Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3234203d3e203631333137.roa
File:                     39332e3137372e39362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          rHICvQ8ve8SFyHCGxAWHG6z9tm0VwBF5Wz/fCOulCuw=
Subject key identifier:   50:A8:E5:6B:E3:29:47:8B:66:12:1A:31:A9:F6:5D:B2:8A:E1:FE:D4
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       475FA1637A42A4671A38349B92293ECDD6933979
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:16 +0000
ROA not before:           Tue 28 Jun 2022 04:35:16 +0000
ROA not after:            Tue 27 Jun 2023 04:40:16 +0000
asID:                     61317
IP address blocks:        93.177.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5f:a1:63:7a:42:a4:67:1a:38:34:9b:92:29:3e:cd:d6:93:39:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Jun 28 04:35:16 2022 GMT
            Not After : Jun 27 04:40:16 2023 GMT
        Subject: CN=50A8E56BE329478B66121A31A9F65DB28AE1FED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:14:b6:08:f8:fb:14:b7:07:e5:b8:60:16:
                    a3:c9:68:d1:96:5c:66:4a:9e:28:cf:7e:db:57:fe:
                    6b:90:7c:ce:ba:0e:99:d3:91:bb:63:02:8d:55:12:
                    4b:f0:3a:a8:04:b2:cb:e2:a6:05:60:60:6f:3c:c2:
                    a7:58:51:d8:9c:3d:2a:75:db:7f:7c:ef:37:a7:b8:
                    1f:8c:0a:64:8e:c8:20:0b:3d:58:d6:87:d2:09:14:
                    1e:62:9e:b3:bb:44:6f:83:cc:ab:82:9b:24:16:bb:
                    e0:cb:66:03:53:92:8b:e1:7a:9a:b5:ec:41:a2:7a:
                    0b:86:78:3e:a8:08:bc:05:d7:3d:9d:ae:6f:43:25:
                    89:0c:1b:f0:d7:f2:f3:c0:8c:48:94:57:20:55:a3:
                    28:bb:d5:80:3d:a4:ea:47:4e:60:6c:6a:a3:e8:ec:
                    a5:49:e9:cf:3c:70:5d:1f:af:7a:3a:ec:29:13:be:
                    4a:09:fd:84:db:a8:2f:ad:e7:83:e5:32:a1:6c:c4:
                    45:d1:6d:40:01:b6:ab:a9:55:7d:97:8c:64:14:78:
                    86:7b:22:be:ef:0f:7c:26:69:29:c3:be:a3:dc:91:
                    67:13:b9:74:db:7d:1a:81:5e:95:0e:87:25:85:6d:
                    1b:35:65:13:cb:39:38:f5:1d:e7:12:99:3a:21:e5:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A8:E5:6B:E3:29:47:8B:66:12:1A:31:A9:F6:5D:B2:8A:E1:FE:D4
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39332e3137372e39362e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:18:26:83:07:69:5a:75:e0:f0:a3:8e:11:2c:52:01:92:
         6b:6f:41:79:bd:69:88:15:d8:3c:cc:cf:ca:b7:b8:b7:0a:b4:
         86:ec:41:31:96:c4:b5:7f:df:a9:5f:91:e3:ae:77:f2:9e:6b:
         7d:b3:e7:ca:dc:72:4e:0a:fe:cb:57:3e:33:bb:43:8e:c5:95:
         6b:db:b8:6a:3a:96:95:6a:df:b9:11:ee:44:a5:14:2b:60:ad:
         ed:9a:2a:95:62:05:ba:4d:49:10:2b:8f:9d:f5:a4:f6:4e:25:
         8e:57:45:8f:4a:79:d7:cd:e3:ff:1c:35:28:9e:e8:10:ec:fd:
         14:37:d7:81:ff:1b:34:77:9b:f6:1c:08:9d:21:64:c2:f8:de:
         21:05:0a:7a:5f:1f:47:41:d8:b1:d4:33:88:b4:4a:04:d3:08:
         83:1b:e5:c4:98:b6:e7:09:44:2e:ae:22:49:09:7e:57:a1:25:
         8b:fd:76:06:8a:1d:ff:e5:af:7f:b9:cc:32:47:e9:e7:8d:81:
         5a:20:f8:84:27:40:4e:ff:97:0b:9d:e2:cc:f4:09:41:64:49:
         62:47:04:d8:26:4c:d6:56:a5:5e:ef:25:e7:06:0c:68:1b:b2:
         66:b1:41:85:27:10:41:a0:39:5c:35:40:4b:3b:d2:7b:d0:dd:
         87:f9:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net