Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e203332313831.roa
File:                     3130392e3233362e36312e302f32342d3234203d3e203332313831.roa (raw, json)
Hash identifier:          holvMcwsBEqtdkAcyExpoEWiZGxRWjmbQOmsHuPjLa4=
Subject key identifier:   79:88:49:03:D9:19:A7:4E:82:1F:0B:CF:86:4C:8B:E6:8E:5E:62:3B
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       0E8EAE9CEF7695CDAC3CDDFAF9DD22A3B06A9FA0
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e203332313831.roa
Signing time:             Sat 22 Oct 2022 04:34:01 +0000
ROA not before:           Sat 22 Oct 2022 04:29:01 +0000
ROA not after:            Sat 21 Oct 2023 04:34:01 +0000
asID:                     32181
IP address blocks:        109.236.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8e:ae:9c:ef:76:95:cd:ac:3c:dd:fa:f9:dd:22:a3:b0:6a:9f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:01 2022 GMT
            Not After : Oct 21 04:34:01 2023 GMT
        Subject: CN=79884903D919A74E821F0BCF864C8BE68E5E623B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:f1:61:2d:6c:29:b5:7d:a6:73:47:30:45:
                    c0:7d:8b:ae:c9:45:82:87:50:5b:95:4c:42:ba:6d:
                    ef:01:13:19:60:e0:5a:ce:56:45:a8:d0:44:09:94:
                    71:9c:41:14:e5:69:b4:6d:0c:f5:6a:82:06:95:df:
                    a9:ca:cd:7f:ba:f5:36:b4:cb:be:68:be:a7:1e:22:
                    f5:a0:97:be:40:bc:45:c7:4f:9d:6d:ec:50:2e:17:
                    03:77:d6:ca:39:2f:ba:7b:25:e7:f4:8d:fc:00:b2:
                    a2:8c:be:bb:43:d2:c0:f4:fe:3c:4c:44:f8:05:3b:
                    aa:5a:e4:de:6a:eb:5d:55:92:4d:0e:da:ed:49:6a:
                    ea:99:f7:8b:a4:ec:21:f2:09:ab:fc:9f:01:76:ed:
                    26:52:1f:99:61:56:78:cd:e7:ab:ce:fc:c7:91:05:
                    a9:1e:bd:14:4d:eb:a8:ff:de:59:db:80:2e:c4:19:
                    68:1a:d4:d8:a2:52:bd:83:7b:13:fd:63:f7:90:46:
                    5a:54:8d:b9:af:05:80:48:f7:db:52:19:56:37:40:
                    41:e2:b7:d4:24:80:0e:66:18:8f:e0:de:f6:52:27:
                    fe:a8:0e:df:fd:20:b9:7b:9f:bf:f4:57:84:9b:b1:
                    23:35:a7:62:1b:54:74:32:7b:b9:8c:13:f3:cf:65:
                    0e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:88:49:03:D9:19:A7:4E:82:1F:0B:CF:86:4C:8B:E6:8E:5E:62:3B
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e203332313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.236.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:75:21:d1:74:3e:b2:a0:dc:63:ae:af:02:58:b0:3a:9d:f1:
         64:f7:d7:23:1e:ae:89:3b:f2:38:81:7a:c3:71:92:c9:b5:36:
         97:fe:96:6e:bd:bb:12:ac:08:8a:e7:56:b5:6c:92:f1:22:c2:
         19:a8:f3:c9:9b:ad:5d:6c:7e:92:82:37:f7:bd:f9:44:47:11:
         82:43:89:4b:6c:4d:26:78:af:aa:67:23:7d:57:6e:8a:73:30:
         d7:6e:44:d3:36:c4:f9:27:9d:f8:b8:55:e7:3a:4f:1d:ba:7b:
         07:74:e1:8e:77:58:e7:34:82:9b:8a:5e:91:bc:99:5e:ce:ea:
         c4:4f:62:7c:29:97:02:d9:53:8e:47:80:fe:7d:be:1e:2f:1f:
         27:72:de:75:10:af:69:2b:95:29:14:e4:c0:ab:5b:40:78:57:
         9f:15:83:30:a1:ca:9c:50:a6:bb:4a:60:47:de:72:46:0c:8d:
         d0:5c:c7:89:01:4e:5c:a9:10:ef:02:8a:d4:56:70:f8:28:b9:
         50:20:1f:3f:72:dc:d8:34:37:46:bf:96:c3:ee:f8:61:b4:4f:
         bb:e1:96:c0:10:16:f0:ea:b1:bc:01:26:37:96:66:ee:dc:d9:
         c1:f1:dd:2e:00:6c:80:6f:52:14:ae:0e:a3:3b:67:2f:31:b6:
         3a:65:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org