Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203434363835.roa
File:                     33312e3138372e37322e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          XFjTltQdXLqYZNgDzrZzcNEdTBfmFHt0DkBJugYtOIU=
Subject key identifier:   C2:8E:B4:69:93:12:FE:F6:D9:BD:92:0F:03:F3:DB:D8:C2:97:8A:FE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       473A3D6841E28BFDAA96CA71C88A71F4E12F9468
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203434363835.roa
Signing time:             Fri 27 Nov 2020 15:10:30 +0000
ROA not before:           Fri 27 Nov 2020 15:05:30 +0000
ROA not after:            Fri 26 Nov 2021 15:10:30 +0000
asID:                     44685
IP address blocks:        31.187.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3a:3d:68:41:e2:8b:fd:aa:96:ca:71:c8:8a:71:f4:e1:2f:94:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:30 2020 GMT
            Not After : Nov 26 15:10:30 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:f6:3a:eb:28:9a:3c:5e:6a:f8:d8:3e:81:
                    57:79:b5:d9:ea:15:9f:03:6c:f6:1b:87:e4:ec:07:
                    58:a3:c3:a6:96:b2:a3:70:5a:39:7f:59:a2:e4:c8:
                    76:c9:3c:0a:36:05:ab:3d:70:0a:8a:e7:18:a8:5b:
                    f4:42:88:8a:68:f7:90:17:53:4c:05:93:23:84:f9:
                    90:97:8b:fa:bc:a8:c1:75:83:4f:e1:6b:04:e0:dc:
                    9a:cc:7b:f2:24:7f:84:77:f6:1c:b8:66:da:77:eb:
                    de:63:f9:04:24:57:05:77:61:cf:fc:83:d2:da:5e:
                    1f:ed:48:60:db:20:9e:f1:03:b0:5e:e6:8d:40:3a:
                    15:a9:c8:7b:9e:8b:5e:7a:ac:dd:97:c1:15:64:60:
                    83:fd:3a:c6:7e:14:b0:c0:30:29:c2:ae:ca:c4:be:
                    62:9e:19:f5:2c:60:2f:32:72:07:f1:d1:29:55:3a:
                    63:60:72:3e:85:ad:6a:30:fd:b3:83:0c:90:35:04:
                    56:57:87:44:23:a2:2c:37:e7:47:02:e3:f0:51:7a:
                    17:b2:73:6b:22:e6:7b:d5:36:f9:e5:19:de:49:39:
                    e8:79:d5:da:87:e1:c3:4d:e1:dd:4c:c4:f7:8d:a3:
                    6c:ec:ea:cf:8a:e9:8a:d7:6f:8c:58:8a:9a:45:40:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8E:B4:69:93:12:FE:F6:D9:BD:92:0F:03:F3:DB:D8:C2:97:8A:FE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:e5:86:c4:d1:62:ac:0e:35:97:ba:af:4e:c0:30:7a:87:2b:
         0c:b6:12:19:10:81:ae:6a:6f:0c:00:8b:25:47:70:9c:59:e3:
         d7:a8:df:d4:60:19:aa:6e:c2:e1:a0:b5:f7:e3:00:eb:69:0d:
         8d:52:7b:84:37:0d:e8:b4:8a:a8:99:c3:4e:01:12:05:c5:b2:
         66:4c:d5:8e:eb:9a:05:6c:57:05:e6:c8:13:b3:cf:57:c6:20:
         6b:5d:97:ba:04:41:cf:d8:32:99:0e:14:1b:57:9b:5c:3f:56:
         d3:7d:be:3c:b4:a9:78:54:4d:d6:fe:d1:ee:e0:98:f2:66:3f:
         82:f7:27:0a:e2:11:da:f7:39:d1:c3:18:97:26:cd:2e:8b:5a:
         31:0f:44:c1:9f:04:28:68:7b:c0:ea:66:60:f1:52:5a:e7:30:
         49:24:1e:53:55:6a:41:59:10:4b:00:a8:23:6c:8a:7d:d1:9b:
         ba:2a:b5:8c:b3:3c:7a:39:94:ad:60:fa:82:69:f9:56:98:93:
         1e:7f:1b:1a:59:c5:70:ea:db:5a:7c:2a:b0:6a:5d:7a:2e:79:
         84:ca:e8:a9:f0:34:23:65:92:91:10:66:91:14:51:f9:4d:5a:
         b0:78:1c:f2:aa:69:27:d9:c6:71:f0:64:0a:47:48:4c:29:06:
         e4:28:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:40 2023 by rpki-client on console-ams.rpki-client.org