Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139342e31352e3131302e302f32332d3234203d3e2030.roa
File:                     3139342e31352e3131302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          hdPPtzXHlxLv8QtSrnNBVWbuOKqdiRpKkDs0U11HaGc=
Subject key identifier:   F2:02:69:2C:E8:95:49:6E:86:11:D6:B1:8F:FD:5F:06:24:1A:71:11
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       30B44A111D729311C2E8B01913D3CDB3BE807E59
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e31352e3131302e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:10:17 +0000
ROA not before:           Fri 03 Mar 2023 16:05:17 +0000
ROA not after:            Fri 01 Mar 2024 16:10:17 +0000
asID:                     0
IP address blocks:        194.15.110.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b4:4a:11:1d:72:93:11:c2:e8:b0:19:13:d3:cd:b3:be:80:7e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:05:17 2023 GMT
            Not After : Mar  1 16:10:17 2024 GMT
        Subject: CN=F202692CE895496E8611D6B18FFD5F06241A7111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:c5:43:3f:f3:64:6b:44:94:45:42:f3:51:
                    64:de:61:03:0d:3a:4d:1d:bd:da:7b:1b:7c:80:78:
                    1b:7d:76:70:b6:d1:4f:02:dc:57:1e:9c:60:bd:1f:
                    4b:ae:3a:67:e2:cf:2c:3f:48:eb:12:8d:0d:70:15:
                    4d:7f:de:f3:ce:ff:36:33:5f:71:99:4e:34:89:ea:
                    9b:48:f7:1f:8a:b5:cc:2b:53:de:d4:29:29:96:e5:
                    0a:54:48:4c:88:f7:25:22:1e:f3:ad:6b:3a:49:a5:
                    ef:ea:3d:64:75:7e:b5:24:46:69:a0:7d:e1:7e:26:
                    fd:60:c9:d3:a2:33:f5:27:7c:a5:7f:62:ac:aa:c1:
                    5d:22:b0:74:68:c7:8b:b2:ce:2d:0d:11:72:63:75:
                    04:a0:b4:d8:8e:6b:e6:4a:cf:9c:68:12:aa:87:7f:
                    01:7c:90:16:1d:f7:73:b7:c3:0e:7e:20:bb:c6:33:
                    41:6f:a4:4e:7b:3d:66:0f:07:cb:4f:94:4a:a9:5f:
                    56:a2:ea:2e:65:e0:a1:5e:c9:09:c9:4f:a2:ed:25:
                    92:f1:5a:ff:af:26:73:ff:ac:91:d0:1a:ee:cf:92:
                    e6:e3:11:7b:d9:95:a7:a5:ee:87:58:d5:c4:b2:d8:
                    69:ed:61:b8:49:cb:b0:88:08:bb:7e:ed:6c:2f:2d:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:02:69:2C:E8:95:49:6E:86:11:D6:B1:8F:FD:5F:06:24:1A:71:11
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e31352e3131302e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:2f:09:41:16:2a:e9:14:f9:aa:14:82:a5:7e:6b:c0:2e:b6:
         56:99:37:13:5c:21:52:73:fc:a7:4d:eb:7a:36:0d:b3:da:31:
         3a:d1:86:20:2a:97:85:ed:88:3d:8f:97:17:23:2f:dc:65:6a:
         d1:96:a2:50:e9:dd:53:b0:b7:2b:00:1d:18:de:65:f0:8d:ca:
         bf:50:1c:29:23:10:bb:7e:34:b6:86:18:32:85:46:1c:2d:15:
         5b:a2:1a:8c:d6:af:3a:4c:a9:a6:a6:64:0c:94:c3:38:e3:b3:
         94:94:79:c2:3f:68:8d:19:b3:52:69:97:94:2f:18:ff:f6:63:
         5d:28:fa:d7:a9:fb:26:bd:cc:52:6a:db:85:3f:04:2d:59:0b:
         13:20:82:b2:b7:dd:46:69:e8:da:1d:31:78:be:f6:91:8c:ed:
         aa:ee:80:75:e7:ab:33:2f:9e:85:62:54:8e:db:f5:64:c5:24:
         b8:67:46:f0:3f:50:2d:a4:e7:d2:ca:59:e6:d6:06:e0:60:4e:
         d1:56:dc:4d:cf:ff:6a:10:dd:6f:39:c2:51:c0:59:ee:eb:7a:
         49:12:fb:9f:c3:14:06:27:84:4d:7b:65:6f:a4:4f:6e:aa:04:
         61:1b:49:3b:07:97:20:5d:26:9d:0b:b1:11:95:02:3a:de:0a:
         43:19:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net