Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa
File:                     3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          cD4bcbbML8FxYmImQ6iQ/QBC6EsyUWtHr4mcX7LsSnM=
Subject key identifier:   35:28:71:21:7D:14:EE:16:90:41:B7:CC:F2:87:E0:71:79:31:1D:E1
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       3145AAF1C07FFBD19FE3007B0CEA919024CD69AD
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 30 Dec 2022 11:35:32 +0000
ROA not before:           Fri 30 Dec 2022 11:30:32 +0000
ROA not after:            Fri 29 Dec 2023 11:35:32 +0000
asID:                     136787
IP address blocks:        193.160.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:45:aa:f1:c0:7f:fb:d1:9f:e3:00:7b:0c:ea:91:90:24:cd:69:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Dec 30 11:30:32 2022 GMT
            Not After : Dec 29 11:35:32 2023 GMT
        Subject: CN=352871217D14EE169041B7CCF287E07179311DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:b0:4a:aa:da:76:07:48:fb:a0:84:53:56:
                    c0:71:13:28:84:c2:34:f1:cc:76:f1:13:9a:d5:a6:
                    13:03:12:54:35:c7:b6:04:1f:da:af:8e:1d:c3:9f:
                    df:86:21:74:1c:b3:20:0c:8d:51:ee:db:2e:94:22:
                    65:d1:9c:45:ee:53:79:51:ac:36:4b:58:c3:9c:57:
                    8e:ce:bf:11:12:8e:fd:bd:62:19:93:f6:74:f0:16:
                    91:4e:20:a9:0f:bf:24:7b:a5:fa:72:4d:3e:a4:2f:
                    20:31:3b:3d:f0:4b:26:0e:67:6c:bc:e3:a5:77:8d:
                    3c:8b:67:5e:e0:43:4e:c8:42:06:41:f4:0f:5c:d6:
                    98:2a:35:8f:5c:5c:ab:d0:05:ce:07:92:b7:18:91:
                    3e:74:b7:bb:d8:81:22:99:82:a3:74:b5:ce:93:80:
                    92:f2:2f:7d:2f:1c:4b:ed:76:10:33:fa:55:96:a4:
                    0d:c1:fa:c2:70:71:2e:33:2a:1f:b3:2b:47:e8:7e:
                    58:46:45:b2:5c:5e:96:7d:11:75:7c:a7:34:5d:6c:
                    8e:b2:1b:a8:13:94:73:43:f2:e0:2d:76:f1:06:40:
                    ed:81:b6:a2:6f:66:66:67:d9:b2:47:38:66:48:0a:
                    1e:df:14:6e:06:d3:96:ee:85:35:f3:ee:38:89:6a:
                    eb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:28:71:21:7D:14:EE:16:90:41:B7:CC:F2:87:E0:71:79:31:1D:E1
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:99:70:c9:f4:07:bf:a9:51:8d:c6:2e:1a:4f:da:fd:32:19:
         16:b6:ce:41:c4:53:83:ae:7a:f6:38:a7:a7:76:d6:ee:d8:97:
         ef:95:4b:05:f0:e6:70:73:b9:7b:53:dd:62:75:a1:71:47:8f:
         a9:33:90:d4:7e:f6:a0:4b:ed:9c:e0:b8:58:3b:d3:bb:23:47:
         6e:79:1d:ca:21:c6:d7:f4:23:28:bb:09:42:23:2f:a5:fb:d6:
         de:8d:ad:65:0b:9b:58:6c:6e:30:d5:ec:0c:b7:51:62:4b:96:
         c5:4f:9f:23:43:a6:cb:d1:7d:8a:87:74:7b:05:7e:97:dc:87:
         eb:6b:02:93:ac:13:ef:92:2c:7c:7e:97:ff:ed:93:5b:a9:58:
         18:4c:cb:11:af:7f:1e:e8:51:bd:52:49:5c:04:90:10:79:5e:
         3e:93:7f:d8:ca:f8:14:1f:0c:0f:14:8a:10:5c:0e:22:bc:65:
         9a:87:c9:1a:d7:64:75:e8:8d:6b:f4:a9:14:c8:5e:78:70:c7:
         ac:92:9c:b5:56:f1:82:d1:65:59:f5:5f:e9:83:cc:db:b4:eb:
         fe:b5:3a:4c:c4:b2:07:35:38:75:37:a9:45:71:26:c9:c0:7a:
         3e:52:e4:d4:b4:dc:19:95:1e:67:25:28:2e:37:11:fc:2f:70:
         ef:cc:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org