Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
File:                     3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          1Waela5J00PzllxIJ+M09MK1KgldCWuQQhSZkgAKwoU=
Subject key identifier:   E0:B5:FD:CF:12:67:A7:2E:11:BB:08:AB:80:14:6C:12:1D:35:05:86
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5CECF8B15497E671BCF294F0BAC464196099CE6E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:18 +0000
ROA not before:           Sat 22 Oct 2022 04:28:18 +0000
ROA not after:            Sat 21 Oct 2023 04:33:18 +0000
asID:                     61317
IP address blocks:        185.187.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ec:f8:b1:54:97:e6:71:bc:f2:94:f0:ba:c4:64:19:60:99:ce:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:18 2022 GMT
            Not After : Oct 21 04:33:18 2023 GMT
        Subject: CN=E0B5FDCF1267A72E11BB08AB80146C121D350586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:25:00:1c:57:f0:fd:4f:4b:78:c9:17:e2:
                    44:cd:bf:f0:96:f0:e2:d4:b0:c4:35:50:81:04:5f:
                    a7:76:6c:ed:18:2f:b3:50:19:8b:f7:c1:92:4c:e0:
                    5c:55:db:2e:fc:1a:84:1a:d3:56:8b:4f:d2:ec:8c:
                    29:15:79:bb:bb:58:3b:5e:32:74:76:69:75:4d:6b:
                    4f:45:62:00:68:b9:93:c3:d7:53:c7:a0:bb:9d:0c:
                    47:61:83:8e:ab:df:03:d0:da:67:1d:e3:ec:be:6c:
                    60:82:56:1b:2d:46:53:b8:8e:6d:40:c7:ed:d6:27:
                    f5:24:9a:62:7b:f7:5f:2b:3e:e0:3c:fa:f7:b3:f4:
                    82:57:46:af:6c:5d:ce:3e:58:2d:58:eb:89:21:e7:
                    f5:3a:63:7c:67:81:95:5e:b4:7b:48:84:47:03:04:
                    99:ad:6e:4e:dc:79:ca:c0:b5:91:14:9e:41:45:27:
                    94:b0:3e:27:35:e2:02:78:ce:49:43:e8:8a:83:67:
                    a0:a7:4a:8f:ed:57:26:f2:57:71:4d:90:f5:da:6e:
                    15:c2:63:92:3c:64:1b:4a:c1:32:ff:b4:bb:ed:da:
                    72:93:95:5c:f1:99:94:2b:29:a4:af:07:fb:0c:43:
                    4a:31:dc:6a:90:17:65:46:f4:c8:4c:f7:64:b1:4a:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B5:FD:CF:12:67:A7:2E:11:BB:08:AB:80:14:6C:12:1D:35:05:86
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ab:bd:1a:79:d7:2b:a4:69:f5:b0:e4:97:d7:15:4e:09:d7:
         6c:31:f0:81:b3:0c:e2:f1:71:01:22:6f:1e:da:7f:1f:c0:5d:
         d7:c6:68:32:9d:0d:30:bf:7a:b7:d2:88:a8:0c:45:60:12:76:
         ad:9f:2e:21:18:52:5f:9d:16:5d:6c:88:1a:d4:db:93:a5:4d:
         ee:1d:37:2f:5b:68:d9:b3:b8:5a:a3:db:49:29:c6:6c:81:38:
         02:8d:40:e8:79:8f:87:e1:58:38:89:f2:ce:be:3f:3d:9e:90:
         88:86:b3:68:a6:bb:fe:ce:88:98:18:c1:2f:f3:59:1c:36:51:
         58:61:3b:c6:00:60:d4:1f:8f:09:e8:d9:ad:38:d6:d3:a3:5c:
         26:ca:10:f8:85:3f:fa:b8:10:61:2a:c0:c1:f4:2a:b1:60:e2:
         39:78:db:e5:60:6e:70:20:7e:f7:b7:09:d6:57:76:34:34:2f:
         84:35:38:9b:a1:db:63:63:4f:f6:97:26:ef:52:52:fd:e3:98:
         9f:71:ba:22:be:06:f8:80:c4:9f:13:0a:f2:70:ed:95:7b:22:
         f4:31:12:ee:59:d3:2c:47:ea:32:68:16:d1:0e:09:c3:42:9e:
         7d:81:df:92:21:b0:f6:91:04:0b:ea:0b:95:aa:20:20:7c:58:
         3d:f3:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org