Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          67M04pVoEf70pv34v+t/BD2CU4fjo1dJLp7j4kRQ/3Y=
Subject key identifier:   AF:AB:73:7C:34:AC:A1:AE:7E:2A:3B:35:D7:78:6A:53:0F:5B:9E:B5
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       7B19FA6545F4802267AF27F687C4ED851DC7FEC0
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:35:13 +0000
ROA not before:           Wed 28 Dec 2022 09:30:13 +0000
ROA not after:            Wed 27 Dec 2023 09:35:13 +0000
asID:                     136787
IP address blocks:        185.199.103.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:19:fa:65:45:f4:80:22:67:af:27:f6:87:c4:ed:85:1d:c7:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:30:13 2022 GMT
            Not After : Dec 27 09:35:13 2023 GMT
        Subject: CN=AFAB737C34ACA1AE7E2A3B35D7786A530F5B9EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:6c:5c:ab:4b:79:6f:06:8b:9a:2d:f9:59:
                    19:d9:fa:ad:b0:f6:00:a0:bd:86:22:5d:94:29:86:
                    76:37:d9:ad:5c:98:10:4f:14:f7:0b:44:93:16:84:
                    65:8b:4f:e0:1b:e0:39:d2:54:f7:8d:82:41:8a:11:
                    b1:46:0a:85:2c:6c:f7:6d:cf:92:21:62:6d:6a:10:
                    0d:10:48:4d:dc:11:ff:71:0a:26:b6:54:38:31:ab:
                    e3:53:11:61:6d:a0:6c:f2:f4:29:ab:58:35:ed:2c:
                    bd:7a:0b:87:81:da:b3:88:6a:4c:3e:9e:eb:33:ea:
                    5e:65:ee:b5:b3:33:8f:3e:c9:fd:b8:7e:b7:ae:4c:
                    00:35:b1:d9:dd:ab:ea:7e:b5:69:3c:dd:31:0a:be:
                    03:68:10:36:64:87:3f:21:7b:57:3c:42:62:e4:a8:
                    83:3a:9c:26:11:68:5c:2b:d1:d6:82:4b:39:55:6f:
                    2f:15:22:ea:1b:0e:a9:a3:4d:49:cf:31:a3:4a:fa:
                    d0:07:24:ec:8d:b5:df:c5:1f:28:78:c4:30:5f:5e:
                    82:e3:b6:f7:3c:99:89:3d:7f:a0:b5:00:46:e6:55:
                    9e:f8:02:f1:af:66:be:1a:d2:7d:23:59:27:43:8f:
                    7f:e6:1f:0a:00:21:32:ff:01:2e:6e:15:08:c4:90:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AB:73:7C:34:AC:A1:AE:7E:2A:3B:35:D7:78:6A:53:0F:5B:9E:B5
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.199.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ff:04:62:bc:cc:cb:4c:1e:dc:15:d3:65:18:14:5b:bc:ef:
         29:47:4c:bc:75:2e:40:c1:bd:fd:f6:a6:3f:27:22:54:4f:85:
         97:50:ff:3c:c8:7c:97:41:bc:5f:bc:ca:7e:40:a8:ff:e0:09:
         38:20:10:74:0d:9f:05:d4:ec:8d:b5:de:58:32:41:61:04:d0:
         55:7c:9a:3c:8c:76:56:af:7d:af:d8:77:d4:32:70:57:95:2c:
         f1:25:b7:8c:18:66:0e:7c:5f:40:ad:2f:5b:ad:15:ea:cf:99:
         91:7c:81:82:a3:4c:1c:ac:63:b6:f6:18:22:97:20:2a:65:b4:
         10:16:90:e1:e8:3c:f2:6c:40:89:fd:d3:d8:24:7f:76:7d:e3:
         a1:b5:cb:2c:b8:9c:31:bd:57:f4:ed:9a:28:0d:cc:de:c4:66:
         29:bd:62:9b:78:85:e0:ae:11:c5:c4:df:f2:f7:25:43:e9:ec:
         a6:21:56:72:67:22:a1:a8:b2:32:68:b4:17:fa:9b:88:c6:08:
         e1:b8:0d:98:88:06:2e:4a:43:f4:b5:33:76:71:f7:f6:03:c5:
         95:d2:06:0b:f5:6b:76:16:50:0a:02:fd:c0:81:1e:a2:24:c3:
         87:ce:25:6a:eb:f7:b8:d8:2a:87:18:0e:4d:3d:c7:93:92:ef:
         32:4b:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org