Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38362e302f32332d3234203d3e203631333137.roa
File:                     3139352e38382e38362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          XWYp6kpXRw+0nYGulkoJZm+DCyd6I3APpgDR+f6QB/Y=
Subject key identifier:   15:36:4D:4D:F7:1B:A8:D1:6F:67:B0:21:CE:C2:08:9B:E3:BC:0D:1E
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3A8FA12A06EAB3E31F68FD02FF647327DBE02E53
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38362e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:34 +0000
ROA not before:           Fri 27 Nov 2020 15:05:34 +0000
ROA not after:            Fri 26 Nov 2021 15:10:34 +0000
asID:                     61317
IP address blocks:        195.88.86.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8f:a1:2a:06:ea:b3:e3:1f:68:fd:02:ff:64:73:27:db:e0:2e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:34 2020 GMT
            Not After : Nov 26 15:10:34 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:8e:5b:16:6e:c8:25:59:e4:2e:8b:46:1d:
                    12:88:49:f5:5f:63:2b:68:6a:6f:23:3a:4c:c2:16:
                    d3:65:af:e5:7a:6d:42:08:12:ce:e0:ae:75:bb:f1:
                    51:3e:5d:a9:7b:04:56:8c:ba:91:87:5d:ee:45:7f:
                    40:12:b8:9b:d0:dd:bd:0b:df:e4:19:b7:51:5d:ea:
                    df:8a:c5:fb:23:0e:62:dc:33:e6:fb:a8:b5:8e:8c:
                    3c:be:d2:9d:71:ce:02:41:c2:28:a2:f4:e1:be:ae:
                    95:e7:69:d0:4e:de:56:31:8c:31:d6:96:a7:63:4e:
                    8a:36:dd:05:4d:97:b7:6a:f0:8d:34:28:98:f7:76:
                    76:66:ce:e2:5d:65:51:f8:d1:b9:f0:01:f7:5a:32:
                    09:99:ef:d2:38:f8:6c:d8:ad:22:49:25:81:5a:65:
                    a2:b1:8a:c8:cb:8e:f8:e8:21:2e:e1:32:b7:0f:32:
                    12:a6:1a:df:06:84:51:46:40:d6:6b:3c:7d:52:8a:
                    3f:e2:43:16:61:51:ba:e0:a0:94:dd:df:5b:c4:ca:
                    a0:b3:40:c7:e8:4c:f2:34:5b:c4:a7:a9:23:6e:96:
                    fa:bc:7a:9a:36:8e:98:5f:aa:9b:aa:58:c7:57:c8:
                    2a:95:ef:08:48:56:97:4b:47:0a:ec:29:ed:54:ee:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:36:4D:4D:F7:1B:A8:D1:6F:67:B0:21:CE:C2:08:9B:E3:BC:0D:1E
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:a7:42:9d:01:fb:1b:79:af:0f:8e:53:28:12:35:23:31:02:
         5e:a0:41:3b:6d:f2:02:e5:8f:02:55:3d:86:0b:8c:b6:6a:7b:
         2e:d1:68:a9:3f:08:92:42:6d:e4:a0:b3:1b:f1:a0:43:cd:57:
         0e:4c:fa:99:ce:60:9b:52:25:b0:e2:4e:81:cb:f8:bc:a8:d4:
         05:ac:b8:83:63:73:5b:ec:c9:29:9d:25:08:a1:bd:ee:5f:3d:
         37:86:fd:31:71:38:a9:e2:76:b4:8d:c5:4f:30:38:0c:f4:af:
         83:c1:0e:8f:98:eb:12:89:16:bf:13:17:56:4e:e9:c4:ba:7c:
         33:18:7e:4c:5b:58:f9:6c:ae:a4:a9:23:ba:ee:af:5e:df:9f:
         30:08:1c:85:88:b8:5d:3c:ee:c4:5c:e3:9f:d7:e3:1b:b9:5d:
         80:8b:a9:a3:ac:5d:05:70:be:e8:80:ee:ac:b4:ed:94:51:65:
         2e:09:98:ec:96:b3:3f:3f:b8:4e:c7:8d:1e:53:d1:79:a6:1c:
         77:09:ec:17:24:a5:95:1f:45:a0:a5:78:f4:89:20:ab:5a:a4:
         6a:07:4d:d0:2a:82:86:47:1b:26:4b:62:69:f8:de:39:93:87:
         be:35:d2:b9:ea:03:c2:07:90:80:bd:94:84:d4:ec:12:2b:08:
         61:56:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:50 2023 by rpki-client on console-fra.rpki-client.org