Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139332e34362e3234332e302f32342d3332203d3e203531313637.roa
File:                     3139332e34362e3234332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          71+vJ/oyZ6/d86ulyVl1ATXr1DtT5Jw2gLdt4AaWB2I=
Subject key identifier:   28:29:42:49:DE:58:3F:81:B6:86:42:A9:AE:59:B4:60:03:3C:7C:48
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       106B1F4C4339322E63ACACACAC9B8F0E7295B481
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139332e34362e3234332e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:05 +0000
ROA not before:           Sat 22 Oct 2022 04:29:05 +0000
ROA not after:            Sat 21 Oct 2023 04:34:05 +0000
asID:                     51167
IP address blocks:        193.46.243.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6b:1f:4c:43:39:32:2e:63:ac:ac:ac:ac:9b:8f:0e:72:95:b4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:05 2022 GMT
            Not After : Oct 21 04:34:05 2023 GMT
        Subject: CN=28294249DE583F81B68642A9AE59B460033C7C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:40:44:59:67:00:11:11:b4:91:6f:eb:b4:
                    7b:16:73:f8:a7:52:fa:38:cc:c9:33:da:a8:14:7b:
                    7f:bf:91:34:d9:47:6f:d9:49:ed:13:d7:48:15:5b:
                    20:c0:4d:58:23:1c:dc:26:ca:0c:8c:40:88:11:ea:
                    4b:81:01:03:14:89:91:3f:47:2d:6a:03:4b:b4:af:
                    66:06:54:87:2b:2b:b3:95:29:8e:6b:13:10:f6:56:
                    d2:7e:bd:62:0b:59:7f:c5:59:f5:e8:58:8d:d9:be:
                    0c:c2:f0:a8:4c:d8:23:92:59:20:62:5b:b9:5b:85:
                    28:ac:88:86:d4:68:16:ff:65:97:5e:b1:3b:17:11:
                    06:09:a1:83:7d:a4:23:fe:89:7b:ba:85:f5:08:ab:
                    45:e6:73:bd:7c:66:57:51:c2:bb:8d:a1:cf:81:e2:
                    c8:59:0e:eb:5b:44:80:84:e8:e2:73:e8:b6:9d:01:
                    59:03:c3:0e:3e:72:77:3a:a6:e3:23:63:53:52:83:
                    8f:0b:1e:5e:b8:c4:74:62:41:62:ac:7d:34:60:de:
                    51:4b:da:4a:93:9b:61:cf:67:fe:f3:e7:4c:23:c2:
                    19:2f:ed:32:f5:1c:31:ee:1b:0e:1b:6b:27:bf:7b:
                    47:6f:98:c7:eb:87:a8:03:39:d3:03:97:26:14:a5:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:29:42:49:DE:58:3F:81:B6:86:42:A9:AE:59:B4:60:03:3C:7C:48
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139332e34362e3234332e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:48:e6:18:df:5d:ce:61:82:4b:cd:7b:f8:10:5f:50:81:20:
         79:56:3a:89:ff:92:4e:d8:1d:97:0a:a6:b8:b1:23:30:8a:b5:
         6a:88:af:f4:c2:92:89:85:e1:13:93:83:b1:c2:cb:11:1d:3e:
         7d:fb:24:ee:3c:fb:4f:e7:a9:dc:c1:94:09:3b:ba:c2:8c:a6:
         c4:6c:e2:7e:41:f2:58:e7:ed:50:76:5a:a3:e5:03:04:1a:93:
         c1:ef:9b:b0:21:76:bb:9c:d6:7b:e6:7c:2a:4c:96:f7:db:96:
         c9:3e:94:99:2a:5b:11:91:ce:ef:a1:3d:92:9b:0b:d1:59:27:
         e1:df:c9:5c:da:ce:50:3a:6c:e6:e7:bc:c8:7f:05:86:2b:02:
         71:63:62:19:1a:b8:96:5d:d4:c2:de:55:aa:e0:21:05:b4:09:
         e4:e7:48:7c:76:b6:05:88:af:58:f7:e8:39:6f:10:a8:51:9b:
         93:94:62:f4:1c:aa:5e:8e:e0:06:ee:dc:12:3c:28:c3:83:2e:
         77:d3:0e:08:57:c8:7b:9b:c9:e9:0c:5e:9b:54:1a:90:84:2c:
         db:2d:95:e5:04:51:90:4e:19:6e:f2:4f:04:0d:43:6a:74:cc:
         ed:0b:f3:27:5d:76:12:ac:f6:fd:5c:7f:02:b4:34:95:92:2d:
         66:28:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net