Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e203633303233.roa
File:                     3139342e36302e3230312e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          /XRm9s0UDIWqmGbpYTG0HopgFpXlwyCbf/uy08+PSQ4=
Subject key identifier:   F9:68:60:6F:A1:1A:3C:B4:A1:32:A1:C4:B7:FC:17:49:8B:6C:75:57
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       6E0C73702AF9AD522E6DE5C5EA6E8627AE0A519B
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e203633303233.roa
Signing time:             Tue 09 Feb 2021 13:22:24 +0000
ROA not before:           Tue 09 Feb 2021 13:17:24 +0000
ROA not after:            Tue 08 Feb 2022 13:22:24 +0000
asID:                     63023
IP address blocks:        194.60.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0c:73:70:2a:f9:ad:52:2e:6d:e5:c5:ea:6e:86:27:ae:0a:51:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Feb  9 13:17:24 2021 GMT
            Not After : Feb  8 13:22:24 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dd:eb:62:c9:c5:cd:e1:83:b9:fe:f6:ed:57:
                    96:d4:a0:9e:12:28:bc:e9:2b:96:9a:91:97:6e:ef:
                    16:94:09:14:78:81:6d:20:fd:be:7c:f6:51:ee:81:
                    37:d3:31:c7:69:e9:40:91:e2:72:3b:a5:b2:3b:04:
                    fb:74:97:e8:6e:50:55:90:9c:54:70:31:32:16:b0:
                    e7:29:76:ad:61:6e:db:57:96:c9:76:1c:73:3b:4c:
                    57:15:04:7d:c4:ee:b7:09:c8:92:75:4b:83:97:94:
                    3c:e3:77:37:e4:ca:45:23:82:ac:e1:fb:42:2e:e7:
                    72:99:ea:4a:55:95:b9:f2:2e:f0:e1:59:21:b0:67:
                    16:26:27:71:73:74:25:8d:a2:35:b1:5e:d0:bd:b4:
                    32:a9:81:42:f6:cb:ea:16:c6:ea:77:49:3a:7c:b2:
                    99:68:f3:44:be:28:32:15:90:d7:5f:c9:12:ce:02:
                    4e:36:af:b1:f1:90:09:63:91:63:f9:c3:dc:57:22:
                    8c:eb:d3:5a:7a:52:90:23:b2:87:bb:27:d2:44:a8:
                    b3:22:ba:ed:da:96:37:11:b6:0c:b4:61:cf:f2:23:
                    25:a5:98:ca:c3:5b:6f:a0:de:7b:2a:e7:81:50:a4:
                    c4:e1:c5:83:52:d5:8a:2a:12:0d:3e:09:9b:de:b2:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:68:60:6F:A1:1A:3C:B4:A1:32:A1:C4:B7:FC:17:49:8B:6C:75:57
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:68:f7:1c:79:de:6c:9f:52:dc:71:d9:ea:96:55:db:dd:4a:
         2d:bf:0b:10:93:f7:0d:e1:dc:17:0e:a4:45:9e:72:7b:bf:96:
         ee:70:7d:82:8c:72:43:22:2a:01:0a:ff:b1:61:80:d3:58:ce:
         ab:e0:95:68:bb:6b:85:b1:b0:99:95:b8:65:44:cd:f3:0e:fb:
         03:10:43:2b:ad:85:9c:36:08:a7:c6:b3:17:88:78:7d:16:44:
         fd:5e:e7:8b:44:20:92:c4:b9:04:8b:cc:92:64:73:a4:36:bd:
         e0:75:c2:69:d8:c4:db:5f:fc:49:65:18:aa:42:17:54:71:87:
