Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa
File:                     3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa (raw, json)
Hash identifier:          U6+XdaGgOJ30OrS0ZCw25DWFm6iawQdhXc0xj9jWNcg=
Subject key identifier:   D7:68:13:DE:39:CA:A7:82:7B:87:82:20:D6:AD:16:F1:F5:BB:B0:C0
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       15236599D99EC5A652A0B68D0450AB798B185C29
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa
Signing time:             Wed 08 Mar 2023 08:47:47 +0000
ROA not before:           Wed 08 Mar 2023 08:42:47 +0000
ROA not after:            Wed 06 Mar 2024 08:47:47 +0000
asID:                     211192
IP address blocks:        194.15.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:23:65:99:d9:9e:c5:a6:52:a0:b6:8d:04:50:ab:79:8b:18:5c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  8 08:42:47 2023 GMT
            Not After : Mar  6 08:47:47 2024 GMT
        Subject: CN=D76813DE39CAA7827B878220D6AD16F1F5BBB0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:72:fc:7f:60:4a:a5:5a:ba:e6:eb:b9:43:
                    f7:c2:67:e6:1b:67:57:7c:2c:9f:d7:20:3c:5e:27:
                    8f:b7:f2:10:37:24:76:f6:59:e7:9a:ed:a4:b4:71:
                    4f:88:8d:5f:3a:68:bb:54:9f:38:41:45:ea:23:b0:
                    01:29:60:c8:6e:50:04:2f:b6:d5:17:5e:71:eb:cb:
                    b7:ea:95:c1:ba:e5:99:4f:0b:0b:3b:bb:89:88:bd:
                    3b:5f:fb:74:c2:51:f6:e7:40:3d:0c:40:ad:48:62:
                    f4:a3:2b:8a:01:51:1a:28:83:96:d6:73:03:d8:ef:
                    5f:14:81:a1:e8:4b:51:db:08:d2:d5:89:e3:c1:c6:
                    5f:ac:d3:37:b9:70:08:e7:7f:d7:bf:85:c5:82:c5:
                    dc:1d:a6:61:be:7f:b1:89:e0:51:92:51:f0:44:e2:
                    9b:b9:08:7a:9b:6e:5b:fd:fd:92:72:4a:95:e1:8f:
                    40:63:ca:34:26:f8:5b:6e:a9:1b:0a:b4:61:09:2f:
                    67:eb:e7:17:2e:e1:59:b0:93:88:43:07:d5:37:bc:
                    a1:53:75:da:18:82:ed:f8:ce:5d:4c:58:97:09:1d:
                    ea:3d:5f:9e:40:0b:f9:40:13:aa:06:28:e3:2c:67:
                    23:9d:27:7a:27:9f:3c:ed:22:84:35:f4:24:7c:15:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:68:13:DE:39:CA:A7:82:7B:87:82:20:D6:AD:16:F1:F5:BB:B0:C0
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f7:0d:84:09:e0:e4:0e:04:61:82:e5:30:35:84:e7:73:f6:
         27:f1:44:cb:52:72:c8:7e:69:16:a3:43:76:a6:33:bd:94:12:
         cb:0e:c0:e0:97:23:02:b9:4f:a9:41:39:bd:d3:2b:ee:2f:a3:
         96:8e:b0:94:23:7d:0b:9e:9c:f6:74:ca:90:41:df:2f:67:48:
         32:ff:27:5f:2f:74:76:49:60:1f:39:5e:6d:f9:5e:06:d7:dd:
         12:dc:78:d7:eb:03:17:09:0f:19:f9:b2:a1:da:bf:51:cc:6f:
         e0:3f:a8:d6:47:d3:cc:95:fd:f4:7b:b0:68:4c:de:4a:62:16:
         2d:c8:f1:3c:5d:c6:c1:8b:87:ec:35:d2:4e:30:e0:86:fe:bf:
         c3:74:97:2b:b3:2d:ec:dc:27:3e:67:7d:cd:4f:ab:ee:88:a1:
         cd:6c:4d:b4:60:43:04:1e:4e:c7:9e:89:f9:2b:0d:63:de:9d:
         ee:22:db:f9:43:02:52:a1:e4:1a:8c:6f:c4:cd:95:55:12:9c:
         a0:ea:73:2f:f4:98:5a:fe:e4:33:bb:31:82:5b:5d:b3:c4:d1:
         c9:15:85:47:e5:02:21:85:9c:d2:f5:59:6b:a1:29:b1:88:c2:
         9d:b4:38:0a:f1:20:18:b0:65:7b:5f:d8:3e:5e:df:63:19:ca:
         f6:22:4d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org