Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
File:                     3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          WRuZM9ik3vOhIauejBdgweVFan5UYtn6wd+4slDNDFo=
Subject key identifier:   27:1B:C2:BC:D2:AE:FC:08:04:24:4C:89:7E:A5:ED:EB:50:3C:E5:5B
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6E2B975B21D2C16B5735A2E708FFBC1B47AEAEDD
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
Signing time:             Fri 24 Feb 2023 07:44:30 +0000
ROA not before:           Fri 24 Feb 2023 07:39:30 +0000
ROA not after:            Fri 23 Feb 2024 07:44:30 +0000
asID:                     141039
IP address blocks:        185.203.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2b:97:5b:21:d2:c1:6b:57:35:a2:e7:08:ff:bc:1b:47:ae:ae:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 24 07:39:30 2023 GMT
            Not After : Feb 23 07:44:30 2024 GMT
        Subject: CN=271BC2BCD2AEFC0804244C897EA5EDEB503CE55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:1f:55:ff:0b:9e:69:0f:91:ec:7a:b7:9b:
                    ed:e4:ff:36:34:15:7e:c5:cc:ea:e1:f5:a5:c6:98:
                    12:b8:fe:36:d2:a0:68:d8:51:e0:96:3f:4a:ee:7c:
                    73:85:e0:df:bb:fe:84:8e:3a:2c:1d:6e:8a:58:02:
                    08:8a:5f:80:e9:70:30:13:29:19:52:fb:8c:ef:b1:
                    c5:09:f4:26:84:79:28:59:2a:44:dc:16:a6:c4:a7:
                    cc:e7:6f:9d:04:d9:98:90:aa:01:73:b9:32:f4:68:
                    4c:30:13:a2:8e:7a:fd:a0:28:e5:d3:37:96:ea:66:
                    9e:35:6a:5e:49:ca:50:b1:2f:72:2e:63:53:e7:cb:
                    93:ab:11:62:a9:b5:da:c7:95:30:81:e1:68:c5:6d:
                    d6:c4:72:dc:bc:f4:c8:be:fb:5c:ca:a5:7b:4f:33:
                    4c:43:84:28:ae:e4:5a:06:22:ae:7e:01:74:20:7d:
                    d5:32:04:d5:ad:cd:ea:64:4f:ee:cb:56:32:3c:74:
                    61:ae:a9:b3:ed:00:14:a8:c5:dd:59:32:79:da:96:
                    34:3e:f8:ad:b6:5a:a7:77:85:0c:38:09:62:38:bf:
                    16:c0:64:57:c5:f8:c8:cf:a9:83:b8:77:00:42:b9:
                    17:dc:a1:d8:a5:9d:fe:bb:2c:d0:1d:7b:35:3f:e4:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1B:C2:BC:D2:AE:FC:08:04:24:4C:89:7E:A5:ED:EB:50:3C:E5:5B
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:8c:71:3b:1e:bb:9a:00:4e:e3:66:d4:cb:f2:b5:07:ba:cd:
         27:9f:c9:08:4c:72:2b:72:58:3a:6f:98:8b:2f:78:0e:d7:fa:
         da:33:dc:79:aa:8f:48:ba:0b:a4:d2:6b:ec:42:3b:d4:8d:ac:
         e6:bd:a8:49:62:18:9d:c6:d0:26:15:fb:3c:8a:ab:2e:6f:f9:
         5d:4f:8d:60:c0:b5:91:e3:c1:73:5c:df:0d:1b:f6:2b:eb:42:
         07:64:4e:38:82:ac:66:f5:24:29:f6:8c:cd:9d:79:7f:e1:bb:
         62:08:51:81:c5:8d:41:8f:13:ea:de:ff:34:1b:68:93:42:80:
         c8:f4:b1:ae:10:07:b2:b0:81:a9:28:1c:46:52:34:9b:4d:12:
         a7:71:12:1c:8e:cb:1d:b4:db:e5:e4:48:9d:67:03:21:a7:27:
         3b:2c:62:02:6a:b1:58:b6:04:31:41:76:48:08:2d:7c:25:d3:
         ac:b6:52:3c:bd:2d:6a:46:be:a0:65:49:a9:8d:cc:51:1a:a1:
         29:8e:49:8a:f8:06:4a:c5:5d:5c:82:e2:45:da:5d:ba:c4:ac:
         21:67:45:75:f6:19:a3:12:14:a5:b0:e2:a5:cc:b4:9c:b7:c6:
         06:ce:b5:2a:b4:3a:1f:ff:3a:1a:5e:f7:f1:24:4a:fa:b7:32:
         b0:45:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org