Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39342e3130312e3131352e302f32342d3234203d3e2030.roa
File:                     39342e3130312e3131352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          kSDjYUln+wNjN/FCatHfjlJR79YyLRnm8evgXCRWQTY=
Subject key identifier:   CB:5E:BB:0A:07:78:66:D4:16:6B:C5:FF:2A:C1:C7:2D:99:A8:C8:89
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       55C9A455241137D5CE992590CA4D8685EB05EF30
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39342e3130312e3131352e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:08:51 +0000
ROA not before:           Fri 03 Mar 2023 16:03:51 +0000
ROA not after:            Fri 01 Mar 2024 16:08:51 +0000
asID:                     0
IP address blocks:        94.101.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c9:a4:55:24:11:37:d5:ce:99:25:90:ca:4d:86:85:eb:05:ef:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:03:51 2023 GMT
            Not After : Mar  1 16:08:51 2024 GMT
        Subject: CN=CB5EBB0A077866D4166BC5FF2AC1C72D99A8C889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:18:e9:36:7a:fb:1a:f3:75:31:64:a0:5b:
                    0c:a9:32:e6:66:ac:a4:71:17:ca:a8:dd:ee:23:8d:
                    1f:f2:13:21:a3:2c:d3:4a:0d:e6:81:56:37:d4:2f:
                    8e:f9:59:7b:f6:08:ee:7f:65:03:d4:a7:86:c4:3f:
                    27:dc:1a:e7:20:7c:76:2f:78:de:35:bc:8b:88:0c:
                    4c:94:2a:45:50:97:7d:e9:86:54:84:eb:46:0d:f5:
                    b3:0e:ab:88:fe:13:22:ec:0b:47:02:9c:a6:ea:0a:
                    2a:3b:14:7b:77:ed:1b:a5:78:b6:aa:8b:f0:97:0d:
                    9e:ba:ed:95:54:cf:2c:84:86:47:9a:f1:16:00:42:
                    c2:f5:8c:0a:b9:c1:09:c0:d7:54:a0:25:f2:ea:05:
                    24:cc:38:09:c0:1c:59:38:ef:60:c6:64:43:a8:f2:
                    42:8c:88:50:18:36:7d:1e:33:dd:ec:8b:91:2a:71:
                    4a:30:10:13:24:cf:ff:e9:39:04:7a:5e:63:09:ad:
                    71:6d:f0:a2:95:76:61:48:97:34:5a:bd:1c:fa:ac:
                    bf:2d:cf:8d:e2:b5:a8:00:7c:32:28:4d:99:a9:31:
                    37:15:2c:55:0e:87:ec:b9:4f:a1:da:f8:b8:c9:41:
                    c2:3a:0b:d8:06:42:f9:df:9b:f2:c0:c8:58:64:67:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5E:BB:0A:07:78:66:D4:16:6B:C5:FF:2A:C1:C7:2D:99:A8:C8:89
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39342e3130312e3131352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.101.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:ee:b5:74:9a:44:1c:ab:e1:42:20:e7:2b:e8:73:87:e2:fb:
         74:2f:24:d5:87:ee:3d:ec:98:07:d1:0d:c5:ee:cf:ff:84:7d:
         94:e1:8a:54:fe:c5:24:e5:87:b5:7d:00:64:1c:e9:88:2a:f1:
         3b:50:40:e5:78:a5:9f:ad:c3:a7:11:80:54:12:97:4a:4e:23:
         aa:a2:d6:cd:84:e2:37:6e:ee:18:90:a3:66:7a:6e:3c:75:53:
         9b:b5:99:5e:61:41:83:43:15:56:d1:3e:cb:f6:43:86:a5:bd:
         bc:82:c0:87:60:b4:0a:2c:17:d7:e1:46:08:ac:1c:52:dc:93:
         e4:f7:53:1c:13:ce:a7:45:c6:ab:23:b3:fa:2e:2b:c0:86:a5:
         dc:18:dd:ef:12:72:75:d7:b1:ed:9b:98:42:44:77:6e:7d:b6:
         e8:28:15:73:ad:ac:b5:fc:da:dd:ae:cc:c3:69:9a:6a:d2:87:
         b3:10:bf:13:40:ed:10:36:a7:e9:0c:d2:f1:62:de:d8:ef:b1:
         2f:eb:54:7c:b9:30:61:06:44:62:5e:3c:ee:8d:ac:e2:2f:37:
         ac:ef:96:59:58:34:c4:71:97:c0:ac:95:ff:e7:c9:9f:2a:ca:
         cb:18:7a:60:54:25:71:4a:b4:df:ee:c9:c0:54:b5:9a:c2:ac:
         a2:bc:2d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net