Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e3136382e3139322e302f32332d3234203d3e203437353833.roa
File:                     3139332e3136382e3139322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          v/2vRjs7mB3Ip0WAV0zi52kWMN1cyvafcA7PkXJb10s=
Subject key identifier:   AB:7B:DF:68:29:5F:B9:5F:9C:FB:4E:96:82:EC:38:EF:3E:B4:D6:49
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       1823180D7420C9BECAFEB64FFB08FEA0453D4887
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e3136382e3139322e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:55 +0000
ROA not before:           Sat 22 Oct 2022 04:28:55 +0000
ROA not after:            Sat 21 Oct 2023 04:33:55 +0000
asID:                     47583
IP address blocks:        193.168.192.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:23:18:0d:74:20:c9:be:ca:fe:b6:4f:fb:08:fe:a0:45:3d:48:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:55 2022 GMT
            Not After : Oct 21 04:33:55 2023 GMT
        Subject: CN=AB7BDF68295FB95F9CFB4E9682EC38EF3EB4D649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:ef:46:1f:3a:cd:82:90:95:2d:22:4e:d7:
                    0c:ed:fb:a9:a9:80:34:3a:30:68:58:0d:2f:45:cc:
                    df:2b:d7:79:e9:01:46:d8:6a:43:15:90:16:5d:56:
                    43:2a:e4:70:25:fa:59:9d:cc:3d:3e:93:6c:42:8d:
                    0d:5e:e9:cb:43:23:cb:fa:a6:80:d1:08:4f:8a:22:
                    e2:ce:d2:68:f6:c2:b9:d9:f9:84:7c:0a:6c:bd:f7:
                    f9:43:85:d4:2c:5d:a6:f5:9d:01:5d:f8:4d:c1:01:
                    fa:46:44:68:f6:60:46:67:6d:d8:66:f0:2e:5d:09:
                    4a:4e:d4:de:50:26:a5:5f:c9:a9:9f:1e:90:f6:5e:
                    cc:7d:2e:85:ba:6f:d9:d2:3e:f5:f0:e9:50:77:7c:
                    98:0e:00:54:9d:af:7b:3d:67:8e:2b:55:30:1f:bd:
                    68:bf:45:c1:72:70:e7:b1:df:25:e6:29:ff:b2:5f:
                    4c:c4:ff:34:99:f4:34:31:80:8a:64:4d:54:e4:47:
                    6e:51:3b:af:0c:f2:18:67:0b:0c:dc:aa:8a:cd:21:
                    aa:7f:41:53:fa:5f:64:15:8e:98:d9:78:ce:f1:a5:
                    2a:51:da:a4:e9:0a:29:84:d9:19:1a:9e:f3:68:d6:
                    8b:02:9d:88:65:32:10:ce:57:8c:0d:a5:04:60:d6:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7B:DF:68:29:5F:B9:5F:9C:FB:4E:96:82:EC:38:EF:3E:B4:D6:49
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e3136382e3139322e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.168.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:23:a2:87:1f:5a:ea:5c:32:bf:62:00:3e:15:a4:a5:0a:8b:
         fd:a0:bd:f4:da:b8:9f:0d:a2:f7:7b:68:2c:e6:18:7d:c1:3a:
         06:5a:46:d3:8b:b5:87:75:39:82:bb:e4:fc:26:af:ca:63:b6:
         6c:b6:f7:89:7a:71:06:01:41:74:5f:00:1c:60:99:97:80:25:
         6e:8e:30:d2:29:87:78:0d:48:35:d0:e3:96:39:20:99:82:87:
         ae:d2:97:7e:74:45:54:46:12:53:3b:5a:2f:5a:4f:39:aa:dc:
         b5:b4:13:18:1c:7f:20:ce:81:30:26:75:4d:a2:d4:a2:db:03:
         a5:7c:31:17:da:d7:81:2e:c5:a3:21:91:af:a6:62:47:59:65:
         02:cd:6d:ea:f6:a2:4b:6b:38:89:9f:37:e0:aa:5b:f9:b3:83:
         a8:f6:4f:90:e2:61:b6:f0:1a:e4:c7:13:1b:95:51:2f:1e:5f:
         f2:8e:af:e1:60:10:a2:54:04:ae:61:0a:f5:b9:3e:7e:15:de:
         d3:46:ce:e5:16:e5:89:53:e2:99:05:6b:94:12:aa:5d:f0:3d:
         b6:4a:09:ec:a7:7b:65:c8:a2:f3:a9:f7:b9:36:f3:f8:2a:7d:
         f9:c1:ae:c4:ac:cf:fa:ef:49:d7:f8:a1:79:3f:b6:4c:a6:35:
         c0:c1:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net