Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234332e35362e302f32332d3234203d3e2030.roa
File:                     3138352e3234332e35362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          ddhMUu5/4y/OafelVHDcyqryQUOwJG7C8x5AZSePdik=
Subject key identifier:   63:B8:8A:A9:05:2D:C4:05:5C:CE:9F:F4:D0:59:31:D8:1C:99:6E:39
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       6FF2B32AB4BAD951064E078D26C5EC072D76C6F6
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234332e35362e302f32332d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:42:07 +0000
ROA not before:           Fri 03 Mar 2023 15:37:07 +0000
ROA not after:            Fri 01 Mar 2024 15:42:07 +0000
asID:                     0
IP address blocks:        185.243.56.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f2:b3:2a:b4:ba:d9:51:06:4e:07:8d:26:c5:ec:07:2d:76:c6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Mar  3 15:37:07 2023 GMT
            Not After : Mar  1 15:42:07 2024 GMT
        Subject: CN=63B88AA9052DC4055CCE9FF4D05931D81C996E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:5b:4f:3a:53:39:3f:55:19:37:ad:80:85:
                    91:aa:07:25:96:a6:81:20:fb:00:64:c0:6b:33:02:
                    f3:c9:35:f4:cb:1d:bc:50:5d:42:5b:6c:24:42:2c:
                    63:54:80:b0:3f:6d:30:c5:29:01:b7:5b:b0:3a:d0:
                    36:77:0a:73:5a:46:03:ff:50:ac:f9:91:0a:c0:d9:
                    22:51:9e:63:56:73:82:95:fe:ad:3b:d3:67:d2:84:
                    b9:44:76:a4:87:e9:42:a7:53:40:10:fa:b6:e1:22:
                    e2:8b:b7:7e:1b:e0:d2:e3:eb:8f:9c:71:cc:38:ab:
                    b8:74:73:83:6d:68:46:13:e0:10:15:ca:7e:2e:97:
                    63:78:6c:68:74:c5:81:6b:99:68:43:8a:61:4c:ae:
                    ec:b5:8b:c1:02:48:0c:f0:94:9d:8a:88:29:36:87:
                    a2:04:40:0e:cc:9d:33:8a:bb:5e:15:65:f9:78:3c:
                    97:3e:05:04:0d:47:9d:7e:90:f1:45:57:01:f5:29:
                    14:67:30:6c:47:75:92:b8:39:cc:3e:34:f5:bc:32:
                    ee:af:85:4c:86:8b:c0:89:b5:03:3c:21:00:3e:db:
                    8a:40:6e:64:56:20:4f:11:cb:65:e3:76:c2:40:1c:
                    5d:77:0c:9b:e1:14:4d:39:67:3a:89:fa:56:17:4d:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B8:8A:A9:05:2D:C4:05:5C:CE:9F:F4:D0:59:31:D8:1C:99:6E:39
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3234332e35362e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:11:34:2b:a6:96:a1:09:43:cd:72:2b:9a:5c:9c:e6:d6:
         7e:b8:09:ea:0f:45:54:32:0b:08:ff:eb:cc:6b:9d:14:2c:f1:
         3d:c1:81:76:f9:df:5a:ce:7f:20:bf:c3:3d:78:80:dc:46:01:
         00:28:90:c5:0f:5e:a7:ce:fb:86:da:b4:31:14:dc:ec:c8:bd:
         b8:f6:77:7b:e3:23:40:34:9b:cc:25:99:04:55:0a:41:4d:3c:
         64:37:b8:e3:10:43:bc:90:17:0e:33:ec:4f:a7:1f:a6:f2:dd:
         c2:bc:5e:c9:2b:6e:f8:26:a9:c8:a6:c4:52:52:3a:87:ef:57:
         bd:f8:76:38:2e:93:0c:32:2f:67:d5:f1:f6:fc:7e:66:e8:3b:
         dd:d5:5a:52:bc:1b:c5:40:88:5c:36:04:c5:45:2f:ff:35:e4:
         f6:06:05:02:57:93:b2:0a:19:f0:61:94:7d:0f:5a:1b:5f:1b:
         5e:61:77:a0:e8:8a:8d:bc:c8:89:4d:a4:24:a7:06:10:15:77:
         4a:0d:e4:f1:12:cd:e0:97:91:8e:b1:81:d2:45:04:11:06:fc:
         1b:ae:c9:1b:14:b5:b8:f8:bc:4d:25:2b:b1:e1:ad:a3:e5:d6:
         1a:4b:7f:3a:9d:df:a2:8a:69:92:2e:09:81:bf:e7:60:33:c5:
         ac:64:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:55 2024 by rpki-client on console-ams.rpki-client.org