:
                    65:4c:14:de:dc:17:33:e6:aa:ea:c8:cc:ff:75:d0:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B3:D1:30:BD:3E:82:A4:63:69:A0:93:68:E7:13:44:6B:45:80:7B
            X509v3 Authority Key Identifier:
                keyid:54:1D:1D:33:14:5F:17:75:FD:E0:BE:E2:9E:51:CF:45:2A:F8:26:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/40/541D1D33145F1775FDE0BEE29E51CF452AF8263B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB0dMxRfF3X94L7inlHPRSr4Jjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/40/3139342e33312e3135302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:64:3c:d1:50:b6:0b:08:3f:47:16:23:e6:9d:a4:7a:b5:7e:
         53:e9:84:c9:ec:d1:fb:e4:92:e3:02:0b:f2:78:24:a2:93:02:
         f3:a3:47:67:99:31:2f:76:25:3c:53:d3:3a:8b:91:cf:85:53:
         0f:88:05:e3:80:23:da:b5:90:b9:9a:76:52:7a:b0:94:9e:1e:
         89:90:0c:d1:7e:a8:37:35:7e:8d:3d:6d:30:95:2a:2a:12:64:
         a7:f9:14:2c:20:11:f4:99:66:b6:8e:2d:98:cc:3d:c6:3e:ac:
         ab:21:df:43:d8:37:9e:a4:84:48:fe:31:2f:f6:64:2a:63:92:
         ad:6e:43:54:fc:0f:75:c0:a6:78:10:d3:cb:44:b6:a1:ab:93:
         5d:e2:33:20:c9:61:79:1f:c9:de:13:97:a9:1d:ca:7f:07:ab:
         aa:9b:29:b7:3b:ab:2f:7d:a9:d3:3c:7a:74:47:77:ef:34:68:
         ea:cc:98:b7:01:30:2a:c1:e3:80:88:87:68:ef:57:4c:99:95:
         9f:5d:07:42:72:c6:12:4f:05:e8:56:de:07:6f:28:a9:41:2f:
         40:bd:a7:38:fa:01:ae:83:2b:fc:94:a8:ee:11:67:f3:81:dd:
         ae:78:ac:6a:82:1b:4e:10:03:76:1d:b1:b5:6f:33:c1:cf:cb:
         b5:73:50:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net