Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e2037343839.roa
File:                     3139342e36302e3230312e302f32342d3234203d3e2037343839.roa (raw, json)
Hash identifier:          nPVZaFAXi3kyNQmipQroasjckzjZtwi2WnCBs/JQavQ=
Subject key identifier:   8C:97:1B:EB:85:9E:7E:37:52:F1:DE:FF:A9:F5:1D:C3:2A:57:BD:FA
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       1E05DD765EE47CEE0D4BD774189A94BB1AF0C27C
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e2037343839.roa
Signing time:             Fri 27 Nov 2020 15:10:22 +0000
ROA not before:           Fri 27 Nov 2020 15:05:22 +0000
ROA not after:            Fri 26 Nov 2021 15:10:22 +0000
asID:                     7489
IP address blocks:        194.60.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:05:dd:76:5e:e4:7c:ee:0d:4b:d7:74:18:9a:94:bb:1a:f0:c2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:22 2020 GMT
            Not After : Nov 26 15:10:22 2021 GMT
        Subject: CN=3082010A0282010100CC2E46887A1946EAF2A25000180E65FCEB77E207588B6A84D54AFE5D2DCCA1564BCEF212491A1140BDC94C0E9500768AC64CC4BFCB6AAF05E66737233A863215D0812AD471608DDECC2AF461FEC26B7EC8C78E7B1A2DC2943F7DD953BB2C5015A63ABF0D79475685056238DE957A6BF34C05A01774171ADFB7003887D5EE159CA7466694D327FE4A80C539B419C25678AC5B04AB9C35445A403C372427617B597FE88451AEB627E2235A02CC0C98BAF31EAAD02C2846E0C7EF0166671329B2360962ECC99D7AD480907378593BF99840F53B295B4ED1D874CCCC1FF6C31EC408E859D5E96EED6E22EB5C2F52EDD37E80CF548BD9FC76C0A9F8195609EEC269DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:46:88:7a:19:46:ea:f2:a2:50:00:18:0e:
                    65:fc:eb:77:e2:07:58:8b:6a:84:d5:4a:fe:5d:2d:
                    cc:a1:56:4b:ce:f2:12:49:1a:11:40:bd:c9:4c:0e:
                    95:00:76:8a:c6:4c:c4:bf:cb:6a:af:05:e6:67:37:
                    23:3a:86:32:15:d0:81:2a:d4:71:60:8d:de:cc:2a:
                    f4:61:fe:c2:6b:7e:c8:c7:8e:7b:1a:2d:c2:94:3f:
                    7d:d9:53:bb:2c:50:15:a6:3a:bf:0d:79:47:56:85:
                    05:62:38:de:95:7a:6b:f3:4c:05:a0:17:74:17:1a:
                    df:b7:00:38:87:d5:ee:15:9c:a7:46:66:94:d3:27:
                    fe:4a:80:c5:39:b4:19:c2:56:78:ac:5b:04:ab:9c:
                    35:44:5a:40:3c:37:24:27:61:7b:59:7f:e8:84:51:
                    ae:b6:27:e2:23:5a:02:cc:0c:98:ba:f3:1e:aa:d0:
                    2c:28:46:e0:c7:ef:01:66:67:13:29:b2:36:09:62:
                    ec:c9:9d:7a:d4:80:90:73:78:59:3b:f9:98:40:f5:
                    3b:29:5b:4e:d1:d8:74:cc:cc:1f:f6:c3:1e:c4:08:
                    e8:59:d5:e9:6e:ed:6e:22:eb:5c:2f:52:ed:d3:7e:
                    80:cf:54:8b:d9:fc:76:c0:a9:f8:19:56:09:ee:c2:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:97:1B:EB:85:9E:7E:37:52:F1:DE:FF:A9:F5:1D:C3:2A:57:BD:FA
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e2037343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:c9:de:c6:fc:a1:80:87:24:ad:ac:99:15:cc:4c:0e:8e:
         39:7c:67:6a:34:9b:18:a6:56:71:f6:33:d3:05:2c:31:85:ea:
         72:d9:f3:79:0a:ab:e1:c7:4b:c1:8c:9a:b3:39:e5:4f:70:84:
         d4:16:94:bf:85:c3:b5:6f:99:d1:b4:d9:f1:4f:a7:c8:74:21:
         d4:94:f1:81:cc:b0:01:2b:df:66:73:c2:d6:e9:95:8e:99:9a:
         91:8b:b5:0b:d8:c8:92:cb:08:cd:f4:01:cf:1a:c6:e2:9a:43:
         b2:89:3d:99:ae:87:c4:8d:7b:56:6b:b2:ea:a3:7a:ec:0a:0c:
         6f:b3:5c:21:a5:eb:e7:ca:43:25:ea:8c:32:c7:5c:a0:a6:6b:
         9b:d6:1a:26:82:d7:ff:70:1c:72:89:48:1c:5e:a3:a4:c2:e1:
         29:da:ce:92:c1:a9:6d:74:be:9b:fc:1e:47:26:be:7c:37:05:
         11:4e:31:ed:cc:3f:08:32:af:ea:9d:2f:06:f4:c8:76:23:76:
         5a:0a:2d:12:63:19:84:96:ae:59:7a:c5:35:b6:cc:9c:b1:5b:
         0f:27:bc:13:9b:f3:f6:0d:c8:09:d8:e6:8a:c1:cc:d0:20:e3:
         62:ca:66:f5:a7:23:4f:b5:82:7f:df:99:65:3c:b1:59:1e:b1:
         74:2c:84:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net