Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3231332e3139302e362e302f32342d3234203d3e203437353833.roa
File:                     3231332e3139302e362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          sJvF1U3dygVPJ1RCKBCNMnZbPPl6Wdt0+ZjnB0NWncQ=
Subject key identifier:   08:3B:EE:7D:CC:11:34:12:73:50:CE:DA:23:D0:7D:F6:D8:FE:A4:56
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       14FB9DA74A0C55F5513520540F4B8D465AB51E97
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3231332e3139302e362e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:03 +0000
ROA not before:           Sat 22 Oct 2022 04:29:03 +0000
ROA not after:            Sat 21 Oct 2023 04:34:03 +0000
asID:                     47583
IP address blocks:        213.190.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fb:9d:a7:4a:0c:55:f5:51:35:20:54:0f:4b:8d:46:5a:b5:1e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:03 2022 GMT
            Not After : Oct 21 04:34:03 2023 GMT
        Subject: CN=083BEE7DCC1134127350CEDA23D07DF6D8FEA456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:c1:89:e9:93:10:f1:6a:7d:1b:6e:e5:d0:
                    b0:38:75:08:89:69:45:2d:20:75:d2:ef:97:ff:0b:
                    41:9f:ad:62:95:82:b0:3a:7d:bc:70:3a:d2:4b:e0:
                    7d:b9:57:4e:fa:83:a1:ea:2d:09:46:eb:d9:18:c0:
                    45:2b:87:ae:58:d1:e5:ae:c4:70:53:87:e1:da:fd:
                    78:6d:8e:3a:bb:f3:c9:dc:52:0b:42:83:e0:bd:ee:
                    62:8f:d1:c4:5c:3e:47:0a:f2:62:6c:ab:6e:3f:7d:
                    fe:00:4a:e7:c7:78:55:fb:0d:a4:cc:85:a4:ca:86:
                    56:d2:5d:c6:36:bc:fa:93:40:2a:fc:66:65:d9:83:
                    18:35:22:87:70:bb:b0:cf:ba:78:0b:46:c5:b4:7a:
                    16:b7:b9:3b:06:e0:bd:bf:bb:d0:69:88:2f:8d:79:
                    86:52:22:0d:91:21:01:32:9a:95:95:34:16:a4:6b:
                    d8:c3:60:0e:db:c1:69:e6:33:38:48:b5:5b:06:56:
                    7a:16:22:4c:93:67:3d:ea:93:9e:18:77:95:81:ea:
                    b9:73:19:a0:cc:33:62:76:55:74:12:e5:7e:bc:10:
                    c5:2b:b9:3b:d6:59:3e:bc:69:d2:57:be:a4:90:0d:
                    8e:2c:12:91:3f:72:75:7a:49:19:e8:0d:ed:e6:1c:
                    34:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3B:EE:7D:CC:11:34:12:73:50:CE:DA:23:D0:7D:F6:D8:FE:A4:56
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3231332e3139302e362e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.190.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:70:26:d0:55:98:49:a9:f3:8b:c7:7e:14:7f:24:d5:59:69:
         eb:e4:9f:25:04:d3:e9:e4:bf:21:ed:11:39:d7:6e:19:d7:48:
         c8:e4:bb:4b:bd:f1:6b:a7:1c:7e:e1:26:a0:c8:84:dd:a2:02:
         8b:a8:f6:47:30:54:54:ba:95:f8:11:04:b4:7e:00:23:13:09:
         e6:2d:4c:fc:7b:a9:f5:8b:03:85:f4:9a:a5:6e:47:a7:b1:61:
         be:a6:24:63:60:ec:3c:23:c1:b0:2b:3d:15:9a:f2:49:6d:69:
         de:25:9e:11:b4:84:5e:0b:b2:30:4d:46:b5:b4:d8:5c:19:20:
         26:53:ed:0e:8e:93:bd:d3:c8:1f:44:60:b9:85:cb:1e:4a:67:
         78:71:a9:d4:9e:50:27:3d:e8:83:bb:df:e5:ac:26:1f:5a:71:
         5e:56:6a:0c:14:f2:a3:1c:5a:db:c2:f6:76:a5:db:2e:95:38:
         56:e1:25:48:6f:10:24:2b:4f:f4:25:6d:6b:fb:79:25:f4:c8:
         7d:61:35:76:59:6c:f7:4b:fb:c6:14:3d:10:4f:3b:1e:70:5e:
         81:7f:d6:6a:7c:20:a1:09:7d:06:29:16:88:b2:fa:3a:63:40:
         70:28:9d:43:7e:a1:69:d4:f3:99:eb:be:dd:54:6d:ba:5c:45:
         dd:bb:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org