Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235312e302f32342d3234203d3e203235303938.roa
File:                     3138352e3230372e3235312e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          x25/+vl5+vz59YyqFoyuiGteS6QHCA4YZcBLY3aOqd8=
Subject key identifier:   B9:29:39:55:CA:16:14:81:08:E0:7D:DB:ED:4E:4E:C3:A3:1D:89:3B
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       44C272A18EB35BB4A1E0BB5E6BCCB5307EDB6081
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235312e302f32342d3234203d3e203235303938.roa
Signing time:             Sat 06 Feb 2021 19:03:31 +0000
ROA not before:           Sat 06 Feb 2021 18:58:31 +0000
ROA not after:            Sat 05 Feb 2022 19:03:31 +0000
asID:                     25098
IP address blocks:        185.207.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:72:a1:8e:b3:5b:b4:a1:e0:bb:5e:6b:cc:b5:30:7e:db:60:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb  6 18:58:31 2021 GMT
            Not After : Feb  5 19:03:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:19:34:39:9c:9a:05:f0:f7:de:4f:79:32:
                    72:90:f8:90:b2:9a:40:d1:ac:05:21:ff:e8:ca:cc:
                    0b:89:57:f9:1c:f2:48:14:30:12:41:01:9e:85:ea:
                    20:04:ac:94:c6:53:e2:ba:cc:47:ee:df:4a:4f:c0:
                    9d:ca:a1:bf:4b:55:93:65:42:9e:5c:3d:0b:3d:b2:
                    9f:e8:6a:07:72:3d:e5:62:1b:e5:cf:60:3f:98:b2:
                    a2:c6:99:07:6f:68:6e:0b:b9:6f:6b:45:22:8d:f5:
                    45:55:40:b4:c7:20:58:bb:be:99:ce:af:a9:b4:0d:
                    a5:54:bf:0d:86:62:1b:10:a9:bd:fc:32:fc:dc:9a:
                    d9:00:4c:bb:07:0c:24:bb:11:f9:c6:de:7d:3f:79:
                    81:dc:e0:ed:3a:cd:e8:8b:d0:b7:9d:fe:0a:24:a2:
                    15:47:55:50:2b:bc:c5:33:e9:9f:6f:ba:58:c4:a9:
                    98:3b:9e:54:70:3d:c6:10:d6:3e:55:5e:e1:15:4f:
                    b5:e0:04:73:76:f9:d2:ce:6a:9b:89:ff:ea:26:ed:
                    8e:bd:02:e3:fd:6b:b5:ee:07:c6:63:67:c6:d4:6d:
                    7c:19:90:6c:a3:c8:be:42:4c:ca:42:e0:a1:5f:23:
                    e1:bf:dd:b1:c8:be:8f:4d:e5:23:af:cf:52:e3:df:
                    35:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:29:39:55:CA:16:14:81:08:E0:7D:DB:ED:4E:4E:C3:A3:1D:89:3B
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235312e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:2e:d0:81:92:91:76:bc:fc:70:ff:83:e3:c7:e2:77:eb:27:
         b1:e3:a5:b1:76:96:cc:c6:56:8e:82:f0:b0:ed:b6:b9:ee:0b:
         27:08:49:6d:b4:b8:cc:6b:0c:40:e3:91:6f:d5:7c:27:c4:bf:
         12:82:70:d3:55:b1:47:fd:5e:28:30:59:cf:a7:5a:51:49:66:
         e7:cd:37:94:c3:a9:4a:50:5a:c6:f3:b6:fc:a2:de:1c:2f:f2:
         de:89:1a:e0:95:12:18:ed:dd:14:4a:34:ac:ca:20:45:27:e5:
         31:2d:9e:03:69:c8:af:e9:57:90:12:80:9d:d3:29:bf:c2:10:
         b4:1a:ed:08:80:ef:fa:41:84:61:83:3a:a1:f5:68:a1:03:72:
         d6:5b:cf:bd:0f:7f:0d:1e:c3:d2:26:6a:f7:35:7f:60:c7:2d:
         c1:92:8e:59:0a:60:85:eb:ec:91:03:8c:c4:e4:db:75:ce:eb:
         b9:0f:da:04:1e:84:e6:ed:18:9d:c4:1f:8b:c8:33:a5:c0:b7:
         0f:b8:8f:a9:89:8d:ed:cf:76:79:ed:c2:c8:7c:08:5f:fe:e8:
         21:f2:87:db:64:8e:f2:8c:b3:6e:eb:7e:19:46:43:53:f8:df:
         55:03:76:3d:02:64:f0:ff:e7:9e:85:e6:e9:c4:7f:f0:cd:1d:
         8a:3a:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org