Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31342e302f32342d3234203d3e2030.roa
File:                     3139332e3230332e31342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          KT9PMKlkZU8kEGrXIgNTKEeB1G9+69Tc4nq35YZY1t4=
Subject key identifier:   3C:00:D9:2B:84:AF:EA:6F:77:13:27:36:CD:E9:95:60:97:FB:39:FC
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6FCB104D91C51E6E7A0016C02648331A688F3470
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31342e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:48:01 +0000
ROA not before:           Fri 03 Mar 2023 15:43:01 +0000
ROA not after:            Fri 01 Mar 2024 15:48:01 +0000
asID:                     0
IP address blocks:        193.203.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cb:10:4d:91:c5:1e:6e:7a:00:16:c0:26:48:33:1a:68:8f:34:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Mar  3 15:43:01 2023 GMT
            Not After : Mar  1 15:48:01 2024 GMT
        Subject: CN=3C00D92B84AFEA6F77132736CDE9956097FB39FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:a4:62:ab:f0:d9:cd:99:8e:4c:39:9b:f9:
                    39:cc:96:5d:56:53:77:2c:72:1e:f4:a1:ce:9c:33:
                    ca:9e:0d:19:af:8c:c9:26:1e:72:f8:dd:56:ae:32:
                    8c:01:31:e4:52:34:bc:73:5f:5c:72:b5:8c:e0:2e:
                    f7:e0:49:0b:01:7b:31:9f:52:2f:f0:e8:d3:0e:93:
                    c8:52:f2:4b:3e:da:5d:61:c0:e1:75:e8:41:85:10:
                    7c:69:e7:f1:96:3a:6d:8d:d0:a7:9a:27:f9:8d:8e:
                    9c:b9:0a:6a:7b:57:f2:6d:a4:54:89:10:2d:f9:2a:
                    bf:4f:35:e8:b8:25:ba:8e:b8:18:33:65:f2:9f:64:
                    66:b2:9f:3c:b4:fd:e4:3a:cb:17:55:5c:96:7d:8c:
                    f1:b6:3b:06:84:9c:8b:15:65:0d:24:d8:9e:4e:c8:
                    89:24:b4:ed:31:83:1d:2a:2f:08:fe:af:01:bf:3f:
                    ee:ea:b6:c2:3f:c0:b6:95:f2:21:51:9a:d3:8f:6a:
                    73:0c:8a:49:02:22:31:98:54:4f:88:58:80:c4:a1:
                    39:e3:56:15:b0:c5:f7:41:27:a1:5e:5d:5f:68:b4:
                    9e:d2:57:c1:9c:1b:42:bd:d9:6e:83:fd:a8:ec:8d:
                    56:d3:8b:9f:a1:2e:e9:e1:2f:8f:0d:4a:57:01:f8:
                    d6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:00:D9:2B:84:AF:EA:6F:77:13:27:36:CD:E9:95:60:97:FB:39:FC
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:a1:42:d4:fb:6f:cd:ab:55:e3:2a:72:c1:61:e5:99:a5:
         ec:3b:5d:f9:c7:ad:b6:17:41:c1:88:5d:bf:86:f7:1a:12:72:
         1e:4d:00:46:b6:52:7f:0c:0a:d5:28:73:17:88:0e:29:b6:63:
         93:a7:eb:6b:c6:b9:a9:a7:4b:92:64:5b:05:a2:cb:64:5c:cb:
         1b:3c:25:ca:f9:26:78:7b:56:bc:e0:66:81:42:34:80:f2:4f:
         12:01:a1:88:73:a1:11:e8:e4:ef:30:9e:3e:99:19:6d:42:60:
         f7:ff:8c:f5:da:c8:27:77:39:d6:65:59:d9:6c:35:cc:84:bd:
         55:5f:11:83:cc:0a:80:a2:81:a9:c7:b8:eb:0e:4d:63:e4:f6:
         22:ec:76:06:21:6c:c2:a5:90:e1:eb:50:b5:4d:ea:a7:a1:46:
         01:31:87:68:78:58:a6:60:bd:63:6f:b2:be:db:32:2e:83:b5:
         8c:9f:b4:31:e3:18:ee:18:5a:ad:0a:b6:7b:ea:25:2c:e1:9f:
         b1:37:18:aa:79:56:68:65:ee:be:6a:2e:c9:cc:62:64:35:b1:
         16:9b:7e:b5:61:d8:42:4b:e6:4d:2c:25:a7:33:f3:65:18:ae:
         ca:71:d2:44:da:7c:44:1f:7c:ca:d1:0d:17:30:9a:33:2c:58:
         37:9f:61:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org