Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36302e302f32342d3332203d3e20313336373837.roa
File:                     3139332e32392e36302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          YRNr/W9sheB4nIPn06jK0aRSKn0jFWVCUYxd/ntCgrA=
Subject key identifier:   F0:B4:80:93:BF:B5:DF:DA:60:BD:84:C1:37:E0:D2:B2:F7:79:88:14
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       62309D465551CFA92239DFD98DF85D523E58F0E6
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36302e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:20:57 +0000
ROA not before:           Wed 28 Dec 2022 09:15:57 +0000
ROA not after:            Wed 27 Dec 2023 09:20:57 +0000
asID:                     136787
IP address blocks:        193.29.60.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:30:9d:46:55:51:cf:a9:22:39:df:d9:8d:f8:5d:52:3e:58:f0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Dec 28 09:15:57 2022 GMT
            Not After : Dec 27 09:20:57 2023 GMT
        Subject: CN=F0B48093BFB5DFDA60BD84C137E0D2B2F7798814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:bb:77:f3:81:1f:d1:c2:d4:85:18:c8:c8:
                    d4:80:ec:e5:04:ad:c3:02:5d:b3:1f:9a:72:1d:db:
                    0e:23:54:e8:9a:5c:75:9a:65:cc:9f:4c:0e:58:01:
                    bf:5b:95:88:95:81:5b:58:7e:43:16:73:32:32:b6:
                    eb:59:41:1e:06:3e:72:2c:8d:16:73:54:e3:c4:5a:
                    8c:ce:8a:48:8a:da:a3:cb:92:e5:de:06:33:46:30:
                    81:ad:74:c0:46:28:e5:a1:50:37:bc:6f:28:7d:dc:
                    7c:35:fe:fd:b7:b1:8e:92:d4:2f:5d:2a:0c:02:8f:
                    b1:0d:cf:14:02:e2:04:a9:06:33:9d:1d:0e:f8:ac:
                    40:35:16:58:29:a3:cf:bd:26:7d:48:df:67:0f:87:
                    07:75:96:d5:84:7a:42:9e:4c:d9:bd:21:55:2a:f9:
                    20:c6:92:19:0f:57:7b:ab:36:4c:1c:4e:80:8b:ae:
                    f7:b2:2f:de:3a:db:f4:60:c0:14:05:60:d8:55:01:
                    3a:d1:32:6d:45:ad:3a:41:dd:80:e5:b3:4c:84:21:
                    e6:e0:65:12:64:1d:f8:b5:16:c7:14:7d:7a:b7:c7:
                    27:08:d8:09:ef:9c:17:eb:75:ee:85:b4:d8:22:1d:
                    6e:0e:c0:40:cc:41:f8:e5:63:7f:47:6b:f8:97:ab:
                    4b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B4:80:93:BF:B5:DF:DA:60:BD:84:C1:37:E0:D2:B2:F7:79:88:14
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36302e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:4d:ee:9f:6d:b1:07:b4:f0:70:e9:4e:07:44:72:98:ca:83:
         9b:1a:d8:67:78:d5:5b:cd:66:af:15:67:f5:9e:87:d1:0b:6b:
         83:e2:f2:57:0d:5b:76:7f:1a:e1:a6:ab:74:d5:59:8f:e8:6e:
         49:00:93:c9:cf:7e:d9:7f:44:aa:4d:39:ed:e5:5f:f4:bb:ef:
         34:ed:7b:3d:49:96:06:10:a2:f7:a9:1f:b8:ce:be:90:01:37:
         18:e7:14:69:27:13:44:1b:e3:49:05:66:0f:6e:13:6b:e6:b4:
         c1:3d:9d:db:72:ad:13:0e:01:48:44:b1:55:a7:fe:f8:6e:c6:
         f0:ed:11:a0:ac:d2:db:b1:bc:47:2b:df:38:48:30:dc:92:d5:
         f1:e0:b0:db:b3:00:8a:9b:9e:52:f9:f4:7b:56:30:68:84:0c:
         5c:3a:49:c8:67:0e:20:3f:ed:20:27:2c:47:6c:17:40:75:5f:
         69:cb:be:6a:d1:4e:ce:0a:91:2d:b4:c3:e9:5c:7e:9c:c3:c6:
         be:8d:a1:74:1a:e2:2f:b1:9b:4a:09:50:9d:8a:45:bc:c7:d6:
         79:92:a9:0f:69:b5:39:86:19:d0:86:5f:7a:71:f3:eb:97:ca:
         98:37:ae:30:98:a7:27:d1:46:48:fc:39:bc:d6:93:85:5e:71:
         b0:9c:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net