Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3138352e3139332e31382e302f32342d3234203d3e2030.roa
File:                     3138352e3139332e31382e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          Jhf5j6nLgZOo0VhTwOwh/YQsUSILQsJRYq5ppEGFZwk=
Subject key identifier:   4A:88:36:82:B0:DB:3A:87:2F:D0:05:31:30:72:3A:13:00:32:83:52
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       479185969FC1DF58B6A92954C621FD1BD8D2932E
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3138352e3139332e31382e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:14:20 +0000
ROA not before:           Fri 03 Mar 2023 16:09:20 +0000
ROA not after:            Fri 01 Mar 2024 16:14:20 +0000
asID:                     0
IP address blocks:        185.193.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:91:85:96:9f:c1:df:58:b6:a9:29:54:c6:21:fd:1b:d8:d2:93:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:09:20 2023 GMT
            Not After : Mar  1 16:14:20 2024 GMT
        Subject: CN=4A883682B0DB3A872FD0053130723A1300328352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:89:0a:d2:99:54:79:03:f6:f0:9a:1a:b7:
                    40:d6:3b:4a:50:f6:f3:25:39:9a:31:6a:ca:bc:bb:
                    e4:50:b0:b7:a5:23:63:6d:1a:a2:ea:99:a9:51:8c:
                    e6:9e:18:bf:c2:8f:3a:be:26:f1:2f:2e:a5:13:38:
                    c1:82:4b:07:6f:cb:cf:23:47:3e:bf:09:52:93:c3:
                    85:3a:98:b2:d0:78:6a:ea:ff:72:16:bb:1a:46:ac:
                    c0:88:ca:13:a5:90:ed:ff:c5:c6:2f:a2:40:36:f3:
                    fc:e1:85:29:56:75:80:d5:ff:34:fa:14:75:13:e7:
                    b5:99:a7:1b:63:8e:52:28:76:d4:b3:77:d1:b9:b4:
                    65:25:fb:c3:63:13:d9:7d:b2:5a:ab:f2:6c:95:c7:
                    6f:8f:e7:b9:e7:be:e1:32:ff:b3:34:7e:6e:a1:c5:
                    36:91:0b:09:68:60:d7:44:e9:2b:e1:8d:66:d8:ee:
                    39:cb:b1:d1:d5:0a:a8:f2:83:af:69:75:8f:7f:cb:
                    55:6d:1f:2c:a8:37:91:94:d2:f2:7b:86:42:59:ec:
                    00:fd:7a:c6:9b:a0:f0:57:98:94:0e:4c:ee:88:fc:
                    da:4a:67:97:95:ff:07:83:4c:df:9c:e2:db:8c:50:
                    ec:41:4f:43:4f:4f:bf:6c:dc:23:50:ce:9a:48:f8:
                    de:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:88:36:82:B0:DB:3A:87:2F:D0:05:31:30:72:3A:13:00:32:83:52
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3138352e3139332e31382e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:44:33:87:a6:2f:d6:4c:05:88:e6:51:74:ab:06:6c:65:cf:
         d0:34:9a:76:ed:2b:1c:4d:33:f8:ac:a8:55:b1:76:9e:e3:46:
         53:40:8a:a0:0d:a8:86:10:24:6b:3d:6d:07:58:77:49:00:04:
         8e:af:06:0f:2c:2f:50:28:1d:b8:fa:61:14:e3:e6:d1:a5:b7:
         02:f0:46:69:6a:7c:b3:72:c9:05:0b:81:78:91:6c:d5:db:80:
         3e:a7:98:ba:20:1f:79:74:6f:d7:69:bc:4d:bd:a2:b1:87:a1:
         4a:c4:43:f3:74:55:d7:c8:60:53:3c:e7:9a:ab:78:1a:72:93:
         4a:db:ca:4c:e4:c3:84:fa:b7:d5:b1:d3:2f:b9:56:46:5d:75:
         ac:37:19:d9:09:3b:ac:16:86:24:5d:f3:0d:e9:8b:c3:b4:e3:
         ce:b9:b0:68:3c:bf:3e:53:5e:f4:1c:ef:3d:73:52:aa:be:81:
         46:8c:1d:92:df:03:5c:46:03:02:b8:cd:0e:74:a0:f1:d9:a6:
         b3:5d:ef:ef:93:12:9a:4a:9c:48:df:be:d5:77:2a:0c:a5:14:
         5d:9f:d5:9c:bc:3d:41:ee:f2:55:1f:d4:ef:5d:02:12:df:bd:
         ad:bf:1e:ca:4d:36:40:a3:25:9c:48:91:05:87:8c:3a:a2:89:
         9a:b8:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net