Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e2030.roa
File:                     3139342e36302e3230302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          btnyykYE61/58wsMWoTehyJ27nzpMQgKs80qZsIAMY0=
Subject key identifier:   45:F1:CE:37:D7:B3:CC:4B:D3:FD:58:0F:BD:5B:5D:77:F0:D4:0C:F7
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       0284DC39AF7AF2DF178AC181851FCD3EBAD065D6
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e2030.roa
Signing time:             Sun 31 Jul 2022 05:24:31 +0000
ROA not before:           Sun 31 Jul 2022 05:19:31 +0000
ROA not after:            Sun 30 Jul 2023 05:24:31 +0000
asID:                     0
IP address blocks:        194.60.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:84:dc:39:af:7a:f2:df:17:8a:c1:81:85:1f:cd:3e:ba:d0:65:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jul 31 05:19:31 2022 GMT
            Not After : Jul 30 05:24:31 2023 GMT
        Subject: CN=45F1CE37D7B3CC4BD3FD580FBD5B5D77F0D40CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2e:45:14:1d:09:47:42:5e:8d:f6:6c:b4:4a:
                    d2:50:5a:0a:aa:f5:87:5c:8e:3b:80:99:98:58:58:
                    d6:fc:d7:17:8f:c7:20:7e:66:cc:2e:9f:a4:74:c4:
                    d3:3f:27:b1:dc:29:1f:18:8d:54:aa:74:94:bc:52:
                    ad:87:c4:00:fd:49:99:ec:2c:63:1f:77:54:c9:4e:
                    c8:6a:f3:46:44:41:79:c5:34:d2:9b:ec:8f:61:db:
                    3f:62:0b:df:fe:3f:0c:ae:72:55:18:13:f3:99:07:
                    64:f7:2c:05:6b:16:21:2a:11:2e:a2:c3:0c:b5:15:
                    05:9b:74:e6:9f:42:b3:ca:68:df:13:bd:42:0b:d9:
                    cf:ca:76:8e:b8:2b:0b:9d:b8:f3:a9:8e:0b:36:59:
                    d2:ad:f9:bf:ef:6b:aa:e9:59:99:28:71:6d:1d:c4:
                    6a:24:10:8c:df:d2:35:c3:2a:e1:b1:57:0a:45:a8:
                    51:4e:e3:96:e9:4f:42:3b:6a:1d:62:ee:d0:e3:fa:
                    14:ad:58:be:c7:ec:8e:90:ea:3e:c3:80:47:17:24:
                    d8:af:a7:e4:bb:fe:17:f7:1a:ef:17:33:fc:92:b0:
                    a7:9c:41:97:7c:6f:59:36:98:07:09:ad:fe:63:4b:
                    a6:74:b1:3e:27:a0:6e:33:28:d4:d3:33:97:d2:a9:
                    8a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F1:CE:37:D7:B3:CC:4B:D3:FD:58:0F:BD:5B:5D:77:F0:D4:0C:F7
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:d1:08:57:44:6d:bd:71:74:e3:80:de:45:88:28:69:5a:9c:
         66:7c:be:d6:94:75:cb:56:10:4c:0f:cc:48:b0:13:e9:73:ab:
         4c:06:aa:e0:cb:8e:ee:67:81:db:15:6c:9e:03:7d:9f:f2:05:
         c6:fb:ba:70:7b:3f:ac:e4:64:70:2a:e2:d4:cb:8a:76:87:58:
         f1:ca:81:79:02:f0:d1:39:1c:5f:73:99:d1:33:b0:d2:7b:a9:
         0b:d6:2e:b6:3a:a8:b3:80:a0:21:9e:1e:6d:ef:3a:8f:0d:ca:
         68:ab:98:20:53:75:91:a4:71:a7:6c:01:7b:57:85:21:62:68:
         ba:bd:7e:5f:3c:5a:f8:2c:09:3e:e6:d8:8a:55:ff:e6:46:20:
         89:92:b6:88:f7:46:45:56:a6:34:e6:70:d4:41:2a:7f:c8:b8:
         f4:09:79:a7:b5:0a:c3:8a:69:fc:c4:a4:82:a9:cc:a7:46:cd:
         dc:1b:5d:c9:ae:5b:d6:a4:ac:7e:9b:5b:e8:58:11:9b:2e:49:
         ad:dd:45:a1:5a:3c:92:65:fd:c8:66:3d:31:92:cf:7b:36:e5:
         cb:29:4f:63:39:fd:9e:6a:c2:32:97:3c:49:20:d6:67:e7:c3:
         32:4b:f7:68:02:7f:02:c4:48:44:c1:95:dc:7d:e5:9f:e2:68:
         00:ec:5e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net