Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e203134363138.roa
File:                     3139342e3135362e3133362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          uosl6Nl8toaH1R8tbZ1ifsOUAgDDnBQAq5UQOm01tyE=
Subject key identifier:   FF:80:F2:A1:9F:5B:DB:63:4E:E3:FE:2B:AF:02:6B:AA:0E:47:3A:84
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       39963FC0E2ACD24ABA6D24749F13EA3E37AD70BC
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 28 Jun 2022 04:40:56 +0000
ROA not before:           Tue 28 Jun 2022 04:35:56 +0000
ROA not after:            Tue 27 Jun 2023 04:40:56 +0000
asID:                     14618
IP address blocks:        194.156.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:96:3f:c0:e2:ac:d2:4a:ba:6d:24:74:9f:13:ea:3e:37:ad:70:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Jun 28 04:35:56 2022 GMT
            Not After : Jun 27 04:40:56 2023 GMT
        Subject: CN=FF80F2A19F5BDB634EE3FE2BAF026BAA0E473A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:fc:ea:4f:71:db:5c:5d:78:33:74:61:d1:
                    8e:c3:f3:78:c2:35:c4:26:7a:f7:ca:07:a5:77:a1:
                    1c:a5:49:9c:24:d7:02:57:5f:a8:b7:06:3f:20:62:
                    b8:f6:e6:07:fb:16:ee:27:56:ae:74:b1:2c:a6:a3:
                    20:55:69:82:19:48:2d:7d:92:72:6d:5d:a3:b4:d0:
                    41:37:7e:b6:9a:eb:b7:27:e1:60:f0:0f:43:4b:7d:
                    55:b4:22:1c:2b:6d:fa:3c:f4:66:4d:70:40:fe:9b:
                    13:1d:f5:8b:1c:dc:0e:86:1d:5e:71:fc:1c:0e:ef:
                    61:2c:13:39:4e:8c:e7:6f:b5:f8:27:48:44:45:16:
                    3d:9c:f8:60:36:63:76:74:23:64:26:f3:51:60:94:
                    f3:be:92:93:a1:4b:15:c0:c3:35:d3:a2:70:2d:13:
                    23:e4:f4:6c:8c:34:ad:71:4e:2e:eb:b1:8a:86:18:
                    ee:95:f1:bf:c9:4f:5e:bd:39:a6:b7:cb:b0:40:25:
                    66:e7:e1:a9:90:62:d5:37:81:85:97:a0:86:b3:da:
                    38:2c:27:98:c7:99:0e:e1:43:40:5c:ff:c9:f7:49:
                    20:09:6f:83:cd:7c:86:b9:95:64:24:37:f0:83:b0:
                    cf:cd:6c:dd:52:cc:f0:ec:08:1d:d7:bd:20:54:63:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:80:F2:A1:9F:5B:DB:63:4E:E3:FE:2B:AF:02:6B:AA:0E:47:3A:84
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:37:0f:2c:09:2c:7d:fe:25:b6:6f:c0:14:e0:e8:38:8e:b5:
         2d:9d:cd:c2:b1:37:a0:b3:32:5f:f8:6b:10:20:a2:cf:d9:8c:
         68:f1:60:e1:39:14:97:b7:32:79:ac:49:7a:af:8f:7d:5a:10:
         f8:69:ba:86:13:ad:8c:6b:04:50:6a:93:98:51:13:f4:14:ab:
         a4:0b:ce:19:4c:67:44:85:d2:b0:ff:8e:a6:f6:ec:00:73:6b:
         ae:2d:f7:c9:4b:6d:64:a4:71:22:52:71:cd:77:0c:aa:42:9d:
         b4:55:ed:a0:2d:33:15:ef:fc:2e:5c:d1:ce:4a:96:e8:b6:6e:
         0b:07:cd:c2:e4:29:a1:28:50:33:cf:b5:0d:43:86:8d:74:e1:
         7a:15:3f:3e:b6:2d:15:b0:a4:21:ad:16:f6:d0:69:50:b5:ed:
         37:77:92:3c:b1:92:5b:3d:df:93:81:8a:f0:d5:82:32:30:c9:
         52:ea:c1:e6:b9:8e:58:4f:92:94:97:90:6d:d6:08:f0:d4:37:
         5f:ee:01:6e:8c:48:12:2d:60:48:d4:7b:49:b8:af:09:4d:9f:
         5a:a8:c2:b8:17:73:11:55:60:37:ba:93:a5:71:9a:d9:55:48:
         27:8f:82:21:bb:9a:55:04:ec:04:eb:89:9c:02:52:9d:5b:21:
         49:61:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net