Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36342e302f32342d3234203d3e203437353833.roa
File:                     3139342e3131332e36342e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          5q0EtT65mDEV9GsP/+5SDPElOW+GVrX4WF0SiIhrc6Y=
Subject key identifier:   7D:BD:0B:45:0D:97:B8:8F:D8:8D:DA:17:90:60:EC:0D:17:1F:27:F1
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       5AE23D233E1F79F20B5DA52C50E2D1F622D7D1A2
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36342e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:40 +0000
ROA not before:           Sat 22 Oct 2022 04:28:40 +0000
ROA not after:            Sat 21 Oct 2023 04:33:40 +0000
asID:                     47583
IP address blocks:        194.113.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e2:3d:23:3e:1f:79:f2:0b:5d:a5:2c:50:e2:d1:f6:22:d7:d1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:40 2022 GMT
            Not After : Oct 21 04:33:40 2023 GMT
        Subject: CN=7DBD0B450D97B88FD88DDA179060EC0D171F27F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:e7:a5:89:8a:b8:bf:f9:b6:41:d2:01:0f:
                    8d:aa:b1:73:3f:11:1d:fb:e4:b8:52:0c:0c:ba:45:
                    c4:8e:cb:da:eb:c4:f0:7c:6d:01:a2:b5:e2:bb:7a:
                    1b:0d:48:54:7b:69:f3:ce:a4:9d:0f:81:8a:87:32:
                    b5:7c:e6:61:bb:c3:71:83:4d:01:db:0e:d5:a2:10:
                    c5:c3:de:b1:50:e1:bf:5e:52:ed:fe:38:7a:e0:ce:
                    c4:0f:0a:29:aa:e3:49:0e:85:ab:8a:b8:c7:cb:6c:
                    52:19:a4:64:c8:70:d6:22:da:f6:d2:b3:ab:dc:8d:
                    b5:9a:f6:99:00:fd:1f:16:e3:27:7f:a2:18:39:3e:
                    7c:76:06:d6:a9:bb:ab:b5:ac:e0:a0:87:b0:f3:21:
                    12:29:a9:ac:a6:b1:70:85:8a:e0:e6:02:a2:0a:b9:
                    38:28:f5:7e:60:0a:fb:05:74:6e:f3:a4:9a:62:51:
                    e1:e6:56:b9:02:21:b4:21:20:c5:03:31:c4:75:a5:
                    24:cc:fb:76:9e:9e:b7:dc:bc:e7:22:6c:25:8f:4e:
                    6a:30:78:d9:48:f5:5d:e5:34:ca:17:76:02:ac:4b:
                    c6:c6:dc:3d:66:15:b4:9f:e9:ea:35:71:b2:a3:ba:
                    ce:d0:d3:fd:17:19:1f:22:56:51:46:5f:ca:d0:84:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BD:0B:45:0D:97:B8:8F:D8:8D:DA:17:90:60:EC:0D:17:1F:27:F1
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36342e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:4d:5d:87:d9:71:7c:a5:19:4d:44:d3:7a:1f:fa:9d:99:
         b3:b1:13:a6:68:0a:c3:72:d7:10:cc:5f:9c:1f:e9:f8:d1:c7:
         69:4a:93:30:d4:e6:8e:9b:3a:ab:14:07:18:b9:8c:a9:fc:0a:
         f6:d7:90:1b:f7:69:db:41:2c:8f:c7:56:07:04:f1:7d:54:52:
         b3:49:a3:0e:d6:fe:61:26:90:36:f7:38:78:98:69:de:ce:ec:
         25:ee:fb:1b:24:22:6a:80:8a:f9:4c:75:52:a1:6e:2a:7b:bb:
         7c:f1:04:5b:d0:3f:f4:9b:21:83:76:26:41:5a:8d:2c:b5:9d:
         2b:bf:2b:af:b8:5c:9c:41:32:44:db:16:2e:5a:3e:37:f1:19:
         08:c9:f1:98:26:5b:b1:c8:14:ea:c5:d3:b8:4d:24:e8:3e:79:
         be:64:cd:32:f8:fa:d8:db:97:29:ee:8c:a8:ba:60:45:c4:dc:
         84:96:ef:d0:92:ad:e7:3e:ce:1a:26:b5:37:2e:02:fa:b4:47:
         71:0e:33:8e:88:34:7a:46:e7:5d:16:55:ff:06:04:86:33:a2:
         99:78:c2:e0:12:e3:fe:13:2f:0f:4d:fd:e7:f1:d6:e7:14:75:
         8f:37:47:4d:66:0c:22:a2:87:96:29:74:e9:1c:6e:2b:a2:06:
         65:e6:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org