Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
File:                     3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa (raw, json)
Hash identifier:          nPGtCvA0tarXBR2ijdAVUI5Go5r/KirlAT3VhoWbafE=
Subject key identifier:   50:BB:C2:08:80:8D:0C:C8:AF:95:09:86:4F:81:00:68:7F:FF:0B:89
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       065699B7C3A8F78026C9D47BC0F55B376FC83E61
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
Signing time:             Sat 22 Oct 2022 04:33:18 +0000
ROA not before:           Sat 22 Oct 2022 04:28:18 +0000
ROA not after:            Sat 21 Oct 2023 04:33:18 +0000
asID:                     212520
IP address blocks:        185.216.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:56:99:b7:c3:a8:f7:80:26:c9:d4:7b:c0:f5:5b:37:6f:c8:3e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:18 2022 GMT
            Not After : Oct 21 04:33:18 2023 GMT
        Subject: CN=50BBC208808D0CC8AF9509864F8100687FFF0B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:bf:d5:ca:44:43:97:b6:b4:d6:06:f9:fb:
                    5b:26:8c:6d:9e:0e:0a:cf:3d:72:00:55:ab:f4:c4:
                    ed:aa:fc:13:7a:ee:f3:62:bd:d8:ba:78:b9:c6:f7:
                    9d:93:98:b3:f2:e2:71:e8:78:26:88:42:f9:24:f4:
                    55:1f:63:83:70:42:15:71:31:c5:ef:a9:bf:68:13:
                    be:1f:5a:cd:22:b5:b4:79:9d:da:7f:c7:2e:59:3b:
                    84:7b:56:f5:14:10:98:7d:6b:43:d8:75:a2:19:e3:
                    f9:e0:85:1c:48:cf:2d:0d:1c:4e:ec:98:b8:99:e9:
                    ec:a4:b4:b0:d2:ad:b4:e3:a8:2f:3d:41:93:93:f4:
                    e5:0d:70:a7:82:af:92:7a:ca:76:1f:f6:5f:06:fd:
                    12:65:af:35:aa:fa:b9:6e:19:b3:d0:ce:66:7a:4a:
                    d8:97:c5:a0:bc:18:bf:fb:ca:1a:d8:6d:c7:93:2a:
                    d7:95:75:23:a8:5c:45:04:e3:28:47:05:bd:40:9a:
                    87:27:13:91:63:27:b7:c2:fe:27:f1:0c:5c:2c:bd:
                    da:86:33:4a:45:86:c4:53:43:7d:ee:a4:10:df:9d:
                    c2:e0:aa:fa:9a:c4:e4:ba:5f:d5:d2:71:f0:e7:a1:
                    06:07:2f:15:66:70:c1:a8:b3:bb:84:a0:c9:fc:7e:
                    ea:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BB:C2:08:80:8D:0C:C8:AF:95:09:86:4F:81:00:68:7F:FF:0B:89
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:6f:8f:9c:ae:ab:a4:2b:ac:95:64:70:40:c9:0d:dc:2f:c2:
         1d:6b:6b:c1:b5:9d:c7:7e:f5:2e:b8:cf:71:21:3e:ba:d7:c4:
         9d:67:9b:a3:73:5f:d1:c6:cb:b7:13:29:9f:9b:1e:02:d4:5c:
         d9:6f:4c:11:e3:7b:08:4b:61:8f:00:31:89:15:1a:5f:65:f7:
         6a:3a:25:74:3d:1c:49:1b:9b:18:dd:15:28:44:c5:4b:73:31:
         08:a6:65:bd:90:1e:e2:a1:21:e8:af:1b:0f:f9:5e:cd:d5:83:
         bc:ec:5e:a4:7f:61:8f:58:aa:5e:bb:a6:ee:3c:15:55:48:3d:
         d6:ba:e3:36:ca:54:94:22:f8:4c:98:60:86:3b:19:5d:b6:70:
         48:f9:ff:fa:6f:46:fd:c6:b5:3d:5b:c7:2e:bf:59:d0:ea:d6:
         60:98:3b:dc:65:17:19:9c:ec:f0:af:da:bf:25:d0:25:c8:bc:
         1c:6e:ee:a6:86:15:6b:0e:1b:3c:79:82:98:5b:d7:f3:3f:91:
         d8:12:99:dc:85:ee:98:b2:4a:71:cf:00:00:b3:71:f3:53:24:
         de:23:1c:01:25:5e:88:45:f3:99:7c:0e:58:54:da:e7:83:4e:
         df:f3:67:14:d0:7f:a8:e5:df:ea:9f:28:8e:c6:be:ae:57:83:
         18:75:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org