Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139332e3134382e37352e302f32342d3234203d3e2030.roa
File:                     3139332e3134382e37352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          oeXQRw1JId00pTJB8hHxOCbEJK8zn2b/7TrbafLut6M=
Subject key identifier:   EA:41:48:CB:38:C5:88:8B:E6:CE:84:85:60:BB:96:C2:55:F7:1A:2A
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       21DEB71E168B986670DFE4D08E40781BC0704B17
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139332e3134382e37352e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:12:11 +0000
ROA not before:           Fri 03 Mar 2023 16:07:11 +0000
ROA not after:            Fri 01 Mar 2024 16:12:11 +0000
asID:                     0
IP address blocks:        193.148.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:de:b7:1e:16:8b:98:66:70:df:e4:d0:8e:40:78:1b:c0:70:4b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:07:11 2023 GMT
            Not After : Mar  1 16:12:11 2024 GMT
        Subject: CN=EA4148CB38C5888BE6CE848560BB96C255F71A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:1d:2a:68:8b:b7:90:2f:a6:26:2e:8b:90:
                    02:49:b7:a6:c5:7e:04:4a:b0:fb:ac:f1:d6:db:29:
                    00:bd:40:cc:c6:49:b2:58:3d:03:38:9b:52:44:0f:
                    9b:ed:1e:70:bd:61:27:42:4c:6d:66:ca:6f:8b:e2:
                    e7:aa:db:6d:4f:04:54:a1:15:dc:e1:a0:4e:ff:23:
                    74:27:79:74:ea:71:ab:e5:d7:f0:cd:f2:c0:32:2f:
                    9e:e1:9c:e0:77:e1:ea:5f:db:ea:ac:4b:5d:0f:53:
                    fb:ea:74:86:da:5f:b0:26:b5:ab:74:69:c5:a6:3e:
                    87:55:31:5c:8f:cb:d2:7e:9c:c6:62:fa:f3:b7:e3:
                    32:a7:5a:a3:6c:73:0d:f0:90:b1:53:75:05:39:b4:
                    d4:2b:2c:5b:1b:ef:f6:d6:9d:d6:c1:1d:65:58:7c:
                    0b:1e:2b:c5:d7:ca:3f:ff:3b:7f:80:fc:d3:87:64:
                    d2:d9:bd:ea:aa:97:65:80:b1:47:3f:2d:ef:44:b1:
                    0e:7a:46:5e:21:79:d8:85:4c:9e:5c:16:dc:95:a9:
                    53:92:57:6d:51:b7:ff:17:fd:52:21:9c:77:fb:14:
                    6d:ed:b6:cc:61:28:62:b6:85:86:54:77:ed:62:76:
                    f1:de:e3:e3:06:c8:72:bf:43:c8:e6:e3:d6:86:15:
                    7b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:41:48:CB:38:C5:88:8B:E6:CE:84:85:60:BB:96:C2:55:F7:1A:2A
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139332e3134382e37352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.148.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:7f:ce:7a:68:81:6f:92:cb:94:b0:00:31:3e:fe:17:2a:24:
         03:6f:37:7b:3b:db:e2:ba:d4:3f:07:e3:c6:28:09:14:57:e0:
         05:e8:0d:d3:18:7d:fc:4d:29:5d:67:51:53:fa:86:f2:6e:54:
         6c:ee:6a:34:03:37:b8:53:53:c0:0d:b3:19:9a:01:28:ae:01:
         db:1f:f4:bc:c1:b4:36:03:6a:84:2a:84:75:16:09:9a:a1:fc:
         8e:0d:56:78:6b:29:14:82:cb:13:55:20:e5:fe:1b:4e:b6:10:
         38:05:d7:73:39:80:3e:9e:21:a9:28:38:82:e0:2c:36:85:97:
         8f:72:16:fe:11:84:7e:54:ef:c7:2e:97:f1:ba:0b:3f:fd:3b:
         21:5c:94:62:07:60:ea:38:3a:be:d6:cf:83:75:0b:ea:eb:32:
         cb:dd:56:c8:b0:cf:ba:3c:35:07:24:96:94:d9:81:dd:58:0d:
         e9:fd:4f:b0:92:04:61:08:14:40:4d:9a:f7:fb:95:b1:dc:bc:
         ae:ba:17:e5:c9:15:6b:0c:5b:55:b5:be:05:4d:8b:83:a4:f7:
         f0:5d:70:db:e2:d4:7f:30:e8:d9:d9:be:ff:e2:14:0c:9c:c5:
         6e:16:c2:33:57:40:72:bd:d0:50:bb:85:1f:5c:eb:ba:f3:62:
         57:4b:85:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org