         56:79:4f:f9:7e:a9:b9:51:7d:68:04:e1:39:ce:46:ef:1b:87:
         40:57:51:44:29:f0:5a:9a:f8:3c:fa:28:97:84:0b:ca:a4:b3:
         21:f8:d4:08:f0:8d:09:b1:94:a0:bf:1e:8c:b2:57:36:33:b1:
         92:e5:fb:c9:74:6d:36:12:c5:4e:d7:a4:1a:8c:84:7b:ed:84:
         81:77:ed:51:30:74:dd:69:a4:72:c8:29:04:8e:c7:9b:16:dd:
         c5:c5:b4:6f:23:06:7d:ec:91:2d:e2:e1:c7:fa:40:60:7c:37:
         6c:a9:cf:8d:24:74:ee:03:e0:21:d6:7a:00:86:99:d6:72:96:
         67:97:4f:f7
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUbgxzcCr5rVIubeXF6m6GJ64KUZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMTAyMDkxMzE3MjRaFw0yMjAyMDgxMzIyMjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTdEREVCNjJDOUM1Q0RFMTgz
QjlGRUY2RUQ1Nzk2RDRBMDlFMTIyOEJDRTkyQjk2OUE5MTk3NkVFRjE2OTQwOTE0
Nzg4MTZEMjBGREJFN0NGNjUxRUU4MTM3RDMzMUM3NjlFOTQwOTFFMjcyM0JBNUIy
M0IwNEZCNzQ5N0U4NkU1MDU1OTA5QzU0NzAzMTMyMTZCMEU3Mjk3NkFENjE2RURC
NTc5NkM5NzYxQzczM0I0QzU3MTUwNDdEQzRFRUI3MDlDODkyNzU0QjgzOTc5NDND
RTM3NzM3RTRDQTQ1MjM4MkFDRTFGQjQyMkVFNzcyOTlFQTRBNTU5NUI5RjIyRUYw
RTE1OTIxQjA2NzE2MjYyNzcxNzM3NDI1OERBMjM1QjE1RUQwQkRCNDMyQTk4MTQy
RjZDQkVBMTZDNkVBNzc0OTNBN0NCMjk5NjhGMzQ0QkUyODMyMTU5MEQ3NUZDOTEy
Q0UwMjRFMzZBRkIxRjE5MDA5NjM5MTYzRjlDM0RDNTcyMjhDRUJEMzVBN0E1Mjkw
MjNCMjg3QkIyN0QyNDRBOEIzMjJCQUVEREE5NjM3MTFCNjBDQjQ2MUNGRjIyMzI1
QTU5OENBQzM1QjZGQTBERTdCMkFFNzgxNTBBNEM0RTFDNTgzNTJENThBMkExMjBE
M0UwOTlCREVCMjIwMzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA593rYsnFzeGDuf727VeW1KCeEii86SuWmpGXbu8WlAkUeIFtIP2+
fPZR7oE30zHHaelAkeJyO6WyOwT7dJfoblBVkJxUcDEyFrDnKXatYW7bV5bJdhxz
O0xXFQR9xO63CciSdUuDl5Q843c35MpFI4Ks4ftCLudymepKVZW58i7w4VkhsGcW
Jidxc3QljaI1sV7QvbQyqYFC9svqFsbqd0k6fLKZaPNEvigyFZDXX8kSzgJONq+x
8ZAJY5Fj+cPcVyKM69NaelKQI7KHuyfSRKizIrrt2pY3EbYMtGHP8iMlpZjKw1tv
oN57KueBUKTE4cWDUtWKKhINPgmb3rIgMwIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FPloYG+hGjy0oTKhxLf8F0mLbHVXMB8GA1UdIwQYMBaAFF3JcHVYJMuWfK1vO5ZH
CbCS1DBpMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC83LzVEQzk3
MDc1NTgyNENCOTY3Q0FENkYzQjk2NDcwOUIwOTJENDMwNjkuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9YY2x3ZFZna3k1WjhyVzg3bGtjSnNKTFVNR2suY2VyMIGI
BggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzcvMzEzOTM0MmUzNjMwMmUzMjMw
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzAzMjMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wjzJMA0GCSqGSIb3DQEBCwUAA4IBAQC8aPcced5sn1LccdnqllXb3UotvwsQk/cN
4dwXDqRFnnJ7v5bucH2CjHJDIioBCv+xYYDTWM6r4JVou2uFsbCZlbhlRM3zDvsD
EEMrrYWcNginxrMXiHh9FkT9XueLRCCSxLkEi8ySZHOkNr3gdcJp2MTbX/xJZRiq
QhdUcYdWeU/5fqm5UX1oBOE5zkbvG4dAV1FEKfBamvg8+iiXhAvKpLMh+NQI8I0J
sZSgvx6Mslc2M7GS5fvJdG02EsVO16QajIR77YSBd+1RMHTdaaRyyCkEjsebFt3F
xbRvIwZ97JEt4uHH+kBgfDdsqc+NJHTuA+Ah1noAhpnWcpZnl0/3
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net