Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38312e32322e33382e302f32332d3234203d3e2030.roa
File:                     38312e32322e33382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          YTkijKRb/tDh/3K/u1WchW9P93h4V0TemTku16Jiizc=
Subject key identifier:   CE:ED:B4:58:58:D7:0E:7B:7A:1A:C0:A6:18:F9:89:70:30:8E:2B:17
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       5205F9D94577EAE449EEC91F7203EFFB225F9F87
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38312e32322e33382e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:08:14 +0000
ROA not before:           Fri 03 Mar 2023 16:03:14 +0000
ROA not after:            Fri 01 Mar 2024 16:08:14 +0000
asID:                     0
IP address blocks:        81.22.38.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:05:f9:d9:45:77:ea:e4:49:ee:c9:1f:72:03:ef:fb:22:5f:9f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:03:14 2023 GMT
            Not After : Mar  1 16:08:14 2024 GMT
        Subject: CN=CEEDB45858D70E7B7A1AC0A618F98970308E2B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:7a:25:5c:c4:22:d5:80:a2:ab:63:bd:91:
                    98:e9:06:3f:86:b2:5f:3a:e1:4d:ab:14:4b:85:ad:
                    65:8a:e9:dd:a0:c0:c8:7d:6c:74:1d:5e:7b:0a:2f:
                    e9:c5:77:14:bf:0a:ee:b5:95:c5:4d:8a:1d:6b:ec:
                    72:95:0a:55:cc:f4:11:5f:30:91:9f:85:f1:92:15:
                    0c:21:5a:36:82:d1:14:7c:4f:cb:59:83:df:8f:44:
                    9e:2c:77:30:c4:e1:79:70:13:59:ff:7f:79:44:08:
                    51:b8:1f:7b:f6:db:3d:b8:4f:3d:d2:1c:f0:b5:ab:
                    c4:7f:6d:7d:bb:fe:2e:e7:5f:5c:15:d0:f5:60:bd:
                    34:f3:78:a1:e4:9d:64:81:08:1d:9b:da:28:5a:70:
                    03:c0:28:4d:4b:99:5c:fd:39:02:47:3e:e9:d4:60:
                    5d:47:18:2e:3a:95:7e:7e:be:6f:83:97:ac:83:de:
                    d5:e5:21:d8:6b:bd:9f:7e:e9:96:70:f7:8d:41:c9:
                    22:cf:72:09:3f:37:76:cb:ba:be:c3:f5:aa:9b:64:
                    1c:cb:b6:70:7f:7f:30:ab:47:a9:68:ed:d4:98:d2:
                    4c:24:da:a2:68:ed:97:b7:c0:89:d0:8e:18:13:d2:
                    a6:f4:f4:58:11:90:8b:e5:b3:47:13:15:aa:4f:f4:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:ED:B4:58:58:D7:0E:7B:7A:1A:C0:A6:18:F9:89:70:30:8E:2B:17
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38312e32322e33382e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:d2:97:8b:4a:77:af:6e:df:5f:8d:ff:d1:fd:e2:43:41:ad:
         21:7f:ed:4e:be:48:d4:b6:a7:d8:f0:26:60:40:d1:b3:d1:05:
         d5:83:b3:49:e2:67:c2:b9:81:ad:79:96:4b:58:cc:c3:4b:fa:
         ed:ae:97:db:a2:10:bf:e1:b5:53:f6:1d:e6:52:1f:45:ae:91:
         97:0e:2a:98:20:5d:84:25:55:30:2e:b9:df:3e:dd:f9:6f:dc:
         c4:ac:96:50:99:3a:ff:86:26:6c:86:07:9c:fe:24:c4:92:44:
         b3:d9:8c:74:28:c4:bc:9e:48:3d:ed:2a:ba:e0:61:a2:29:c9:
         f7:4d:9c:01:16:dc:f9:49:48:4e:2b:6c:d9:28:c0:cf:fa:7d:
         8b:65:b5:72:d1:98:a5:0e:fb:cb:8b:e0:ca:86:c9:dd:55:6a:
         d1:b5:0d:79:b1:db:74:71:0b:31:21:c1:6a:f2:e7:1e:c3:e1:
         c3:c3:fe:6b:f7:3e:c3:21:2e:47:90:0f:ec:27:97:58:d7:52:
         f3:16:cf:9d:c4:9e:ad:2c:b0:82:42:5a:ca:e3:d6:32:af:8a:
         38:91:57:ed:0c:e5:3a:c6:f2:6c:6a:6f:9a:71:ed:cf:80:5a:
         6b:25:43:40:d0:fd:7e:12:48:16:fc:c0:05:d3:03:78:42:0b:
         16:c2:90:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org