Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e203233343730.roa
File:                     3139332e32322e3134342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          qfwiaTrEX/ZLyGqalH9uOiyMdL1aPkT4qyfQ3KCCZds=
Subject key identifier:   00:85:28:DB:3F:E0:71:7E:50:EA:E0:B1:FB:C8:23:78:4F:C6:EB:BE
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       681F2783B007840A6AF85A355778B33E68D2B6C4
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 28 Jun 2022 04:40:57 +0000
ROA not before:           Tue 28 Jun 2022 04:35:57 +0000
ROA not after:            Tue 27 Jun 2023 04:40:57 +0000
asID:                     23470
IP address blocks:        193.22.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1f:27:83:b0:07:84:0a:6a:f8:5a:35:57:78:b3:3e:68:d2:b6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Jun 28 04:35:57 2022 GMT
            Not After : Jun 27 04:40:57 2023 GMT
        Subject: CN=008528DB3FE0717E50EAE0B1FBC823784FC6EBBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:2d:43:c5:11:74:f0:c1:91:69:59:b1:a9:
                    14:9e:4b:4e:0c:bb:6b:eb:df:ee:d6:a3:99:7c:db:
                    b8:00:ea:4f:69:7e:04:8a:2c:95:cd:b8:34:6e:67:
                    ba:1a:e4:41:e2:8a:9a:da:7e:ca:79:22:01:42:e0:
                    8f:e1:b9:82:b8:3a:83:f5:c2:fa:ea:54:10:75:e2:
                    98:1e:02:21:f2:d9:00:01:bc:f1:97:06:57:fc:8a:
                    23:ed:77:f0:f4:41:0f:c5:ee:e6:40:43:21:c5:b9:
                    8c:99:aa:db:dd:cb:1d:53:10:35:3d:23:77:88:fd:
                    89:c0:19:35:6c:1e:2a:c2:8f:6d:58:54:e0:5f:ac:
                    57:74:61:d3:bb:c5:ba:6a:fb:5f:43:1e:ba:c1:84:
                    ed:f0:45:9d:86:f1:da:a1:60:d9:01:e9:73:a4:58:
                    a6:6d:e1:0b:53:3c:b4:c1:e3:ec:6d:7b:4e:50:f3:
                    42:65:7c:7c:c6:34:36:cb:4f:3f:b2:c2:d7:7c:e3:
                    5f:b8:02:ea:e7:a9:84:26:1c:eb:e6:97:a3:fc:21:
                    72:57:92:ef:2f:e9:a3:96:87:d7:38:f1:7e:3e:b3:
                    0e:64:71:22:a0:ac:bb:bc:19:a3:49:ed:50:3d:3f:
                    09:51:0c:82:d5:2d:d6:f6:48:b7:24:e0:2c:f2:90:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:85:28:DB:3F:E0:71:7E:50:EA:E0:B1:FB:C8:23:78:4F:C6:EB:BE
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:54:55:30:1c:22:3e:ed:aa:7a:c9:8f:e4:11:3f:33:e2:
         86:e2:27:cb:92:f4:4f:b7:5e:c5:eb:86:5f:63:3c:e2:7a:61:
         eb:10:98:64:cb:be:51:20:8c:0b:57:97:d9:6c:4f:ce:89:af:
         b3:83:04:ba:0f:71:12:e2:f8:d9:e9:bc:db:ee:e1:5d:87:9b:
         77:40:a0:4c:51:62:84:46:e1:d1:4e:cc:9a:60:1d:a8:95:b1:
         3e:ce:33:e0:ce:43:72:3e:7c:8b:27:23:67:28:e9:3f:55:d4:
         9d:01:12:63:87:59:18:b9:d5:33:c7:ac:29:42:df:61:9f:ed:
         31:f6:5e:87:e9:2c:04:08:b4:8e:75:33:ad:c2:8b:ea:34:7b:
         fb:42:37:cf:73:52:69:e7:b5:4a:4e:2f:5e:8a:83:04:2e:92:
         53:2e:01:83:28:3e:da:5a:67:e9:cc:5a:98:2d:92:eb:c0:6e:
         46:f8:29:58:30:11:78:a3:51:75:f6:06:7f:1f:b8:62:da:fc:
         37:3a:c9:0d:d5:fd:17:9f:5b:fa:66:fb:ef:51:41:12:d3:6d:
         17:16:cd:81:17:85:97:cd:12:a8:8b:b2:eb:44:81:71:d9:f1:
         00:c9:c1:cc:ef:ee:a3:e4:32:07:16:a3:96:d1:d8:03:15:7f:
         0b:c3:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net