Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e34332e36392e302f32342d3234203d3e2030.roa
File:                     3139332e34332e36392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          CiFSm8Nhpk9qZfL2yaRI9lIq5RVALd9r8FUGSLAZq7Y=
Subject key identifier:   CE:0E:1C:15:22:42:97:0C:8C:85:FB:11:E2:CD:63:5E:D2:DB:5F:F7
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       7DD28C1D22EA936C81E8324E4322A5412F181419
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e34332e36392e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:03:29 +0000
ROA not before:           Fri 03 Mar 2023 15:58:29 +0000
ROA not after:            Fri 01 Mar 2024 16:03:29 +0000
asID:                     0
IP address blocks:        193.43.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d2:8c:1d:22:ea:93:6c:81:e8:32:4e:43:22:a5:41:2f:18:14:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Mar  3 15:58:29 2023 GMT
            Not After : Mar  1 16:03:29 2024 GMT
        Subject: CN=CE0E1C152242970C8C85FB11E2CD635ED2DB5FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4e:fb:59:37:50:d6:47:d8:b4:32:ea:1c:5d:
                    ca:9c:3f:a8:6d:67:2a:87:11:37:d2:b4:03:0a:68:
                    c2:29:cf:93:0d:bc:70:f5:a8:8e:94:52:00:fd:7c:
                    ec:f1:80:b7:4d:5c:10:e4:42:a4:2f:62:3c:fb:f5:
                    f4:a9:77:05:27:05:6a:1c:53:9e:6d:01:ad:87:17:
                    52:23:7b:0a:d1:bc:62:37:98:ed:61:cf:73:e2:ea:
                    9f:2f:78:aa:7c:8a:da:53:b7:1f:5e:f0:50:7a:44:
                    db:42:5b:b0:74:e1:05:95:eb:95:e7:66:5a:dc:be:
                    a4:aa:c1:8f:7a:3e:b1:8d:f1:98:97:91:2e:ee:ff:
                    d9:8c:d1:da:6f:15:3e:f9:42:e3:97:fa:53:bf:a0:
                    34:ae:9f:ce:74:76:aa:ac:e3:e8:66:c3:f9:68:b1:
                    73:2f:8f:ee:82:f0:45:88:5b:88:a5:0c:44:f6:7e:
                    dd:a1:8e:62:67:01:86:66:cc:cd:c7:8e:c6:27:29:
                    7a:56:9f:30:f4:10:14:1d:1c:fc:db:3a:73:83:37:
                    8d:e9:22:e3:d3:38:5f:9f:27:a8:3b:d5:41:67:85:
                    b3:fb:51:a0:c2:f6:dc:8a:b6:22:0c:bd:fb:5f:a5:
                    04:2f:4c:ed:dc:7d:45:72:4a:b5:65:ec:fd:c9:d4:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:1C:15:22:42:97:0C:8C:85:FB:11:E2:CD:63:5E:D2:DB:5F:F7
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e34332e36392e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:18:f9:2d:a4:8e:7a:1a:f5:d9:9f:6f:99:78:28:c8:75:9e:
         26:56:a8:ab:cb:7b:27:3d:5d:33:34:de:64:c3:34:7e:a9:65:
         4b:0a:e5:70:67:1e:fd:58:4c:55:d2:56:1e:ee:c6:5e:fc:d6:
         ec:89:c0:f2:e0:f7:59:96:c2:fd:de:96:d3:c3:77:99:bb:b7:
         13:75:3e:b7:0b:49:b9:30:97:d9:fb:9a:f2:3f:ee:d9:7c:bb:
         e1:ec:e2:d3:88:d2:71:56:6b:c7:ab:62:75:b3:93:d4:5a:a4:
         91:82:de:cc:7b:74:ea:ce:8c:7a:52:03:0c:b2:b7:2f:62:37:
         fb:e7:7d:f5:32:5c:f7:e7:34:49:f2:f8:ba:7a:73:1c:9b:e6:
         41:cc:8d:fc:8d:e0:7c:89:59:0b:ac:af:5b:97:92:68:d8:84:
         3a:2f:bf:39:bc:0b:66:aa:46:ac:d2:b6:24:ea:8f:fb:eb:80:
         c4:c5:bc:b4:fc:cc:64:86:1c:3d:03:bb:1d:ac:9a:3e:e1:ff:
         2c:f7:88:3f:20:1e:40:4f:27:b0:14:de:5e:07:9f:f7:e1:5e:
         f7:c4:31:ac:ef:aa:61:6a:7b:af:ee:b6:0f:20:d7:53:85:ef:
         bf:2c:0b:19:79:0b:74:5f:48:d8:d7:3b:c8:f2:55:97:3c:15:
         e4:b7:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net