Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36372e302f32342d3332203d3e203430303231.roa
File:                     3139342e3131332e36372e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier:          xOCKZkcv0LtINauiMoXHocnSX3jB01HzAPuYPmWE4YM=
Subject key identifier:   62:F3:65:2C:A0:B9:19:F4:34:43:78:D0:1D:DD:4A:65:59:D8:CF:A4
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       7C22018757A3FFFBFDA1FE55141332F7B8F2B8C0
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36372e302f32342d3332203d3e203430303231.roa
Signing time:             Sat 22 Oct 2022 04:33:44 +0000
ROA not before:           Sat 22 Oct 2022 04:28:44 +0000
ROA not after:            Sat 21 Oct 2023 04:33:44 +0000
asID:                     40021
IP address blocks:        194.113.67.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:22:01:87:57:a3:ff:fb:fd:a1:fe:55:14:13:32:f7:b8:f2:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:44 2022 GMT
            Not After : Oct 21 04:33:44 2023 GMT
        Subject: CN=62F3652CA0B919F4344378D01DDD4A6559D8CFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:72:e8:da:94:05:45:1f:33:f2:28:c3:3a:
                    3d:d4:d0:13:5e:00:54:b3:58:da:98:44:42:06:90:
                    57:5b:c7:57:81:45:f6:b7:a3:e0:b1:17:d7:9a:63:
                    14:9b:74:24:df:2f:c3:ab:79:23:0b:4c:e6:76:f6:
                    3b:be:e5:ee:d8:05:1e:a1:e4:03:c5:46:ae:50:d3:
                    33:73:66:37:36:cb:ca:e4:82:1e:04:c1:78:3c:eb:
                    b3:a4:af:ac:76:7c:80:ad:60:0b:57:86:06:43:18:
                    bd:34:a3:5c:38:04:ef:40:96:c2:b2:20:53:41:50:
                    6c:2d:75:d4:61:5a:09:1d:d4:58:d6:4e:5f:38:de:
                    f2:5b:dc:54:0d:08:b3:f6:ff:3a:57:c8:3e:4a:f0:
                    27:ae:fa:26:5f:38:cd:df:ab:ce:35:45:e3:dd:5f:
                    56:47:69:52:ae:ef:ca:0b:41:f5:e7:a0:6a:51:4b:
                    05:51:5e:d4:c6:c6:36:25:4d:07:17:15:18:d1:02:
                    fe:19:35:10:3d:35:e1:99:bd:db:09:81:00:7a:fd:
                    cb:e5:55:31:54:d5:96:d9:5b:f2:c9:0d:54:6d:0b:
                    77:3e:50:69:a7:79:c0:2c:42:39:5b:cc:67:1a:ec:
                    25:de:47:37:f7:64:78:ff:72:60:21:85:b2:33:1c:
                    e9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F3:65:2C:A0:B9:19:F4:34:43:78:D0:1D:DD:4A:65:59:D8:CF:A4
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36372e302f32342d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:8b:6f:27:b2:7c:ae:82:ea:c1:a3:dc:f6:75:54:1f:13:f5:
         28:91:02:4f:44:95:c6:66:46:12:8b:e6:23:2c:5e:46:9d:d1:
         29:34:6b:dd:c0:d2:99:e6:f2:0f:21:57:05:9d:e5:cc:03:63:
         d7:31:b7:62:0a:b5:54:10:59:6a:b8:7d:6f:95:f6:2d:43:4e:
         19:d7:8e:64:21:ab:cc:7f:45:99:de:99:52:56:df:c5:0a:2e:
         2f:e8:b6:94:ce:62:b9:7f:39:b7:5f:95:e6:f6:bc:7b:65:ca:
         f9:64:fe:76:ce:1f:1c:17:77:dd:1d:d9:4f:f0:9b:76:5c:1e:
         41:2c:04:55:3e:35:78:d6:0a:32:4b:57:f6:ff:10:b1:11:e7:
         a6:f4:b8:b5:eb:5a:a8:41:fc:82:6a:a1:0d:fc:36:ef:82:1c:
         af:7b:6c:22:13:b6:c7:fe:2f:90:db:aa:84:77:84:b3:b8:49:
         5d:50:b9:a5:7c:66:b2:8b:5a:85:21:ae:49:29:e9:72:15:9b:
         ea:b8:06:ca:e4:2f:0b:18:68:65:b5:77:f8:49:17:b0:53:a8:
         55:8c:a6:9b:26:60:bf:8b:a3:a4:d6:00:a3:d6:a8:ad:27:7f:
         3d:13:b1:f2:72:6d:36:d4:5a:67:c7:1b:ac:53:20:a0:a4:32:
         7a:58:8e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org