Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/171/3139352e32382e32312e302f32342d3234203d3e203631333137.roa
File:                     3139352e32382e32312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          zgP7bwWCBtIH790tWjQCwFBVvDm78HeFKE9Sc2lsT8E=
Subject key identifier:   A6:C7:E7:BE:6F:F6:15:54:3C:E0:4C:09:3B:A4:F2:42:EF:8D:D6:77
Certificate issuer:       /CN=aa7de755165181ee768376d8a9f7480309ad4c2e
Certificate serial:       0507D90B724E97F6E3CB93CCE84933BD5C397FF6
Authority key identifier: AA:7D:E7:55:16:51:81:EE:76:83:76:D8:A9:F7:48:03:09:AD:4C:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qn3nVRZRge52g3bYqfdIAwmtTC4.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/171/3139352e32382e32312e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 03 Dec 2020 15:57:10 +0000
ROA not before:           Thu 03 Dec 2020 15:52:10 +0000
ROA not after:            Thu 02 Dec 2021 15:57:10 +0000
asID:                     61317
IP address blocks:        195.28.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:07:d9:0b:72:4e:97:f6:e3:cb:93:cc:e8:49:33:bd:5c:39:7f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7de755165181ee768376d8a9f7480309ad4c2e
        Validity
            Not Before: Dec  3 15:52:10 2020 GMT
            Not After : Dec  2 15:57:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:62:3c:17:d4:a3:0a:67:80:dc:09:c9:27:
                    3f:ac:bc:19:15:99:ae:de:86:e7:4b:da:a6:4a:9f:
                    b0:47:db:b9:b9:f7:fa:de:cf:ec:5e:7b:14:c0:62:
                    ea:f2:06:90:d2:31:57:42:ef:00:2b:ea:a5:9b:1a:
                    87:eb:0c:c1:4a:38:b4:e0:7c:55:9c:da:78:2b:11:
                    fd:40:a5:35:96:28:70:70:6a:89:fd:54:c2:ea:e5:
                    7c:25:da:b0:a7:fd:be:c0:49:44:37:a8:cf:5c:58:
                    e7:57:8a:ad:fb:a3:a1:7f:30:c4:6c:cb:8b:5e:c7:
                    ff:b1:12:14:93:4d:25:a5:db:3a:a6:37:a9:d1:b4:
                    4d:62:15:4a:e8:a2:dc:ee:45:a6:7e:d6:05:ad:c7:
                    3e:93:5d:6c:e4:bf:af:f5:7c:3a:69:f9:52:cf:5c:
                    1c:a9:fe:e9:73:21:c6:cf:86:8d:d5:5f:6c:05:03:
                    1a:d0:8e:d8:b7:6c:2a:7f:50:58:77:ab:62:90:a7:
                    d8:ca:a7:87:e1:96:84:6d:e8:e2:e8:c7:07:cd:a1:
                    e5:e0:05:69:72:06:fa:e4:e4:7e:00:e2:ba:8d:2d:
                    f7:c9:88:c2:f0:3e:eb:57:e2:6a:35:98:a4:bd:f6:
                    0c:0a:fd:58:ef:bd:a2:34:03:d9:be:c2:04:cc:f8:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C7:E7:BE:6F:F6:15:54:3C:E0:4C:09:3B:A4:F2:42:EF:8D:D6:77
            X509v3 Authority Key Identifier:
                keyid:AA:7D:E7:55:16:51:81:EE:76:83:76:D8:A9:F7:48:03:09:AD:4C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/171/AA7DE755165181EE768376D8A9F7480309AD4C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qn3nVRZRge52g3bYqfdIAwmtTC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/171/3139352e32382e32312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.28.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b0:f5:f2:cc:74:f7:90:6c:07:b0:bf:b2:a7:e2:f0:5e:c3:
         de:78:96:06:23:79:d6:8f:5e:bc:f8:24:b2:04:0b:5f:3e:10:
         17:2e:c3:93:ce:30:51:fb:88:ba:59:3b:73:be:ce:7f:11:b0:
         04:98:ec:53:95:c6:45:37:cc:d3:13:6a:31:0e:38:4b:3d:bf:
         80:d6:90:b9:fa:ec:83:d9:e1:df:ac:f8:63:2c:56:65:dc:f6:
         a8:b7:05:88:22:52:2f:f9:1e:20:d7:be:b9:b0:21:35:96:64:
         c0:f0:31:92:9d:d2:dd:d7:ea:be:be:c3:66:72:71:2e:ef:54:
         3e:e0:e8:32:44:44:e6:5a:22:19:8d:04:9b:7e:cc:36:96:26:
         29:1e:35:0a:64:59:db:da:b1:d1:1d:ed:6b:b5:36:44:4c:39:
         13:58:9d:7d:70:8f:c1:c6:03:5b:ce:ea:5e:77:bc:9c:7d:7e:
         fe:b9:48:69:97:e9:eb:e2:f2:c4:d9:3b:08:f5:15:55:e5:c7:
         1d:f5:ff:9d:b9:16:16:f2:58:5a:f9:07:56:11:14:ae:9f:8a:
         af:de:87:3d:56:4a:21:b5:a3:e6:f0:97:41:b2:4b:7f:d2:4e:
         82:f4:84:82:1d:33:e2:d3:ea:68:ac:6b:6d:13:77:1e:fa:cc:
         db:6b:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-fra.rpki-client.org