Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3230352e31322e302f32332d3234203d3e2030.roa
File:                     3138352e3230352e31322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          JjwHO3Plvxnm1iJGyp5XB8RKmbh/wZ/off27EYbYCHs=
Subject key identifier:   67:20:BD:F6:81:CB:01:D1:B2:48:C3:5D:46:10:D6:91:BD:26:53:DF
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       76CBCD09EDDC75FE3F7320BD152B771AAD694D19
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3230352e31322e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:35:09 +0000
ROA not before:           Fri 03 Mar 2023 15:30:09 +0000
ROA not after:            Fri 01 Mar 2024 15:35:09 +0000
asID:                     0
IP address blocks:        185.205.12.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cb:cd:09:ed:dc:75:fe:3f:73:20:bd:15:2b:77:1a:ad:69:4d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Mar  3 15:30:09 2023 GMT
            Not After : Mar  1 15:35:09 2024 GMT
        Subject: CN=6720BDF681CB01D1B248C35D4610D691BD2653DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:31:5e:3a:44:e7:52:67:30:51:a9:37:73:d3:
                    ce:f5:be:88:dc:f9:ee:ac:84:80:ab:2c:a1:0f:53:
                    05:56:c1:05:b3:6e:9c:e0:59:85:fb:ab:15:b6:6d:
                    7f:46:37:d1:67:cb:f9:ba:ec:60:c7:41:33:89:f6:
                    04:ea:91:6d:d1:92:ff:0e:aa:49:e3:8b:16:90:5b:
                    1b:89:93:c0:db:ad:54:76:6a:5d:b8:c4:58:ab:89:
                    3c:bd:6d:ba:2e:5b:df:78:5d:08:04:fe:ae:23:76:
                    c4:c4:2a:b4:ea:ec:b9:91:90:90:7b:76:30:8b:44:
                    7d:7d:ed:ca:b0:bd:06:b7:60:07:bf:a8:c0:ef:8e:
                    02:3f:c7:9c:b5:c1:45:0e:ec:c1:9e:7a:04:03:ef:
                    fa:65:b7:be:24:4f:eb:d9:28:2a:43:89:07:6b:02:
                    1e:51:32:c6:05:dc:e4:b9:1a:d2:74:ce:13:0c:83:
                    cd:a1:7f:60:56:80:b0:aa:69:a3:14:cb:1b:bb:00:
                    86:9a:21:27:4a:b7:09:d8:89:67:fc:e4:86:9d:e4:
                    25:05:2f:df:a7:ad:51:31:4e:cd:08:7e:ef:d8:3e:
                    ad:7b:f8:9e:f8:7f:29:c6:b4:c8:2e:d3:76:d4:3e:
                    cd:65:08:3f:c9:b2:49:f1:36:6c:ca:bb:6c:4c:b9:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:20:BD:F6:81:CB:01:D1:B2:48:C3:5D:46:10:D6:91:BD:26:53:DF
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3230352e31322e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:2f:29:76:3a:5f:19:d3:3e:f0:e8:0b:a1:e3:59:30:85:43:
         a5:e9:76:83:fd:96:98:75:b7:55:94:d2:8a:c0:44:48:ac:9a:
         2a:bb:42:28:38:0a:0b:06:39:22:62:70:4e:41:d1:8e:db:4d:
         3a:7b:fc:25:20:92:b9:ab:f9:17:e3:43:5d:57:2b:26:61:0b:
         89:93:1e:3a:59:62:3a:3f:e2:45:2a:90:37:0e:1a:7d:3e:b7:
         61:df:8b:64:bd:08:9a:3d:22:4d:2c:7d:b1:44:b4:21:a8:75:
         87:00:ec:42:6c:65:bf:c0:a8:df:bb:8a:e6:db:18:d6:20:9b:
         48:71:3f:d7:f9:66:b5:9b:00:18:f9:e7:01:aa:ea:67:1c:4b:
         e6:9c:dc:ec:9a:18:66:ea:88:b9:58:24:21:da:7d:43:b5:73:
         da:e9:6a:54:dc:ba:66:ac:48:93:c6:a3:a6:69:65:24:07:af:
         2a:b6:be:b3:d3:01:21:0b:a6:96:46:74:a4:31:e3:1f:6a:2c:
         ac:81:8c:73:64:a1:48:ec:30:39:41:c5:c1:e5:10:d7:b8:a6:
         f4:42:4e:21:55:67:9b:13:13:c4:33:09:84:11:a3:7e:c3:3f:
         a8:26:d4:1e:36:f6:5d:3d:c1:67:fe:1c:ee:29:15:9c:76:e6:
         62:c6:1a:12
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUdsvNCe3cdf4/cyC9FSt3Gq1pTRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJkMjljOTk2YWJjYzcyYzcyMjc5ZWY3ODk4Nzk1MWI4
MjVhZTQwMDAeFw0yMzAzMDMxNTMwMDlaFw0yNDAzMDExNTM1MDlaMDMxMTAvBgNV
BAMTKDY3MjBCREY2ODFDQjAxRDFCMjQ4QzM1RDQ2MTBENjkxQkQyNjUzREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXMV46ROdSZzBRqTdz0871vojc
+e6shICrLKEPUwVWwQWzbpzgWYX7qxW2bX9GN9Fny/m67GDHQTOJ9gTqkW3Rkv8O
qknjixaQWxuJk8DbrVR2al24xFiriTy9bbouW994XQgE/q4jdsTEKrTq7LmRkJB7
djCLRH197cqwvQa3YAe/qMDvjgI/x5y1wUUO7MGeegQD7/plt74kT+vZKCpDiQdr
Ah5RMsYF3OS5GtJ0zhMMg82hf2BWgLCqaaMUyxu7AIaaISdKtwnYiWf85Iad5CUF
L9+nrVExTs0Ifu/YPq17+J74fynGtMgu03bUPs1lCD/JsknxNmzKu2xMuSI/AgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUZyC99oHLAdGySMNdRhDWkb0mU98wHwYDVR0j
BBgwFoAUItKcmWq8xyxyJ573iYeVG4Ja5AAwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzMvMjJEMjlDOTk2QUJDQzcyQzcyMjc5RUY3ODk4Nzk1MUI4
MjVBRTQwMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0l0S2NtV3E4eHl4eUo1
NzNpWWVWRzRKYTVBQS5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
My8zMTM4MzUyZTMyMzAzNTJlMzEzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBuc0MMA0GCSqGSIb3DQEBCwUAA4IBAQA3Lyl2Ol8Z0z7w6Auh
41kwhUOl6XaD/ZaYdbdVlNKKwERIrJoqu0IoOAoLBjkiYnBOQdGO2006e/wlIJK5
q/kX40NdVysmYQuJkx46WWI6P+JFKpA3Dhp9Prdh34tkvQiaPSJNLH2xRLQhqHWH
AOxCbGW/wKjfu4rm2xjWIJtIcT/X+Wa1mwAY+ecBqupnHEvmnNzsmhhm6oi5WCQh
2n1DtXPa6WpU3LpmrEiTxqOmaWUkB68qtr6z0wEhC6aWRnSkMeMfaiysgYxzZKFI
7DA5QcXB5RDXuKb0Qk4hVWebExPEMwmEEaN+wz+oJtQeNvZdPcFn/hzuKRWcduZi
xhoS
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:28 2024 by rpki-client on console-fra.rpki-client.org