Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36312e302f32342d3234203d3e20323035383134.roa
File:                     3139332e32392e36312e302f32342d3234203d3e20323035383134.roa (raw, json)
Hash identifier:          4MsKEIQRF3rer9A5RH2d8k1agtf9EaQU0xdKslSJf3E=
Subject key identifier:   DE:C7:48:B4:62:DD:44:6E:54:78:23:F6:29:C2:6D:A2:F1:D3:4C:83
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       667B4B35721DEDE007F543AA6B1C1D8FB03FE136
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36312e302f32342d3234203d3e20323035383134.roa
Signing time:             Fri 27 Nov 2020 15:10:23 +0000
ROA not before:           Fri 27 Nov 2020 15:05:23 +0000
ROA not after:            Fri 26 Nov 2021 15:10:23 +0000
asID:                     205814
IP address blocks:        193.29.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7b:4b:35:72:1d:ed:e0:07:f5:43:aa:6b:1c:1d:8f:b0:3f:e1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 27 15:05:23 2020 GMT
            Not After : Nov 26 15:10:23 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:08:40:af:e9:ce:1b:8f:06:e2:d3:2e:67:
                    3e:4e:e1:17:f5:5a:05:10:17:32:2c:6c:4d:3f:89:
                    a2:d2:83:65:58:66:bf:84:de:36:1e:b1:be:de:94:
                    22:a9:48:48:d4:76:5a:b1:c8:8b:2f:70:73:f2:c6:
                    df:8b:94:fd:96:7f:4e:8a:4c:df:a7:ef:04:ef:a7:
                    3e:6f:f8:ee:11:6f:f8:e4:60:ad:c1:5f:86:9d:43:
                    e0:e4:28:81:6f:a0:8e:87:90:5a:52:64:b4:94:bc:
                    8d:ec:d0:ee:74:48:6c:5b:3e:e4:aa:79:a1:34:26:
                    ce:4a:ac:6f:fa:9e:3a:20:8c:c7:4f:91:3d:d1:ef:
                    05:aa:22:bf:7b:4f:23:05:97:48:a3:d2:d0:1c:fe:
                    58:d9:c9:90:c7:c5:12:b3:ee:1e:f0:bc:4c:ad:89:
                    b6:be:e9:17:49:9d:e6:6e:5a:a2:c1:0d:ec:b9:8e:
                    e1:8b:92:69:fa:db:62:05:9c:76:bf:a0:8b:96:e5:
                    ed:e8:95:22:5b:54:ad:b1:85:44:86:1b:74:cd:d4:
                    97:bc:0e:42:fb:59:94:5d:85:bb:a3:ba:88:ee:ad:
                    b0:0e:dd:c6:b0:d8:1d:14:14:f9:64:bf:83:c4:b0:
                    03:db:57:34:57:54:9f:8e:7a:73:8d:58:b1:ef:b5:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C7:48:B4:62:DD:44:6E:54:78:23:F6:29:C2:6D:A2:F1:D3:4C:83
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36312e302f32342d3234203d3e20323035383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:4e:d7:ec:db:57:dc:a3:9d:28:9e:01:94:88:dc:e0:f0:07:
         54:c6:7e:6b:f8:65:d4:e4:a5:f2:38:43:42:ad:5a:77:eb:7b:
         91:60:43:ee:25:49:c7:f7:3c:c4:5e:eb:7d:fe:c3:33:09:45:
         d1:8b:62:e2:75:3f:34:0f:b3:d6:83:1a:1c:ed:a0:5a:05:46:
         dd:ca:5a:c5:13:ad:7e:f7:31:03:fa:70:44:40:f3:3f:b4:80:
         0d:2a:6a:66:f5:a3:f4:d2:39:cb:4a:9c:8e:fe:0e:27:4c:ff:
         83:41:64:d2:0d:6e:f7:6e:47:c2:d8:fb:17:8c:8c:6e:64:42:
         c1:ab:bb:2a:51:1b:b1:17:9d:ac:37:e9:5c:93:7c:58:5a:dc:
         84:f5:95:68:52:b3:88:1e:a2:f9:12:4b:8e:95:3d:07:e0:0d:
         df:07:28:bb:58:b8:a1:fb:d2:7f:91:83:b7:ea:85:f9:2f:64:
         51:b1:f5:1e:0d:1c:1b:c4:5d:4d:89:b8:fd:f4:48:11:6e:a5:
         ad:89:7d:4f:7c:17:5c:48:84:bc:1c:b5:6f:3a:1e:3c:0c:7c:
         dd:fa:79:3e:4b:cc:0f:77:74:b9:ab:61:68:b1:c9:53:73:dd:
         93:97:2b:5c:4e:cf:38:f9:30:cf:a3:18:ad:ed:8a:64:d5:1d:
         a4:86:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net