Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3134322e3230332e302f32342d3234203d3e2030.roa
File:                     3139332e3134322e3230332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          UIt5Z7wvKDlDa7bEWSo9tGxnoVELK3ppvl08YMfMN1E=
Subject key identifier:   F9:8E:BA:5F:57:35:08:44:54:0E:30:02:09:94:94:5C:E1:D4:D3:23
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       56058AFEAE1527BEB387DF7B50EB9DB0A6DC62B8
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3134322e3230332e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:46:16 +0000
ROA not before:           Fri 03 Mar 2023 15:41:16 +0000
ROA not after:            Fri 01 Mar 2024 15:46:16 +0000
asID:                     0
IP address blocks:        193.142.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:05:8a:fe:ae:15:27:be:b3:87:df:7b:50:eb:9d:b0:a6:dc:62:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Mar  3 15:41:16 2023 GMT
            Not After : Mar  1 15:46:16 2024 GMT
        Subject: CN=F98EBA5F57350844540E30020994945CE1D4D323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:62:f5:26:00:b7:8c:19:af:8f:d6:3a:a7:
                    08:d1:8c:ff:65:54:f5:57:89:8f:6a:f3:08:36:74:
                    b9:6f:9b:2d:a9:09:b7:77:6d:79:88:39:b6:a8:76:
                    fa:54:9d:d2:a5:e3:44:66:55:da:af:35:4b:68:72:
                    51:a1:1c:4e:12:59:ff:54:81:dc:fe:bb:b7:3e:21:
                    83:23:81:d1:6f:86:0e:1f:6f:c8:e7:54:24:72:dd:
                    1d:ed:04:af:81:b1:03:8f:1a:2a:44:bd:06:f8:89:
                    a1:8d:d6:6d:c0:fa:51:35:a5:3f:13:d3:8f:b9:23:
                    c7:55:f0:b5:f2:d6:e4:a0:9f:e4:13:12:ce:48:cf:
                    5b:50:86:28:97:3a:1b:6c:a3:44:09:ef:84:c4:12:
                    1b:97:16:b7:51:f0:12:2c:d7:13:82:17:3a:6b:ca:
                    01:b6:af:f5:51:8e:53:fd:7e:a5:85:de:ab:f6:13:
                    1e:32:0c:14:49:e2:f2:8e:66:53:0d:3c:92:d0:50:
                    2f:67:1e:39:63:34:94:73:58:99:80:ff:d0:7c:20:
                    02:3f:b2:ca:ce:e4:4c:b2:51:f4:f0:6e:2c:e0:a8:
                    07:7d:ef:3d:6e:ef:2f:bd:d1:a5:ef:6c:19:16:ce:
                    37:01:10:ec:cc:c1:16:9d:fc:d4:a0:bc:53:30:50:
                    98:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:BA:5F:57:35:08:44:54:0E:30:02:09:94:94:5C:E1:D4:D3:23
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3134322e3230332e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:81:00:26:c8:5c:be:48:02:0c:c4:76:d9:b1:20:33:37:41:
         12:df:47:e3:3d:be:8c:a6:81:91:c8:c5:97:10:c7:8f:c9:cb:
         8a:bf:53:7f:41:2e:e5:25:22:5a:59:bf:a0:13:75:88:d6:59:
         f9:ce:c6:a9:7f:84:8c:d9:d9:74:7e:d5:c6:40:a7:c8:8f:0b:
         c2:89:cb:22:9d:f2:fc:94:da:fb:a2:41:01:25:4d:86:3c:b3:
         da:c4:f5:5d:d8:e5:ad:60:51:06:15:6e:d1:4c:e9:7c:b2:1f:
         88:49:75:3a:fe:4a:eb:52:2d:02:fd:ca:6b:72:9d:98:2c:20:
         2c:83:f1:b4:5a:f4:8f:a9:b6:84:dd:92:0d:ea:f5:30:de:86:
         80:af:5f:85:fa:e6:9f:94:9b:a0:0d:4f:39:e4:7a:63:30:dd:
         18:f2:e4:f5:2c:e4:47:ab:dc:c9:a9:ed:7d:ca:27:d7:0a:8f:
         95:6e:8d:89:d5:d5:38:21:73:c7:04:6d:4b:4d:e9:13:50:06:
         eb:c6:78:e7:62:e8:ec:e6:01:84:a2:29:62:e3:dc:2c:6a:71:
         ce:83:22:f0:ae:d3:96:c6:d9:5b:8e:12:5b:c0:d2:79:95:b7:
         a2:e0:4d:3d:70:ad:54:be:c1:6a:b5:cc:19:1c:e9:29:b5:db:
         a9:ad:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org