Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232302e32322e302f32342d3234203d3e203437353833.roa
File:                     3138352e3232302e32322e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          VwnQBh3zTLRWzwP6+lKsHMMxZ2xS2/uzfXkOPef9J18=
Subject key identifier:   A6:D6:6A:4A:BA:32:E5:C2:49:CC:97:43:4B:1B:33:FF:82:79:F1:FB
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       1B08AE46526A540CA932DD2CF299EEDF6A50A774
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232302e32322e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:06 +0000
ROA not before:           Sat 22 Oct 2022 04:29:06 +0000
ROA not after:            Sat 21 Oct 2023 04:34:06 +0000
asID:                     47583
IP address blocks:        185.220.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:08:ae:46:52:6a:54:0c:a9:32:dd:2c:f2:99:ee:df:6a:50:a7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:06 2022 GMT
            Not After : Oct 21 04:34:06 2023 GMT
        Subject: CN=A6D66A4ABA32E5C249CC97434B1B33FF8279F1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:8d:c9:8a:1a:06:32:e4:97:fd:7f:73:bd:
                    72:87:a9:41:99:71:c9:72:52:28:4a:5b:db:20:1a:
                    46:29:74:9b:78:1d:93:cf:23:c0:0f:6c:a5:1b:d9:
                    94:5f:de:fc:72:a3:f1:ac:96:cc:1d:e2:aa:6d:00:
                    2b:58:cb:17:96:37:d4:93:4c:b0:a8:f3:15:c7:c7:
                    51:57:50:2c:59:be:98:a6:e0:77:b5:b2:e2:80:60:
                    0a:d8:c7:c4:29:c7:0c:76:2f:42:27:d8:3b:e2:c3:
                    8d:d8:3c:15:b4:49:7f:16:60:f8:69:c6:2d:19:c0:
                    bc:b3:54:6f:79:19:2e:80:0c:61:7d:36:b7:c3:22:
                    1c:31:7d:43:a4:4d:62:ee:f6:03:9a:80:b6:1f:b1:
                    6f:ae:38:7d:6a:4d:5b:9c:5c:50:b4:47:70:04:3c:
                    17:9c:8c:69:8c:30:80:ed:f7:57:ae:db:0f:ad:81:
                    d6:f7:2c:56:94:00:44:3d:e6:6c:fd:b9:6c:0f:ae:
                    c3:b6:3e:78:03:d0:45:85:b2:6b:5b:b6:16:d0:ce:
                    da:72:35:c4:1b:af:43:1e:9b:65:7d:4a:bf:20:76:
                    83:04:76:64:70:e1:47:aa:e0:18:eb:1a:9e:27:31:
                    90:3e:4c:1a:66:d2:06:83:d5:c0:e4:b6:e6:b5:19:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D6:6A:4A:BA:32:E5:C2:49:CC:97:43:4B:1B:33:FF:82:79:F1:FB
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232302e32322e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:10:c1:75:ec:33:90:38:35:c9:a1:f6:7d:94:48:09:67:6d:
         1f:2b:cb:b3:6a:8f:5f:b9:f2:3b:b6:e9:16:f3:c1:9e:64:04:
         69:8a:b0:0c:ac:87:83:2e:a3:f7:ba:9b:ef:fb:d1:59:55:49:
         3b:35:cc:fc:91:70:e1:d2:25:49:0c:89:83:26:4b:dc:35:89:
         71:0a:83:69:8f:4a:ad:54:16:40:8d:d6:27:6f:0f:81:28:84:
         ea:97:c2:43:15:32:fc:2e:8e:c5:32:85:e0:5e:8c:e9:ac:85:
         4b:5f:b6:b5:79:d4:2a:0a:44:fd:fe:21:59:99:f1:1b:7a:a8:
         3f:00:93:e8:d4:b5:cf:bc:bf:77:58:30:b5:6b:23:46:6f:eb:
         61:17:57:d6:3a:8e:40:97:14:e8:c5:97:da:0d:8d:8b:89:2b:
         55:c9:48:47:4f:a6:6e:e5:62:49:5f:8c:48:50:83:83:ee:02:
         ec:ae:4a:83:3a:67:ff:58:9b:4b:2e:4c:5e:bb:32:29:d2:f1:
         36:c3:3e:2d:c5:bf:54:12:78:a7:5a:23:c7:25:ef:ac:cd:bf:
         8e:c9:43:f8:eb:3f:1e:4d:27:5b:6d:61:ad:e4:30:02:36:8e:
         ce:98:17:0a:45:95:26:62:59:04:72:bf:1e:09:1d:f1:e2:fd:
         9a:b9:0b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:28 2024 by rpki-client on console-fra.rpki-client.org