Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139332e3134382e37342e302f32342d3234203d3e2030.roa
File:                     3139332e3134382e37342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          QB9gf59XGl40spJXx/bjWPw2JBWsHVbuwGZmQj4YMCY=
Subject key identifier:   2D:25:8E:EA:00:1E:09:B9:9B:F2:28:C2:FA:D7:F1:BB:86:4E:8B:51
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       6646EAB9DDD1B261D2330B47C621B41437E9D48A
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139332e3134382e37342e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:11:41 +0000
ROA not before:           Fri 03 Mar 2023 16:06:41 +0000
ROA not after:            Fri 01 Mar 2024 16:11:41 +0000
asID:                     0
IP address blocks:        193.148.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:46:ea:b9:dd:d1:b2:61:d2:33:0b:47:c6:21:b4:14:37:e9:d4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:06:41 2023 GMT
            Not After : Mar  1 16:11:41 2024 GMT
        Subject: CN=2D258EEA001E09B99BF228C2FAD7F1BB864E8B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:ae:f1:ee:d4:da:07:f5:bd:45:cd:b5:aa:
                    7e:96:17:af:e0:6b:2d:5d:5e:9e:9d:78:26:64:c4:
                    e6:40:fb:1d:02:54:a0:aa:46:6c:3e:15:e7:34:51:
                    7b:e0:3c:b7:bb:e1:46:a6:a0:4a:be:2a:51:cf:71:
                    42:3c:94:5d:f0:f7:95:83:86:ae:47:c2:15:1d:0d:
                    fe:8b:52:f0:12:09:73:f4:18:16:83:93:ea:be:e3:
                    98:24:09:63:f8:6e:2c:b9:bc:fe:c5:b8:15:35:61:
                    0f:50:54:4f:e1:f3:4b:35:ce:9f:ac:75:7e:8a:bc:
                    1b:d4:f2:1f:be:12:42:ab:90:11:f3:66:6e:f8:54:
                    62:b1:8a:51:09:0d:dc:3f:de:69:75:7d:b3:1d:80:
                    fc:67:70:82:6a:96:b3:6a:9a:3a:35:73:39:c5:de:
                    c8:67:c0:ab:1f:39:d0:c9:47:3e:6c:08:d9:47:9c:
                    81:75:e3:eb:88:da:b3:5c:ac:1b:c6:75:a9:d8:35:
                    8e:e2:89:e1:e4:2d:ed:f5:2e:d6:90:26:59:3f:45:
                    64:8a:db:a5:b1:1d:49:22:69:c9:76:4e:77:a8:cc:
                    35:d3:99:c9:75:14:a4:86:f0:a5:94:16:bc:7d:85:
                    58:dc:33:77:13:5a:75:54:44:72:96:74:19:99:90:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:25:8E:EA:00:1E:09:B9:9B:F2:28:C2:FA:D7:F1:BB:86:4E:8B:51
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139332e3134382e37342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.148.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:e5:55:f9:66:90:4e:43:12:e5:a5:fe:dd:0f:f6:a3:bf:77:
         99:f8:1f:50:e3:6d:c1:36:c6:87:aa:ca:12:ba:cd:b9:88:a8:
         89:c8:6f:46:6f:cb:e8:22:ba:af:52:6f:85:16:35:06:bc:dc:
         32:04:c1:38:9c:bf:f8:46:03:0b:fe:45:d3:35:f2:46:e9:2f:
         11:bf:c4:5e:73:69:a1:d1:62:dc:62:5d:f1:f5:16:37:5c:62:
         5a:9f:93:59:94:cd:9a:5d:98:b5:bd:eb:5d:c2:b5:95:43:fd:
         51:1f:6b:14:5f:e9:13:7f:d0:65:36:c1:8c:9b:69:91:5a:aa:
         68:94:78:60:21:fd:f1:e2:03:d3:4a:47:c0:e4:8b:e9:23:27:
         47:a9:15:42:d2:85:78:0e:a7:6f:a2:70:16:8c:24:f6:3d:10:
         f6:ec:40:73:1c:85:b7:0f:54:55:36:80:32:81:70:fb:7f:00:
         21:cd:8b:43:7f:ad:0c:fe:ce:fa:16:de:7f:d9:25:3f:2a:42:
         c2:72:54:5d:8c:32:e4:cb:41:c1:5f:eb:f6:b2:51:96:41:4b:
         9e:11:c2:52:27:d0:48:f5:8c:e5:cc:2f:0d:47:e9:6d:d6:4b:
         fe:09:b7:b6:d1:81:2c:5b:27:68:2f:48:ef:8b:5f:d5:15:aa:
         92:99:86:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net