Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36332e302f32342d3234203d3e2030.roa
File:                     39322e3131382e36332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          nkp2amLnMelQpkIIpsEa57NGN2glFKP/pOwKLCgwKCM=
Subject key identifier:   F2:42:F9:CC:6C:C7:F4:D6:44:D0:96:F8:87:5E:41:11:5B:C7:A0:C9
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       28B2345F4CE8B422D85582D543956025FAAD51D1
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36332e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:58:30 +0000
ROA not before:           Fri 03 Mar 2023 15:53:30 +0000
ROA not after:            Fri 01 Mar 2024 15:58:30 +0000
asID:                     0
IP address blocks:        92.118.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b2:34:5f:4c:e8:b4:22:d8:55:82:d5:43:95:60:25:fa:ad:51:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:53:30 2023 GMT
            Not After : Mar  1 15:58:30 2024 GMT
        Subject: CN=F242F9CC6CC7F4D644D096F8875E41115BC7A0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:58:76:48:65:ae:f4:75:32:d3:81:a7:33:
                    f1:ec:66:15:bf:44:9a:56:12:66:ea:10:35:42:98:
                    1e:43:31:5c:b3:4b:16:02:4b:2b:d3:51:22:c6:8a:
                    7c:19:ae:f4:04:df:60:8e:ec:e8:80:08:fb:92:a1:
                    e3:85:96:74:fd:cb:bc:37:94:51:12:5c:06:b9:e2:
                    f9:6c:af:f3:15:f7:ab:a7:71:43:a9:a3:ae:68:8c:
                    aa:04:7a:fc:84:ac:ba:d1:c3:ef:2e:df:17:a3:af:
                    68:58:63:6a:b9:04:85:c4:de:ae:57:d8:4e:d4:00:
                    c8:69:2c:87:05:ea:10:30:26:61:da:86:d6:9b:2a:
                    5c:26:aa:00:26:4f:ba:c2:45:a1:c0:e9:e8:1f:fa:
                    95:d6:cf:66:9c:da:57:95:34:be:4a:89:09:53:df:
                    56:a9:e8:dc:b0:a6:8c:12:29:ed:02:0f:31:36:7c:
                    f7:2d:1f:06:8b:fc:4d:d7:f7:3e:b3:08:07:e5:31:
                    42:3c:d9:a4:f9:0a:67:4c:95:10:8f:c4:5a:75:dc:
                    9c:40:04:c3:95:2c:4f:86:89:97:c9:3a:93:f8:b8:
                    15:65:2c:79:a0:01:ad:29:44:7b:db:bf:02:d9:81:
                    b7:2e:01:43:92:52:16:6e:bc:65:1e:c3:28:93:1c:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:42:F9:CC:6C:C7:F4:D6:44:D0:96:F8:87:5E:41:11:5B:C7:A0:C9
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36332e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ff:c3:59:35:01:3e:85:0c:d3:75:12:94:32:b6:a1:4b:0e:
         59:a8:e2:53:80:95:f1:43:6d:41:ba:c8:4a:4f:09:1b:09:2c:
         d8:ac:7b:3e:88:02:b7:4a:1e:d5:66:43:75:f2:ef:a9:fd:c3:
         a6:7d:35:9d:52:bf:7c:12:80:d3:12:95:71:9d:a7:72:15:f2:
         66:08:76:20:72:b6:0d:db:1d:80:66:72:49:8e:47:d7:0c:f2:
         30:d6:f3:3b:ba:3f:5f:1b:4f:cf:0d:7d:8b:19:7f:ee:15:03:
         9f:49:4b:9c:d2:c7:b7:e3:27:a9:8c:45:8a:27:d8:97:4a:37:
         e6:4e:8f:b2:7d:35:30:c8:b4:f5:93:ed:d2:49:b7:70:e6:1a:
         97:f7:46:c3:3b:0e:4c:1f:75:02:f5:c0:85:ba:85:8c:3d:ea:
         55:a8:a3:0a:6b:5b:06:eb:1a:b6:66:5c:76:61:12:3d:f9:1c:
         40:d0:d1:0c:24:b4:26:1b:f0:8b:04:55:85:ae:70:83:93:98:
         0b:fd:5b:17:a0:df:d3:1c:c1:1d:2e:b7:b9:be:f9:7d:9b:ee:
         01:87:c9:6d:50:fc:56:7e:87:7c:d1:60:19:6e:cd:fc:97:11:
         30:e1:5b:11:45:a9:62:60:70:c4:ea:1d:31:07:9b:dc:98:85:
         f9:6f:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org