Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32322d3234203d3e203631333137.roa
File:                     3138352e3138372e3233322e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          0hFCPcYJCjpguKRdZCtcJUAk645413ghWgDed10onjw=
Subject key identifier:   FD:72:10:86:07:92:3A:C2:2F:B9:A1:7A:55:A3:3C:F6:48:2F:D2:5E
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       62CA5F0000BE44FD82608A5BCBC269CB711DF64F
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32322d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:40:23 +0000
ROA not before:           Tue 28 Jun 2022 04:35:23 +0000
ROA not after:            Tue 27 Jun 2023 04:40:23 +0000
asID:                     61317
IP address blocks:        185.187.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ca:5f:00:00:be:44:fd:82:60:8a:5b:cb:c2:69:cb:71:1d:f6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:23 2022 GMT
            Not After : Jun 27 04:40:23 2023 GMT
        Subject: CN=FD72108607923AC22FB9A17A55A33CF6482FD25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7c:9b:84:0d:e0:7b:55:eb:69:80:e1:3b:ce:
                    ae:fa:24:4c:de:c6:fd:c2:c6:12:12:6b:46:4e:2a:
                    b8:1a:27:9a:f3:8d:32:54:ce:d8:90:b9:01:c3:a9:
                    a1:1f:59:12:16:77:e4:3b:f3:b9:71:9e:d6:86:ac:
                    17:f1:d8:73:ed:c6:51:f9:2d:96:42:30:c6:72:b8:
                    ff:2b:b9:0f:18:0a:a2:6b:4d:52:b0:1c:b0:d0:f6:
                    6c:dd:05:8a:07:59:3d:2d:66:7a:6b:eb:da:05:bf:
                    cd:09:93:e8:d5:1f:20:93:b6:1e:8a:57:17:ce:f4:
                    7b:ba:7b:60:e9:18:81:e7:6a:a8:8c:72:9b:0a:17:
                    94:76:eb:ee:46:b1:ab:2c:b6:55:0c:19:65:f1:0a:
                    05:ad:a5:0e:80:b9:13:09:78:f6:50:9d:12:33:95:
                    91:dd:a9:ae:b3:f0:6c:14:8e:42:1f:1f:ee:59:21:
                    12:35:f0:09:e8:d3:0d:34:20:72:fc:5d:49:14:af:
                    be:c1:a2:88:e4:ea:a2:da:4a:3f:8f:95:38:fc:06:
                    4b:ae:0d:70:ac:ca:86:d3:46:ab:0a:3d:ac:ea:ac:
                    3f:b5:cd:cc:b1:db:55:14:8d:81:e4:9e:6b:84:1a:
                    db:b7:23:94:a3:1a:02:8c:b6:46:30:b4:c1:5a:1c:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:10:86:07:92:3A:C2:2F:B9:A1:7A:55:A3:3C:F6:48:2F:D2:5E
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:bd:4a:99:ea:98:6c:6d:6d:52:84:2e:c5:2d:a9:72:8a:eb:
         fd:e6:87:55:99:1e:8a:19:ae:1f:dc:72:ec:a6:63:83:87:6b:
         10:10:a7:99:32:10:15:ba:a6:82:8b:80:5d:cb:e9:cc:aa:f8:
         0c:74:e7:d8:a3:03:95:7e:00:27:7e:54:b9:64:e2:c2:0d:f2:
         85:95:0d:0d:ba:a2:85:f3:56:41:cc:16:d1:b5:3f:2f:86:64:
         6d:b0:05:e0:7c:ff:3d:d1:f2:90:0e:fd:2d:89:85:71:0b:3a:
         a1:83:c7:a2:62:a4:13:2b:bc:3b:0e:4f:4b:5c:28:a1:fb:29:
         27:ae:1a:40:f3:26:a7:d7:c2:32:7c:6e:54:f0:51:e7:59:e0:
         5a:10:61:85:db:0f:c9:31:42:3e:bc:a2:3e:1f:fe:e8:0b:11:
         cc:98:6e:d5:6b:71:8d:bd:22:cd:29:b4:b3:cf:b8:fa:f3:39:
         83:c7:a3:a2:83:9a:88:b5:48:6f:b6:66:69:65:fe:ab:f6:3b:
         0b:77:4d:71:92:fd:84:a4:3f:bd:47:c8:e2:c2:c6:12:bb:52:
         dc:e1:26:18:6c:da:92:ab:3b:f3:fb:f9:c1:8d:9a:a4:ac:1c:
         19:0e:06:0e:c0:be:20:1b:dc:6d:63:63:01:53:77:3c:d6:0c:
         54:5f:04:86
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUYspfAAC+RP2CYIpby8Jpy3Ed9k8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjA2MjgwNDM1MjNaFw0yMzA2MjcwNDQwMjNaMDMxMTAvBgNV
BAMTKEZENzIxMDg2MDc5MjNBQzIyRkI5QTE3QTU1QTMzQ0Y2NDgyRkQyNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfJuEDeB7VetpgOE7zq76JEze
xv3CxhISa0ZOKrgaJ5rzjTJUztiQuQHDqaEfWRIWd+Q787lxntaGrBfx2HPtxlH5
LZZCMMZyuP8ruQ8YCqJrTVKwHLDQ9mzdBYoHWT0tZnpr69oFv80Jk+jVHyCTth6K
VxfO9Hu6e2DpGIHnaqiMcpsKF5R26+5GsasstlUMGWXxCgWtpQ6AuRMJePZQnRIz
lZHdqa6z8GwUjkIfH+5ZIRI18Ano0w00IHL8XUkUr77Boojk6qLaSj+PlTj8Bkuu
DXCsyobTRqsKPazqrD+1zcyx21UUjYHknmuEGtu3I5SjGgKMtkYwtMFaHIzPAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU/XIQhgeSOsIvuaF6VaM89kgv0l4wHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMxMzgzNzJlMzIzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIw
MzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArm76DANBgkqhkiG9w0BAQsFAAOCAQEAOb1K
meqYbG1tUoQuxS2pcorr/eaHVZkeihmuH9xy7KZjg4drEBCnmTIQFbqmgouAXcvp
zKr4DHTn2KMDlX4AJ35UuWTiwg3yhZUNDbqihfNWQcwW0bU/L4ZkbbAF4Hz/PdHy
kA79LYmFcQs6oYPHomKkEyu8Ow5PS1woofspJ64aQPMmp9fCMnxuVPBR51ngWhBh
hdsPyTFCPryiPh/+6AsRzJhu1Wtxjb0izSm0s8+4+vM5g8ejooOaiLVIb7ZmaWX+
q/Y7C3dNcZL9hKQ/vUfI4sLGErtS3OEmGGzakqs78/v5wY2apKwcGQ4GDsC+IBvc
bWNjAVN3PNYMVF8Ehg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org