Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3332203d3e203531313637.roa
File:                     3139342e36302e3230312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          17CDZjbYYH6ihIGRrOGZ/gfRwM/FxZyyRgsGgI8pW2Q=
Subject key identifier:   80:DA:DC:53:6B:08:43:7F:01:B2:32:C7:22:D0:48:2E:44:20:53:46
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       3B438B951D30DCD381D5576F12A1DFEB3060E910
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:45 +0000
ROA not before:           Sat 22 Oct 2022 04:28:45 +0000
ROA not after:            Sat 21 Oct 2023 04:33:45 +0000
asID:                     51167
IP address blocks:        194.60.201.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:43:8b:95:1d:30:dc:d3:81:d5:57:6f:12:a1:df:eb:30:60:e9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:45 2022 GMT
            Not After : Oct 21 04:33:45 2023 GMT
        Subject: CN=80DADC536B08437F01B232C722D0482E44205346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:6b:b8:c5:1b:f4:29:6a:08:e2:fb:a1:56:
                    e3:1d:c5:ee:13:9b:9c:31:3e:38:a4:b1:c3:ba:2d:
                    b4:c8:47:30:29:38:25:80:79:a4:27:b9:fd:51:10:
                    b1:a5:a1:8c:41:51:ab:8f:35:0e:0c:18:69:c5:cd:
                    9e:59:4e:2d:89:c7:ad:9b:5f:81:65:a7:fd:8b:7b:
                    fc:4d:d6:de:6a:0a:1e:a7:e9:f1:71:a1:0f:cd:f4:
                    77:52:08:f9:55:8c:f1:d6:54:9f:2b:9e:49:a3:04:
                    90:f9:60:47:36:eb:09:26:05:93:a0:ce:85:52:55:
                    c8:a1:6a:cd:c4:3d:21:09:04:bb:5a:aa:68:92:b7:
                    a2:b6:3d:56:97:cc:c8:8c:f3:f5:4f:e8:35:b4:f3:
                    77:fb:ac:04:91:cb:ca:0c:53:85:2f:25:c6:63:17:
                    64:7f:82:30:aa:87:09:b9:27:a6:98:77:18:29:f0:
                    f3:e3:a7:c5:23:f2:dc:fb:22:95:40:61:b5:8b:d0:
                    5d:b9:8f:4c:92:97:20:3a:91:d5:fc:96:e6:d7:4c:
                    2c:a3:51:ac:c9:f6:d0:f0:99:28:6a:9e:0a:bb:d7:
                    0e:25:fb:96:d1:f0:a6:3d:45:4e:51:e9:a8:5d:4d:
                    5f:8c:75:39:3d:87:1a:5d:e2:d0:79:b5:4b:3b:40:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DA:DC:53:6B:08:43:7F:01:B2:32:C7:22:D0:48:2E:44:20:53:46
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:e7:ed:0a:26:7b:c5:c7:7e:4d:99:64:ef:66:d2:3d:0f:e0:
         14:d9:3d:e8:b6:c0:91:ca:23:23:58:78:25:17:76:12:c4:c6:
         e7:35:80:0a:9d:c0:96:c3:f9:cb:6c:c4:79:5d:4f:47:12:40:
         9c:fc:49:0d:a7:b3:28:5a:32:45:1a:d4:84:3c:a1:4c:d5:0f:
         61:f4:cb:8a:ee:89:45:65:3e:dd:25:91:51:a0:6b:85:09:65:
         b8:69:e4:97:17:21:14:ee:7d:ac:6e:9f:96:71:be:5d:e1:2e:
         8c:0d:03:37:06:f8:e7:5e:18:02:06:81:cc:6b:c3:7b:f8:86:
         62:e7:29:72:c9:0b:ae:09:b2:95:91:0c:24:56:bc:9a:e6:ee:
         35:2b:e1:49:24:46:71:c0:ca:fa:dc:ea:9f:05:e1:6a:0c:80:
         cc:8f:f0:d4:3e:4d:d5:2e:2b:c4:34:22:b1:6e:14:b3:68:22:
         a6:c5:7e:74:30:66:c8:c4:f9:bd:f1:81:9a:8f:8e:f2:52:3c:
         f8:42:5d:55:89:ef:61:f4:25:4e:f4:61:8b:ef:3f:57:0d:59:
         f8:2e:af:e3:4b:db:4b:d3:22:14:29:9f:31:81:21:86:88:69:
         b3:94:32:5a:8d:15:89:c3:c0:89:aa:b2:c1:e6:2b:0f:5c:1b:
         57:90:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org