Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa
File:                     3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          Y6tBpYLTgcaBDaC2HYQdalmDTzpzPyhfWsmlXzyKkKQ=
Subject key identifier:   4E:51:F8:47:6F:59:D2:BA:23:6A:4B:E5:70:8A:9F:48:46:25:BA:C7
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       3B1008CEB3D5F0488D22AE4F6CE894EF266E2E22
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:04 +0000
ROA not before:           Sat 22 Oct 2022 04:29:04 +0000
ROA not after:            Sat 21 Oct 2023 04:34:04 +0000
asID:                     51167
IP address blocks:        194.180.176.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:10:08:ce:b3:d5:f0:48:8d:22:ae:4f:6c:e8:94:ef:26:6e:2e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:04 2022 GMT
            Not After : Oct 21 04:34:04 2023 GMT
        Subject: CN=4E51F8476F59D2BA236A4BE5708A9F484625BAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:f0:3f:3f:0d:bf:4a:98:15:28:63:ce:69:
                    28:1a:91:0c:14:c9:e5:35:fa:4d:8d:e2:d8:52:11:
                    f9:b9:dc:45:71:86:a8:ad:b8:18:fb:10:34:ea:ea:
                    cc:5f:c3:73:e8:3c:0a:17:5b:e2:de:fa:26:ee:68:
                    ad:2d:91:c9:40:f4:65:da:a4:8e:34:91:5b:b7:e3:
                    82:d4:6e:fd:fe:7e:85:a0:45:e2:3d:9e:01:15:84:
                    32:81:dc:4f:66:30:03:9c:0f:85:8d:c8:95:98:fd:
                    32:40:0d:14:0a:5b:08:3e:85:32:3e:66:03:07:83:
                    6e:65:31:31:ac:be:26:6e:b4:bf:28:45:59:58:2d:
                    fe:6e:bb:34:4b:75:eb:17:65:fe:47:e3:bc:6d:c2:
                    1a:3d:a6:70:79:c1:39:99:de:7e:35:65:d6:34:23:
                    ca:3d:1c:43:bb:06:53:13:f2:5b:0d:f7:12:2a:2c:
                    6d:d1:e0:2a:54:a6:e8:70:10:56:1a:98:04:8e:46:
                    ac:0b:d7:29:57:59:2f:c1:7a:bc:64:af:a3:cf:1e:
                    5c:7a:e5:1d:36:5d:de:db:6e:57:b2:73:66:f4:c7:
                    ff:9b:9c:56:98:ae:87:c1:da:d2:7b:69:b8:cf:4f:
                    7e:bf:2c:02:f7:0a:42:db:1a:53:c0:38:02:4d:00:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:51:F8:47:6F:59:D2:BA:23:6A:4B:E5:70:8A:9F:48:46:25:BA:C7
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:bb:61:8f:e7:6b:fa:46:da:df:fb:f9:6f:b4:34:73:4b:49:
         6b:59:9b:28:a4:5c:52:b6:c5:de:2b:e2:cd:49:bb:e6:e2:79:
         d2:3b:43:c3:97:63:60:9d:e1:97:eb:5d:51:2f:b7:be:7e:46:
         c5:85:d1:6c:00:5b:f6:c3:bf:39:71:be:aa:4b:54:43:22:e4:
         26:d5:3f:6c:df:4f:90:9f:5e:eb:1e:87:06:8e:27:d4:37:d4:
         29:8a:74:da:4c:ad:c8:03:95:6a:e9:22:50:73:d5:c9:cf:92:
         1e:84:bc:66:49:da:7d:d2:b0:2d:74:4c:08:2d:c5:8a:02:86:
         5d:73:af:24:9f:1d:ac:18:97:99:e6:73:bd:97:79:81:1a:57:
         86:be:f2:e7:3d:38:80:90:ad:64:cb:02:70:ab:be:16:1e:6e:
         ef:22:77:8c:40:68:cd:73:1b:84:bf:f6:47:a2:6c:02:e5:59:
         32:f7:e9:93:38:7f:fb:cf:2c:b7:ff:e1:bc:b0:9f:fa:7e:d1:
         e1:11:75:ac:ba:03:5d:3f:53:fb:59:b4:ac:47:8d:bc:cd:3b:
         8c:0f:7e:af:1f:f6:20:43:75:88:d5:6f:ff:88:5c:c0:58:24:
         01:20:89:54:f5:32:b9:9d:de:01:97:41:60:6f:88:17:11:63:
         db:8e:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org