Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e20323131383331.roa
File:                     3139342e3134372e35392e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier:          7lDOCZmdH98QwQ6GL+WkTDlIc44yWJC5FteTVG/G/Xk=
Subject key identifier:   A9:1E:0D:AC:91:92:38:F6:C2:12:76:4A:B9:30:DC:37:8A:07:F0:60
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       51198B6B08DC84A53D1E6D7779771BD36DF003B7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e20323131383331.roa
Signing time:             Sat 22 Oct 2022 04:33:37 +0000
ROA not before:           Sat 22 Oct 2022 04:28:37 +0000
ROA not after:            Sat 21 Oct 2023 04:33:37 +0000
asID:                     211831
IP address blocks:        194.147.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:19:8b:6b:08:dc:84:a5:3d:1e:6d:77:79:77:1b:d3:6d:f0:03:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:37 2022 GMT
            Not After : Oct 21 04:33:37 2023 GMT
        Subject: CN=A91E0DAC919238F6C212764AB930DC378A07F060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:d9:c1:a3:e6:75:82:91:2f:4d:10:e8:4a:
                    48:3e:e6:0e:bd:62:68:78:06:33:15:26:44:0b:40:
                    81:4a:48:7b:6b:f9:7e:fa:af:3a:ea:a6:0a:0d:36:
                    3c:97:91:6c:26:ea:da:ae:fc:b0:59:8c:23:93:7e:
                    20:1a:6a:cb:cb:e6:8b:23:fc:e3:ca:ab:c7:84:f5:
                    24:d2:30:ce:6e:d4:39:90:34:76:5f:04:6d:d9:6a:
                    bd:4f:a7:6b:4c:2d:1f:c4:2e:2f:95:f1:9e:b1:e9:
                    7b:52:e2:d5:4f:7b:d1:26:68:c8:64:6f:4c:cc:8e:
                    51:b2:c1:c8:61:4d:35:64:38:27:71:25:7f:92:fd:
                    3b:fa:bc:13:af:aa:ec:f4:0f:0e:50:74:12:82:09:
                    94:6b:81:01:01:31:87:80:51:70:83:bc:80:2b:e9:
                    c9:ba:53:8c:e3:81:89:28:f8:88:98:c3:3b:18:e2:
                    96:ae:86:b5:67:13:21:ec:22:70:53:39:0d:05:15:
                    8c:b2:a7:9d:a7:06:27:a8:cf:21:5d:a9:38:ca:6b:
                    04:6f:dd:c2:ed:3c:b8:f0:19:9c:e0:34:77:20:8c:
                    be:2d:02:34:a9:47:ea:ea:26:2a:19:06:af:a1:eb:
                    8b:2a:93:36:5d:b4:fa:cb:8a:d3:9e:34:0f:87:dd:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:0D:AC:91:92:38:F6:C2:12:76:4A:B9:30:DC:37:8A:07:F0:60
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e20323131383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:1d:5f:c3:9c:a8:82:35:f1:b9:2a:21:21:26:aa:ad:24:7c:
         81:18:32:17:4a:02:be:12:58:13:40:2e:92:17:58:ed:d8:83:
         5a:ed:4f:79:76:ae:65:e2:ff:1c:33:93:a9:ec:19:36:70:7b:
         28:4a:e0:c1:d2:0e:6e:b1:67:24:02:89:ef:29:1d:c1:ec:96:
         b5:54:a9:0c:50:01:41:e0:20:98:2a:8d:35:ac:f6:82:5a:94:
         8d:8a:80:c2:c7:b9:43:01:75:72:c0:eb:cd:05:bd:94:59:75:
         aa:2f:2e:ab:82:32:bf:55:95:03:7b:1b:56:44:40:f5:73:5e:
         c8:6f:aa:6b:94:56:f5:f5:c3:ae:5b:65:aa:e1:4e:6b:5a:4a:
         93:df:67:e1:69:73:4e:1c:ca:e2:bb:3c:42:dd:85:18:ed:4d:
         bc:1b:4c:5e:1a:bf:47:5b:f0:cd:8f:9e:a9:e0:49:9a:7f:0d:
         ec:a6:88:c6:38:5b:61:bb:e2:15:b0:12:46:c6:cb:72:24:11:
         3a:c3:a2:73:1c:10:3a:c2:ac:a0:cf:ad:b8:75:b7:83:a0:a6:
         13:ae:be:da:6e:24:b6:5c:56:09:af:e4:32:19:6a:e0:b2:92:
         1b:31:08:9f:8f:0d:08:ab:7b:99:af:90:01:dc:1b:2f:60:54:
         4d:2b:e9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:54 2024 by rpki-client on console-ams.rpki-client.org