Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa
File:                     39332e3137372e39362e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          o+726jyjYRkhVgAJOnLOQoc+6khxzsFsBBGZJKonwr0=
Subject key identifier:   EB:77:F2:56:4B:A5:D5:F3:54:E0:EC:B8:22:33:0F:A4:A0:90:61:3E
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       753E1C2FE14F64777BE7BEEA89383028BD25CE45
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:34:00 +0000
ROA not before:           Sat 22 Oct 2022 04:29:00 +0000
ROA not after:            Sat 21 Oct 2023 04:34:00 +0000
asID:                     204170
IP address blocks:        93.177.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3e:1c:2f:e1:4f:64:77:7b:e7:be:ea:89:38:30:28:bd:25:ce:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:00 2022 GMT
            Not After : Oct 21 04:34:00 2023 GMT
        Subject: CN=EB77F2564BA5D5F354E0ECB822330FA4A090613E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:18:3d:62:a4:a6:51:fe:81:46:1f:fa:7d:
                    d4:1d:14:b6:46:e1:63:93:b2:92:51:77:dc:ce:d7:
                    2a:7a:04:12:af:2d:ad:c9:90:c8:4f:9f:0d:60:16:
                    f8:14:e0:a9:f2:a6:c5:96:db:f7:bd:7b:b0:ab:1c:
                    27:5e:04:40:f7:dd:bd:3f:c8:ad:09:76:d4:18:1e:
                    05:80:1a:51:9c:94:3a:a3:6e:1a:f0:b0:8e:0f:8d:
                    22:6b:14:73:99:d1:30:99:4c:8e:fc:c8:c9:d6:bf:
                    44:fe:cc:3c:cb:8c:1f:5a:89:a0:52:02:26:42:bd:
                    4a:41:1a:15:5b:22:e0:7d:4e:46:9f:f6:e8:90:47:
                    42:7f:1e:a8:50:8a:86:3d:39:33:f7:a7:8f:92:d1:
                    05:cd:c7:64:39:11:16:9a:11:2e:14:34:72:32:65:
                    f4:e4:2d:4f:2d:c2:9c:10:9a:97:76:d9:a3:98:98:
                    e0:c8:1a:57:fd:4e:ad:55:d2:18:aa:1a:20:73:32:
                    70:59:2f:3b:80:4c:2a:71:53:bd:60:ed:fa:be:62:
                    a6:e7:5b:68:7d:65:fb:c4:1a:dc:36:d6:31:dd:69:
                    92:4b:d3:30:55:bf:6b:b1:ea:e6:cd:a2:97:c8:fc:
                    4e:49:87:2c:31:bf:b9:d9:e9:d4:06:9f:fe:29:69:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:77:F2:56:4B:A5:D5:F3:54:E0:EC:B8:22:33:0F:A4:A0:90:61:3E
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:38:49:0e:00:3d:ee:cb:76:e1:3e:69:44:f4:09:9f:de:c9:
         b7:7a:41:18:61:80:2b:77:83:5b:4a:09:3f:16:8c:7f:18:c3:
         49:25:8e:bc:49:bb:3a:91:b2:d3:e9:aa:83:23:f6:fd:ac:e1:
         9e:c2:c5:79:2a:10:15:91:ae:92:3d:0f:8f:32:61:fb:d4:28:
         7e:c3:0f:80:21:c7:aa:d1:2f:2b:a4:64:a8:47:ad:f7:fe:c0:
         e0:69:8c:65:4d:90:82:45:05:24:ab:c7:6f:33:d7:b4:32:f2:
         e6:df:61:a4:ee:ce:e4:e6:39:70:a7:9f:29:9e:16:fa:16:d5:
         6b:3f:5c:7e:7e:a0:e6:9f:e0:40:8e:ed:24:a1:00:57:99:f7:
         da:12:9c:5e:7c:f5:d4:b3:c8:df:2a:0f:76:d4:c9:ec:7c:52:
         02:4b:3a:b6:02:74:9d:18:dd:20:75:5a:54:8b:54:69:38:ad:
         7d:90:15:e9:39:4f:fb:2d:d5:df:7c:41:4d:e6:d0:ed:ff:c9:
         22:72:96:06:4b:0e:d2:0f:99:62:d8:29:ce:47:15:69:64:8c:
         fd:5c:8b:3c:94:66:68:0e:18:00:34:71:4e:05:41:2e:1e:87:
         3a:65:47:23:a7:d9:cc:03:10:3c:0c:d8:bb:09:50:ea:b5:17:
         b9:e2:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net