Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231332e32352e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231332e32352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          stlfp5Au9uVxb+cck63unmP0FO1wMSrHCHnPTffvtt0=
Subject key identifier:   87:6C:3B:A0:10:C5:A7:7D:FF:25:BB:56:73:13:B3:DD:1F:3B:55:2D
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       68BBF63C2B51743EF877F4634DEC616079277361
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231332e32352e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:08 +0000
ROA not before:           Sat 22 Oct 2022 04:29:08 +0000
ROA not after:            Sat 21 Oct 2023 04:34:08 +0000
asID:                     51167
IP address blocks:        185.213.25.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bb:f6:3c:2b:51:74:3e:f8:77:f4:63:4d:ec:61:60:79:27:73:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:08 2022 GMT
            Not After : Oct 21 04:34:08 2023 GMT
        Subject: CN=876C3BA010C5A77DFF25BB567313B3DD1F3B552D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:46:16:46:fb:41:5e:22:bc:be:11:aa:da:
                    b7:56:ca:71:d1:9d:dc:48:11:99:26:9c:52:3f:eb:
                    3a:c6:81:8b:48:a2:82:cd:43:51:82:fc:c9:df:53:
                    da:99:38:b8:04:4d:de:4b:4b:44:85:99:84:d6:ac:
                    87:58:38:ac:16:98:93:c2:a0:7d:24:93:9a:ad:a2:
                    29:35:b4:d2:f9:38:4e:37:de:ce:02:93:30:8c:3c:
                    ee:45:53:40:dc:30:ed:27:1c:40:cc:80:84:cc:d1:
                    0e:59:26:af:0c:5e:2f:37:70:11:38:87:35:6a:c0:
                    cc:6f:d2:d4:17:d7:81:b5:d5:21:b5:15:ca:e3:e3:
                    28:06:c0:b4:55:40:0f:cd:df:5e:fc:f5:df:38:cf:
                    e8:64:b3:e0:42:cd:b4:ac:bd:0e:22:7e:55:ec:03:
                    83:4e:b9:d4:34:75:a3:20:8a:69:6e:b3:67:08:80:
                    76:06:70:09:3e:aa:80:d2:78:f1:b4:f1:05:f7:e2:
                    90:95:df:04:41:40:a7:f0:1f:82:19:ae:d9:c1:20:
                    86:61:e3:d0:07:77:21:7d:b9:65:f0:f1:2d:3f:dd:
                    aa:d1:da:45:20:70:a7:a0:0a:4d:bb:a4:32:ad:d4:
                    a6:5e:4c:f7:7a:5e:cc:09:55:19:e8:96:d4:59:28:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6C:3B:A0:10:C5:A7:7D:FF:25:BB:56:73:13:B3:DD:1F:3B:55:2D
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231332e32352e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:55:e8:1a:85:81:b8:c2:40:8a:2f:b4:59:a5:27:35:ca:48:
         82:cf:1e:ac:f2:ed:b9:19:00:fc:53:aa:ba:d7:a4:3e:6a:61:
         5a:4d:12:0c:55:11:9a:da:d6:6f:73:7e:e9:2f:a6:ba:6f:c2:
         15:13:65:c7:79:19:91:53:0a:9d:60:93:7f:9d:a1:6a:43:72:
         30:29:f4:b8:41:14:33:9c:1b:37:78:79:00:c4:bc:02:df:7a:
         e2:1c:38:d6:19:8c:d0:5c:a7:15:25:3a:70:b5:6e:8f:a7:c0:
         f0:87:8c:13:a8:99:36:af:00:d4:f1:0b:12:08:67:92:5e:bc:
         f3:cd:54:af:ab:db:46:76:d9:50:5c:17:06:58:42:ba:5b:04:
         b2:18:8d:2b:9b:6d:74:a8:f9:c3:e1:e8:66:86:4d:39:21:20:
         dc:b0:b7:97:ed:56:96:d2:01:c8:14:65:af:bf:c6:3c:60:6d:
         7c:9d:87:20:5f:bb:fa:23:11:f7:34:04:c0:1e:11:4b:23:ca:
         37:ba:6d:5a:88:14:56:85:4d:a0:0a:95:18:bc:96:9a:02:33:
         44:fb:08:f9:d5:ab:16:ff:4f:29:52:d6:7b:43:e6:12:24:ef:
         a8:ac:7d:ad:d7:9c:24:09:8d:5e:bf:5d:11:28:82:bc:61:dc:
         42:bf:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:28 2024 by rpki-client on console-fra.rpki-client.org