Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3139342e33312e35352e302f32342d3234203d3e203437353833.roa
File:                     3139342e33312e35352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          HtXpt3YpyGAjAaKd86FVQC9pxBPn/TCU6M1T5+q5SGs=
Subject key identifier:   0F:29:27:C0:F9:76:34:5E:BC:D5:58:66:D4:60:49:A3:9A:CC:FE:96
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       47165BCF331DF69189DA406B12A95B883B3B237C
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3139342e33312e35352e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:06 +0000
ROA not before:           Sat 22 Oct 2022 04:29:06 +0000
ROA not after:            Sat 21 Oct 2023 04:34:06 +0000
asID:                     47583
IP address blocks:        194.31.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:16:5b:cf:33:1d:f6:91:89:da:40:6b:12:a9:5b:88:3b:3b:23:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:06 2022 GMT
            Not After : Oct 21 04:34:06 2023 GMT
        Subject: CN=0F2927C0F976345EBCD55866D46049A39ACCFE96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:43:3d:16:1f:84:62:18:39:64:e3:f2:2f:
                    87:93:80:af:21:96:4f:3c:5f:b8:9e:a3:70:68:1f:
                    fd:a4:5a:9e:d9:40:d4:aa:3a:b0:71:11:07:3d:61:
                    6d:f1:da:05:10:78:d1:72:1d:32:e2:51:ed:81:a5:
                    61:81:1c:94:17:6b:b3:a2:59:00:ed:60:d3:f6:10:
                    d0:3d:3c:3c:bb:a3:1f:93:58:30:0d:cc:3c:65:72:
                    2b:2b:93:8c:29:76:02:69:a0:32:3a:ac:23:e0:34:
                    29:5b:d3:17:c7:9b:02:37:42:7e:e4:99:34:58:a1:
                    a8:83:73:f4:54:35:96:ff:2a:7e:1c:71:d6:77:b7:
                    48:64:42:7f:ea:4a:fa:64:4f:02:ae:63:de:5c:e6:
                    6c:6c:2e:ec:53:1a:c3:54:1c:e8:bb:a7:05:af:93:
                    ea:4d:4f:68:b0:e5:6b:68:88:92:f2:00:df:eb:72:
                    5e:e1:49:50:85:ef:09:e9:62:77:c0:33:1c:b6:10:
                    b9:ad:04:1e:8f:15:7a:0c:57:f3:7d:0a:38:44:0e:
                    ca:8d:38:5e:56:5f:bc:45:b4:e7:40:10:09:e6:7e:
                    71:c2:fc:1a:9d:b5:23:77:e2:e0:cd:c2:f2:dc:55:
                    fb:5d:c5:5f:49:1a:58:1a:75:df:c6:62:12:e2:68:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:29:27:C0:F9:76:34:5E:BC:D5:58:66:D4:60:49:A3:9A:CC:FE:96
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3139342e33312e35352e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:64:94:02:c0:fa:f7:f3:6a:1d:2f:72:e5:be:1b:7a:21:f5:
         98:35:cb:a2:0e:dd:a6:f6:67:c6:06:57:ea:22:eb:16:4d:db:
         eb:3e:64:e7:b4:03:44:ac:4d:e9:00:63:77:6e:ca:cc:cc:6d:
         3f:c1:16:a9:5c:c3:df:19:8f:19:ca:e8:c0:2f:4f:29:ce:1b:
         22:85:3d:4b:48:d2:ff:30:b0:52:4e:d5:bc:37:f4:97:6f:6c:
         10:19:82:f0:54:ea:a1:0b:52:71:24:f4:ef:2e:6f:74:34:82:
         47:b2:46:c2:8a:e8:28:82:bb:a3:15:6f:72:33:07:78:7d:d4:
         39:0a:96:3a:4c:b4:6a:a6:4e:09:03:d3:2a:16:85:a4:65:e5:
         ec:d2:77:4c:9a:37:d8:15:2d:a3:14:45:48:df:ba:7f:ee:45:
         b7:24:1f:dc:49:94:9f:d1:52:dc:36:7b:9e:13:28:eb:58:04:
         59:65:96:8a:81:0f:b7:42:ec:72:a6:dd:20:0d:88:0e:d7:79:
         36:b7:27:b5:3f:cf:3d:d9:ec:40:16:36:04:ef:ca:1e:69:f0:
         42:e8:e4:bf:75:25:83:f2:a1:50:f1:d7:3f:a2:eb:49:d1:01:
         b7:2a:30:6d:9d:64:7d:5f:22:a5:50:5b:dc:3d:98:92:4a:b7:
         1a:84:4d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org