Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa
File:                     3139332e33362e3233382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          pW6+U8dIqYz0XxrqsscPHtHfdoZ0VYQ/Mk0/KlVPJos=
Subject key identifier:   7F:C5:7A:FB:1B:62:17:98:48:CD:78:53:5C:B4:D7:57:F0:E7:D2:6A
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       2B82B5E09EA2531A7FF56B5469EB0083CA33FC09
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:55:22 +0000
ROA not before:           Fri 03 Mar 2023 15:50:22 +0000
ROA not after:            Fri 01 Mar 2024 15:55:22 +0000
asID:                     0
IP address blocks:        193.36.238.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:82:b5:e0:9e:a2:53:1a:7f:f5:6b:54:69:eb:00:83:ca:33:fc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:50:22 2023 GMT
            Not After : Mar  1 15:55:22 2024 GMT
        Subject: CN=7FC57AFB1B62179848CD78535CB4D757F0E7D26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:c9:09:47:75:c9:04:de:02:c4:ca:ac:42:
                    9b:f1:dd:cc:f6:eb:58:14:11:dd:48:ff:6c:4f:5f:
                    8d:d1:81:20:9d:3d:53:58:87:b7:91:18:1b:b4:28:
                    f2:a9:2c:de:ef:07:c3:08:8c:8d:a1:1b:ac:14:24:
                    05:2e:3d:65:3f:b8:af:87:5a:be:df:72:d8:87:6c:
                    84:1c:8b:1d:30:45:d9:5f:7b:00:78:80:59:0a:12:
                    11:29:3b:c3:93:ff:82:e7:e0:1e:22:be:c8:a3:32:
                    3c:51:d4:f8:98:aa:6a:b7:e4:25:36:99:78:ed:ca:
                    e4:53:4d:46:c1:43:b1:f3:df:37:b5:1c:fc:99:af:
                    3d:3d:4e:e9:cc:b9:18:ec:32:fe:99:10:10:35:59:
                    50:0b:a7:97:1c:d6:d6:a8:4d:b9:46:8d:4e:b0:e0:
                    2b:6d:92:aa:86:ec:cb:2d:c7:60:19:45:07:76:a1:
                    cf:35:c1:1c:da:da:d0:bd:7b:89:88:c2:f0:87:5f:
                    98:db:cf:03:5d:0b:86:1a:87:17:22:cc:73:0e:ed:
                    43:92:f6:56:7d:49:e5:c1:36:62:b3:5f:80:97:c0:
                    da:ba:bc:82:ac:fc:98:84:bb:7a:6f:50:d3:95:15:
                    88:72:2f:d0:7d:29:2d:8b:0a:d4:f6:6c:4f:99:59:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C5:7A:FB:1B:62:17:98:48:CD:78:53:5C:B4:D7:57:F0:E7:D2:6A
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:c4:fc:f7:ea:7b:cb:6d:4a:c0:5b:3c:cf:c6:f0:15:48:f7:
         3f:8b:1e:de:af:34:6b:fe:33:5a:2b:bb:ee:9a:a0:0f:51:2a:
         fc:f9:61:bd:81:0f:e5:d0:ba:67:66:46:a8:7a:8e:f2:3e:d2:
         2b:81:fa:e3:ea:cf:29:20:2e:00:bc:73:89:f9:0d:65:3c:fa:
         e0:b5:3b:df:7c:a6:37:c9:5f:b3:51:19:de:b7:bc:e4:aa:f7:
         0e:8d:74:74:aa:36:c3:19:65:ea:e2:ed:c0:8f:be:3d:eb:d3:
         b2:1f:fa:2f:2d:df:e5:18:07:33:a1:b8:ec:00:60:06:54:2e:
         c3:4e:70:fe:74:d0:0a:84:c2:9d:94:4e:b3:df:07:20:87:04:
         75:b9:b5:a6:57:24:d2:72:52:38:16:cb:b1:1c:2b:20:e4:89:
         ab:9a:31:1c:3a:af:f3:60:23:e0:d8:c6:46:a3:2a:a1:aa:c0:
         87:b0:6f:5b:2d:ef:b9:bf:cc:a2:b1:69:b2:ad:92:2e:be:94:
         46:f7:92:ef:e4:11:4c:8d:0b:c7:4f:19:76:3c:f2:dd:f4:84:
         09:0f:f0:42:20:01:df:a5:7a:7f:50:07:e6:1c:6c:91:be:35:
         9e:04:86:85:7f:02:0f:a3:38:a1:cf:a3:a4:61:83:37:37:26:
         16:19:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org