Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3231332e3139302e372e302f32342d3234203d3e203437353833.roa
File:                     3231332e3139302e372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          vvZ8S6WDeRXP88Lt1HXFyO5ZlWNz34LH7GgbzkJEPjs=
Subject key identifier:   B1:89:4B:E1:99:BE:72:1A:7F:E6:0C:92:4F:9A:7F:AF:15:12:B3:49
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       2E597982BCC0067D4C2F7D70B0A352DA47DE815A
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3231332e3139302e372e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:00 +0000
ROA not before:           Sat 22 Oct 2022 04:29:00 +0000
ROA not after:            Sat 21 Oct 2023 04:34:00 +0000
asID:                     47583
IP address blocks:        213.190.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:59:79:82:bc:c0:06:7d:4c:2f:7d:70:b0:a3:52:da:47:de:81:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:00 2022 GMT
            Not After : Oct 21 04:34:00 2023 GMT
        Subject: CN=B1894BE199BE721A7FE60C924F9A7FAF1512B349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e0:5b:4e:ec:98:78:92:10:ca:6a:39:de:1c:
                    c9:ea:49:c1:88:02:48:86:64:41:8c:0c:0d:a8:13:
                    d9:81:de:a6:e1:c7:cc:b4:02:e2:15:10:6e:48:d1:
                    27:e5:ca:f2:47:32:11:90:91:60:2c:10:65:a8:4d:
                    86:79:d8:55:82:fa:14:18:a1:a1:68:b7:c9:e9:49:
                    70:f0:c6:cb:46:9b:46:ac:3e:ec:55:27:77:39:eb:
                    73:05:93:e6:bb:dc:97:b4:d4:ee:b1:bc:47:07:35:
                    08:b6:ee:0c:1a:21:3a:43:5d:59:63:d3:29:7b:6d:
                    c0:4f:a3:ba:9f:0e:b0:ab:89:51:71:e3:91:07:43:
                    b7:9e:09:c3:bc:82:24:66:45:5d:3e:15:07:9d:37:
                    9d:19:c5:b0:f5:4c:85:89:1a:03:60:71:1d:49:0d:
                    99:2f:97:fb:6e:c5:66:e2:52:be:58:3f:6b:12:05:
                    8c:7a:15:d1:31:0f:3a:67:90:d5:79:4b:7f:3a:76:
                    36:dc:ce:7e:d0:5d:f3:fe:e6:f0:49:5d:42:29:64:
                    86:bd:53:31:34:36:fe:1e:b1:82:e2:06:0c:45:b0:
                    fb:c2:89:a6:fe:4e:be:58:9b:75:a8:db:a2:22:2f:
                    ae:06:fd:53:20:19:45:f3:a9:fc:1f:3b:32:76:ea:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:4B:E1:99:BE:72:1A:7F:E6:0C:92:4F:9A:7F:AF:15:12:B3:49
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3231332e3139302e372e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.190.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:63:db:85:a9:6e:5b:ea:eb:b1:a5:99:c8:6e:13:c0:56:98:
         7d:d4:82:a3:a8:81:18:3f:a9:cf:15:94:9e:74:68:ae:a7:37:
         d8:e7:54:ad:f9:00:2a:61:91:1b:91:f3:83:7a:76:15:8f:3d:
         06:58:20:42:86:51:f6:db:73:8d:8c:2e:5a:95:dc:18:1a:71:
         17:35:6c:7f:8c:6c:03:94:b2:d0:fa:fa:34:28:cf:04:21:b7:
         72:34:2d:5c:cd:1b:ca:e5:ce:0f:da:3e:3a:7f:53:7b:ff:0f:
         cb:6d:45:ad:7b:8e:50:09:2e:ad:58:c6:8c:3b:f0:1a:58:3a:
         6b:ce:71:1c:48:55:20:34:59:0d:0b:3b:4f:f8:86:b8:04:56:
         37:21:b2:fe:55:ff:7f:d0:db:4e:c0:16:72:0c:bf:ba:a0:dd:
         27:69:d8:50:e6:74:57:92:88:dc:33:e4:1d:11:9c:f7:ef:ce:
         38:e3:ab:87:fb:a9:a0:11:6f:8d:df:fc:b8:4c:df:18:12:ce:
         06:04:f5:00:2a:ee:0c:26:39:cb:a9:42:4f:1d:c0:22:97:b3:
         df:4d:b0:dd:b9:bf:63:95:50:55:2b:b9:50:5d:fe:34:db:a6:
         ba:2d:e5:6d:51:7f:63:28:9d:9a:d2:c4:e1:70:f6:08:12:a7:
         dc:80:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net