Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e372e302f32342d3234203d3e203437353833.roa
File:                     3138352e3231312e372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          /IzSNYgXZNzxJ/idbNsyZvLwHWac+CCTbOFVm0mcgz0=
Subject key identifier:   A9:6E:CB:71:01:02:5D:36:3C:21:E2:28:D1:35:74:49:55:0B:6A:5A
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       2B0B960FD266F26AA0B1C8E80F61E3B913FCB7E3
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e372e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:12 +0000
ROA not before:           Sat 22 Oct 2022 04:28:12 +0000
ROA not after:            Sat 21 Oct 2023 04:33:12 +0000
asID:                     47583
IP address blocks:        185.211.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0b:96:0f:d2:66:f2:6a:a0:b1:c8:e8:0f:61:e3:b9:13:fc:b7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:12 2022 GMT
            Not After : Oct 21 04:33:12 2023 GMT
        Subject: CN=A96ECB7101025D363C21E228D1357449550B6A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:a9:42:4f:1e:5a:fc:d3:38:44:af:33:0d:
                    5d:f0:5d:26:9d:16:18:dd:8c:04:c8:1d:f7:54:3b:
                    bb:30:68:c3:f8:83:e7:40:56:73:98:6b:72:a1:fe:
                    21:27:f2:34:f2:22:c9:fe:72:6f:ea:0a:45:52:94:
                    45:8b:1b:67:46:da:44:12:f0:21:68:2c:47:16:17:
                    15:84:75:0f:42:ec:ee:02:8b:b3:f6:cd:aa:e9:6b:
                    16:0f:67:a7:ec:f2:dc:0b:03:db:35:f6:eb:ef:4c:
                    7f:06:6c:02:fe:d7:bb:a5:4f:e7:9c:94:d1:b9:75:
                    d7:be:d5:a2:63:a7:34:58:00:72:1b:10:8b:47:3d:
                    b5:fa:12:9f:83:df:e3:e9:d5:a2:ae:10:68:85:b9:
                    8e:82:3c:16:66:89:e4:70:6f:bb:5e:72:95:2a:5e:
                    13:cc:ba:6b:9b:db:fd:27:e2:9b:fd:c5:02:0c:68:
                    e6:0b:70:e2:2c:f4:cb:89:33:0d:aa:6f:bf:cb:e0:
                    6a:f5:80:0d:36:d8:6a:1c:d9:e0:60:75:85:26:f0:
                    14:63:0a:98:72:7a:1d:0e:e1:60:96:82:ff:5e:17:
                    7c:9a:3e:92:f0:c0:1b:3c:09:50:22:ec:6c:56:ac:
                    52:03:54:13:76:83:64:f4:50:8a:a8:a2:69:3c:4d:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6E:CB:71:01:02:5D:36:3C:21:E2:28:D1:35:74:49:55:0B:6A:5A
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e372e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a4:19:e9:27:f5:47:87:dd:de:54:ca:b1:e6:1c:40:a4:83:
         4a:23:d2:bc:70:aa:a3:57:7b:9d:d8:ce:f6:fe:9d:63:a4:5a:
         66:79:63:f5:6a:61:8f:e0:01:fb:8b:74:bd:b9:15:b0:c2:ab:
         6d:6f:38:4a:d9:bb:38:18:67:27:4c:e5:cd:3f:62:f1:c3:11:
         02:95:19:c6:3d:a3:89:91:58:56:c8:57:92:1e:d9:f4:61:4c:
         8a:d3:db:5c:ea:93:ae:10:98:db:e1:e7:73:55:30:18:d8:37:
         89:4d:60:37:c8:7e:4a:15:e6:b9:69:fc:6a:16:a2:57:e3:4a:
         63:7b:11:cf:77:a3:76:0d:0a:4a:66:39:87:7e:72:b7:11:7b:
         aa:1b:39:dc:50:b0:2b:63:af:e0:3f:11:24:72:08:bd:a9:7c:
         43:97:86:b9:38:c8:ac:7f:fb:7f:5d:8e:2f:6c:52:1a:ad:de:
         75:f7:94:8c:70:49:5d:f8:bf:83:d3:21:51:78:aa:58:f1:08:
         3a:55:d8:36:bb:65:34:84:21:48:91:05:ed:a8:ad:45:a0:64:
         e3:18:7c:e4:f1:94:f8:0b:fe:dd:4b:d3:3a:42:7d:88:5c:0c:
         df:bd:49:85:89:09:5d:78:c4:25:44:3f:13:54:65:f9:8f:b2:
         92:38:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org