Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e3136302e3234352e302f32342d3234203d3e2030.roa
File:                     3139332e3136302e3234352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          2xwfIWUZ6SpbFVhCJAHKfHYfrZiNpY2w/m4AUy5k59Y=
Subject key identifier:   36:45:3F:F8:F8:6B:3F:98:E1:D9:7B:C9:43:2E:11:52:81:5C:AB:11
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       256A6783842924FCC03AFAB034411F4C90DD08FA
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e3136302e3234352e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:55:40 +0000
ROA not before:           Fri 03 Mar 2023 15:50:40 +0000
ROA not after:            Fri 01 Mar 2024 15:55:40 +0000
asID:                     0
IP address blocks:        193.160.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6a:67:83:84:29:24:fc:c0:3a:fa:b0:34:41:1f:4c:90:dd:08:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:50:40 2023 GMT
            Not After : Mar  1 15:55:40 2024 GMT
        Subject: CN=36453FF8F86B3F98E1D97BC9432E1152815CAB11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:99:a9:21:59:db:f8:87:6f:93:35:07:0e:
                    98:36:57:57:8b:7d:e1:9a:9a:38:e3:a0:87:2a:0c:
                    dc:7d:7a:28:f6:70:95:a6:a2:81:4e:48:af:09:72:
                    72:d2:a1:be:0d:5e:50:18:0a:08:b4:ca:36:f9:7c:
                    43:81:65:4b:d1:92:06:4f:a3:10:ac:ca:cf:a2:53:
                    c0:46:f9:68:11:9e:72:4a:24:f7:c9:da:8d:01:55:
                    96:71:0d:29:10:7b:3c:27:d7:b7:4c:80:81:8e:f7:
                    7f:50:5c:70:87:2d:65:e5:ef:df:0e:0d:82:e6:f2:
                    cf:a9:32:7a:fe:50:e7:3d:21:89:2a:28:a6:6a:93:
                    d8:9a:57:b1:df:55:c7:bf:7d:a0:8d:7c:3a:c2:20:
                    34:c8:0a:d7:17:36:7d:7f:f0:c2:1d:50:6c:07:91:
                    61:46:22:4e:92:8f:f7:dd:a8:bc:26:d9:6c:df:e4:
                    30:c9:1b:9c:c2:05:39:45:2b:de:38:45:8e:53:4f:
                    9e:10:42:14:c0:56:2f:28:40:3e:ff:c5:c5:79:3c:
                    cd:67:04:90:59:b7:26:fd:fd:b3:6f:92:54:c5:2b:
                    fd:35:84:05:95:9b:75:8d:38:3d:63:47:94:ef:31:
                    f7:7e:a3:13:92:f3:46:e9:cc:ee:10:9e:0d:4d:eb:
                    81:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:45:3F:F8:F8:6B:3F:98:E1:D9:7B:C9:43:2E:11:52:81:5C:AB:11
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e3136302e3234352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:eb:04:41:a3:29:5d:b5:0a:12:95:f3:29:89:ee:61:8b:51:
         21:a4:60:70:f3:1c:5e:0c:b9:1e:7c:b6:f6:b3:cc:73:1f:53:
         30:d3:70:89:10:06:3e:2a:c9:be:c3:13:0a:a5:87:95:63:52:
         f1:43:c3:ae:3c:ed:25:5d:be:01:fa:bd:d5:d9:4a:04:d0:f4:
         c2:6f:f6:f8:2b:54:8b:a9:7d:03:46:a3:9d:31:76:4d:a0:23:
         ce:56:c3:12:cc:78:6b:99:c5:cc:3e:53:d8:f9:44:fb:d2:c3:
         a5:a8:50:04:0c:cf:9a:04:f1:ee:8e:93:6c:84:ed:d0:cd:ec:
         4f:6e:fd:d9:dc:26:bf:3b:05:c1:61:a3:a1:a1:4c:83:8d:f1:
         36:79:fc:32:51:a6:70:de:f1:a1:74:4d:b6:80:51:f7:41:30:
         4c:10:25:2c:c9:db:9e:75:0f:e9:74:a5:46:98:e4:f7:43:18:
         6e:e0:ef:df:5f:56:6b:f0:5a:13:35:83:37:4d:09:5e:ba:61:
         4a:28:31:02:71:5c:a7:5f:15:d8:1f:4b:da:1f:f7:53:f3:e7:
         2b:18:38:ea:16:8a:95:fa:b9:3a:4f:13:06:9b:7f:f3:3c:0d:
         f3:b1:ae:31:d8:53:52:e8:b0:19:91:bc:e2:b5:12:ce:fe:49:
         33:70:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org