Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e203631333137.roa
File:                     3138352e3231352e3138312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ngO7+E31ehrfip3yQQphZBe2dRucHns/DZsqbKbW3lk=
Subject key identifier:   7E:76:AF:C3:9A:C1:9D:77:BC:F9:56:95:A0:39:91:D2:BF:A8:52:0C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       19D263D00F13B1533E0DABBA8E6164A2F6BCB057
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:34 +0000
ROA not before:           Tue 28 Jun 2022 04:35:34 +0000
ROA not after:            Tue 27 Jun 2023 04:40:34 +0000
asID:                     61317
IP address blocks:        185.215.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d2:63:d0:0f:13:b1:53:3e:0d:ab:ba:8e:61:64:a2:f6:bc:b0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:34 2022 GMT
            Not After : Jun 27 04:40:34 2023 GMT
        Subject: CN=7E76AFC39AC19D77BCF95695A03991D2BFA8520C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:20:8e:89:fb:f5:05:22:0c:47:b7:67:4c:
                    f6:cb:5e:d8:e9:12:38:e8:da:eb:af:fe:e7:af:ee:
                    bc:16:1e:8b:05:d3:40:19:aa:fb:8a:17:c2:aa:52:
                    af:e5:b6:f9:d2:87:b7:fa:1b:68:6c:81:53:1d:29:
                    ea:db:64:11:b8:82:0e:7b:59:de:76:36:94:40:70:
                    5c:53:a4:f5:f0:4a:b7:be:cc:c5:06:66:1d:57:f0:
                    d9:ff:f3:4a:dd:4e:08:44:f7:10:67:9e:f1:e7:a9:
                    aa:7d:31:4e:d4:0f:91:74:86:c3:ec:54:08:65:54:
                    d1:aa:54:03:97:ab:fc:0e:b3:ed:43:30:76:4f:6a:
                    d5:cb:19:06:4f:79:a6:36:b0:fe:37:f4:1c:56:ca:
                    e4:2d:37:8f:e3:0d:04:b2:94:ba:2f:33:57:f0:26:
                    d1:89:93:bd:73:f2:39:5c:ea:ce:3b:a9:e1:c7:cc:
                    60:4b:96:38:17:0c:a3:77:c3:9d:4b:ce:8a:c0:2a:
                    cc:08:57:40:03:e2:59:16:b3:45:03:be:bb:b5:e3:
                    99:a7:af:d5:75:43:0d:40:83:01:63:7d:19:39:c3:
                    fc:80:36:66:c9:0c:43:47:00:98:47:63:99:c2:c4:
                    9e:24:b2:1d:46:df:30:38:eb:b6:ad:b8:1a:a0:74:
                    c9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:AF:C3:9A:C1:9D:77:BC:F9:56:95:A0:39:91:D2:BF:A8:52:0C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:f2:f8:90:b7:b6:b5:2f:3e:aa:15:e3:03:fd:81:91:e2:79:
         a4:53:b3:d0:8b:50:33:a8:27:cf:8b:bd:28:28:88:a2:d8:df:
         94:9b:4d:c2:54:79:d7:9a:c4:e1:15:43:cf:43:9e:5f:23:33:
         93:f4:8d:96:1c:1c:7b:f0:c2:9d:d5:ad:8c:8c:ba:e3:23:59:
         c2:fc:5b:0c:b0:4b:e4:38:00:aa:92:ea:7d:7e:c8:56:bd:b3:
         89:5b:8f:6e:68:ea:2e:f4:12:41:35:6b:c3:65:61:a7:d4:78:
         51:2e:eb:69:ea:08:cf:10:36:05:c5:24:1e:23:76:0e:75:0c:
         ce:39:4f:d3:ec:37:57:54:61:1c:23:db:5a:d3:33:a7:54:f2:
         67:da:d4:1f:00:8b:65:8e:74:62:b5:9d:3d:13:a9:90:12:4c:
         78:f4:3c:c3:c1:85:eb:e3:de:62:95:c2:7f:33:cb:e3:f5:ed:
         57:43:12:66:3d:99:9f:25:32:be:de:94:f7:6f:35:b2:48:a2:
         de:25:53:59:b7:6c:0d:ba:82:09:fc:e5:5e:00:3b:81:b2:c2:
         6d:3b:db:80:cd:97:76:37:d3:b1:b8:21:78:47:97:d2:8b:87:
         33:c6:c3:bf:bb:b9:c4:26:84:25:09:08:95:97:36:bf:d1:5b:
         60:91:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org