Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/164/3139332e3136302e3131382e302f32342d3234203d3e20333938343634.roa
File:                     3139332e3136302e3131382e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          9x8ntrZcX+TVYn+4P7Jh4whssstozUZEje+F25yrZE0=
Subject key identifier:   73:EE:30:65:2A:F2:29:46:33:D2:AA:11:48:EB:FF:21:67:38:9C:3E
Certificate issuer:       /CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
Certificate serial:       138309BA218421A7356E3E40F4A99F6F57583B73
Authority key identifier: 7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/164/3139332e3136302e3131382e302f32342d3234203d3e20333938343634.roa
Signing time:             Tue 28 Jun 2022 04:40:19 +0000
ROA not before:           Tue 28 Jun 2022 04:35:19 +0000
ROA not after:            Tue 27 Jun 2023 04:40:19 +0000
asID:                     398464
IP address blocks:        193.160.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:83:09:ba:21:84:21:a7:35:6e:3e:40:f4:a9:9f:6f:57:58:3b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebd1421d6ee46b714647fb7d198ae4601b63729
        Validity
            Not Before: Jun 28 04:35:19 2022 GMT
            Not After : Jun 27 04:40:19 2023 GMT
        Subject: CN=73EE30652AF2294633D2AA1148EBFF2167389C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ca:ee:c0:ae:93:01:ba:58:46:cd:94:dd:cc:
                    d7:1e:cf:f6:f5:bd:02:1e:63:de:fe:81:0c:14:1a:
                    3a:d6:33:64:2b:76:23:8e:67:93:ac:bc:0c:d8:21:
                    de:a9:f5:95:10:c8:d4:2a:70:bb:a3:a5:92:0d:e1:
                    14:cf:76:94:ff:a8:a9:20:aa:40:33:44:ba:01:a3:
                    8e:86:9a:a3:5f:00:af:f9:21:0c:3b:9c:9b:02:cb:
                    19:91:dd:55:6b:45:3d:0d:45:b0:b4:e8:26:33:14:
                    3d:1a:d5:d9:fc:4e:13:07:21:ef:19:ad:c1:1c:dc:
                    c3:0d:e8:00:09:79:ff:ae:12:68:65:97:0d:5d:8e:
                    df:0e:c2:f6:c1:03:9b:87:fb:a5:48:13:82:a7:a4:
                    a2:1f:60:b5:61:74:e7:52:ea:19:30:b1:a5:1c:51:
                    24:75:de:0d:5f:e7:13:fd:59:62:f8:fb:de:1c:1e:
                    dd:8e:78:16:bc:ac:d2:8d:9d:bd:74:c3:6a:12:c6:
                    71:04:b3:fd:1f:a6:e5:dc:d3:3f:65:c3:b0:43:81:
                    6b:69:5c:f0:68:c3:eb:3b:1f:13:c8:dd:10:9d:d9:
                    9b:e7:b8:98:27:96:04:29:51:1d:8b:c4:f6:15:aa:
                    c4:14:0f:08:9f:7b:12:91:87:94:0b:22:c3:14:46:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EE:30:65:2A:F2:29:46:33:D2:AA:11:48:EB:FF:21:67:38:9C:3E
            X509v3 Authority Key Identifier:
                keyid:7E:BD:14:21:D6:EE:46:B7:14:64:7F:B7:D1:98:AE:46:01:B6:37:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/7EBD1421D6EE46B714647FB7D198AE4601B63729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fr0UIdbuRrcUZH-30ZiuRgG2Nyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/164/3139332e3136302e3131382e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:48:81:bf:da:e7:8c:3c:92:14:4a:f8:69:27:d5:43:99:
         5f:87:fa:b5:d9:1a:03:1a:27:c8:f3:25:3a:4f:42:0b:ab:24:
         45:c9:50:55:6c:6d:93:20:0a:66:bc:04:bf:e7:a1:cc:03:51:
         35:18:a4:87:90:1e:e0:4e:be:fa:20:3d:63:65:78:7a:99:a7:
         18:0c:e1:c0:40:ef:15:d3:2b:77:54:e4:82:02:e7:e8:5e:8e:
         92:5e:24:74:07:32:29:81:61:67:1a:85:69:e1:1f:87:ac:e8:
         8a:85:01:90:84:17:01:9c:7b:88:f3:78:f4:d9:ae:c7:8e:31:
         8d:ae:a1:7b:72:47:28:58:55:5f:98:3c:6f:89:d2:63:55:59:
         6b:23:00:35:34:13:3d:2f:79:d5:2b:d2:53:88:72:ed:ce:06:
         c2:51:1a:30:c9:9a:fe:ab:c9:af:99:93:bc:2b:d2:fa:b1:63:
         84:3b:ac:5a:b1:03:a2:19:f5:de:9e:9f:d4:52:46:d6:03:0a:
         fb:a6:ed:7c:6a:cb:e1:f8:4c:7c:5c:a7:9a:2f:a4:c6:5e:29:
         2a:f8:73:fe:1f:1e:01:39:87:dc:b7:50:06:65:92:f5:b2:72:
         68:0c:c8:ca:af:db:06:3e:39:0f:3b:2a:10:0d:a2:2c:40:af:
         c7:0f:1e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-fra.rpki-client.org