Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e33352e3132312e302f32342d3234203d3e2030.roa
File:                     3139342e33352e3132312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          xgCAdYvYST8yq2Up3I5KNFnEdp9d8XI6l0aw1KJbXrc=
Subject key identifier:   B0:F9:E2:F8:AC:DC:32:AA:E4:50:A0:AA:FC:6C:C7:2D:28:54:05:11
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       6CDEE2026C94C53A04F56D251F3BB3F90967355A
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e33352e3132312e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:56:51 +0000
ROA not before:           Fri 03 Mar 2023 15:51:51 +0000
ROA not after:            Fri 01 Mar 2024 15:56:51 +0000
asID:                     0
IP address blocks:        194.35.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:de:e2:02:6c:94:c5:3a:04:f5:6d:25:1f:3b:b3:f9:09:67:35:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:51:51 2023 GMT
            Not After : Mar  1 15:56:51 2024 GMT
        Subject: CN=B0F9E2F8ACDC32AAE450A0AAFC6CC72D28540511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:86:5b:f3:99:df:b1:f9:8e:9f:2f:fd:ae:
                    55:d2:8e:11:24:79:c9:04:ec:5d:28:de:ef:b9:c2:
                    eb:5a:72:f2:8a:25:d3:c4:2c:a8:68:4e:9e:d1:c8:
                    af:41:cb:7c:ef:6e:87:f6:0e:ab:88:a1:9c:e5:24:
                    74:74:6a:0a:19:ec:bb:a2:4b:e2:d0:49:ad:44:16:
                    85:5d:ec:54:ed:73:2d:36:fb:57:dd:31:85:a5:c5:
                    fe:70:4a:eb:82:55:e3:c5:7c:fa:59:a5:44:89:93:
                    8a:f8:28:50:b2:1f:5b:be:9a:61:8f:3e:56:13:00:
                    f8:28:d9:82:5c:7b:d9:c8:95:65:29:6b:bc:d7:37:
                    3a:17:e4:ca:70:87:92:51:9d:6b:36:26:c6:77:d0:
                    3b:ce:ae:cf:dc:4c:05:b2:09:88:35:ab:0f:1e:bb:
                    1b:2b:16:9f:d2:33:76:a8:88:c3:e4:78:39:d0:b0:
                    6e:d3:5a:8f:ca:6b:40:be:27:0b:88:c7:e8:96:3f:
                    06:5b:6d:2e:77:47:57:ed:de:7f:57:e9:4a:10:78:
                    e4:a4:2c:da:27:c4:d4:11:6e:42:57:9a:fc:8b:8b:
                    ea:5f:41:59:74:47:ab:49:7c:90:d5:88:9c:7f:b5:
                    08:8d:d2:cb:01:fc:57:0e:04:9b:18:23:50:30:ee:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F9:E2:F8:AC:DC:32:AA:E4:50:A0:AA:FC:6C:C7:2D:28:54:05:11
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e33352e3132312e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.35.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:ec:51:f4:bf:43:53:a7:b0:3b:2b:f8:22:ec:90:3a:11:cd:
         57:11:99:ce:ea:4e:62:b9:b0:ce:a7:79:50:cd:5f:1a:48:4f:
         2b:ff:91:bf:09:3b:66:73:0e:58:b4:fd:ea:52:69:1a:69:41:
         c1:79:be:40:3f:4e:11:99:55:38:12:46:8b:62:85:11:b5:1a:
         bf:1c:eb:58:48:a9:98:09:92:2a:52:63:54:54:1e:78:71:d0:
         10:cb:ab:00:8e:a7:fc:b0:6e:04:ec:88:7f:bc:bc:60:af:2c:
         ba:1f:a3:f6:5a:23:f1:6d:1a:07:95:26:f5:f1:ab:f4:d6:65:
         bc:35:a0:5a:80:40:60:7c:4b:20:48:a2:94:7a:5f:a5:de:6e:
         a2:62:81:2e:b5:2b:3c:8c:af:ee:55:f3:c4:a5:7f:be:4e:25:
         0f:aa:c9:51:4b:72:69:8a:87:ae:17:69:bc:a1:c9:be:bc:45:
         86:71:f0:e5:69:71:ba:4d:40:a6:70:9d:9a:6d:54:e3:c0:45:
         cc:49:06:77:f3:a4:2b:66:2f:81:74:e1:e5:60:f0:46:38:e5:
         8f:6c:c6:92:38:52:54:d5:8f:80:32:d7:67:e6:ad:48:80:60:
         85:49:be:d7:38:e9:61:c1:50:27:55:b1:0f:4d:d2:eb:99:94:
         8e:1f:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:52 2023 by rpki-client on console-fra.rpki-client.org