Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa
File:                     3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          jlsYkPGnkG2pbVfZLF4jFcpvvhzVN5GEBxbIVLZRF2E=
Subject key identifier:   71:B8:9E:4E:6C:50:26:D9:C8:01:59:8D:C0:FD:69:7E:BD:39:4B:D0
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       346BE686C34B461355FAEEC0110B6E9EC1540397
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:15 +0000
ROA not before:           Sat 22 Oct 2022 04:28:15 +0000
ROA not after:            Sat 21 Oct 2023 04:33:15 +0000
asID:                     47583
IP address blocks:        185.239.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6b:e6:86:c3:4b:46:13:55:fa:ee:c0:11:0b:6e:9e:c1:54:03:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:15 2022 GMT
            Not After : Oct 21 04:33:15 2023 GMT
        Subject: CN=71B89E4E6C5026D9C801598DC0FD697EBD394BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:72:2b:9d:44:f2:39:57:17:a2:72:f2:9c:4c:
                    8f:52:9e:ca:ec:40:5b:79:43:79:77:55:74:c9:71:
                    05:36:b0:6c:f0:e9:d8:58:e5:34:9e:94:f2:3f:01:
                    1b:b7:0c:fe:ff:39:b7:0a:2d:1a:46:9b:22:79:da:
                    68:3b:4c:af:e2:ff:56:bf:e0:ec:ed:22:f6:f3:68:
                    1f:2b:87:c8:3d:3c:9f:9e:a2:ce:0b:e6:27:11:e5:
                    16:12:eb:62:29:a8:a5:dc:0a:1a:be:2e:e1:d6:19:
                    0c:db:1a:e7:ba:80:c2:f6:3a:b0:59:f7:94:2a:2e:
                    3b:77:56:20:ff:39:62:72:26:06:aa:1d:10:2c:fb:
                    87:c4:44:d4:69:3a:ea:fb:1a:05:55:bc:fa:cf:bc:
                    c5:d2:b3:17:06:9c:15:f1:6a:42:d9:4d:d5:0d:4e:
                    df:f8:5b:c3:bd:f2:5f:14:c7:2b:5e:4e:0d:eb:40:
                    9f:c6:6e:5c:04:10:c2:2f:f1:d8:8e:b9:a0:77:5f:
                    47:d7:bf:e1:cc:b8:f2:6e:e9:35:53:9b:80:43:03:
                    65:89:2c:23:c7:33:b5:ac:c7:dc:6f:e7:d7:75:ac:
                    ed:a0:80:12:36:ad:78:98:4f:80:23:63:90:65:07:
                    41:f1:88:4f:f8:b5:89:a8:d3:27:43:6e:ef:41:33:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B8:9E:4E:6C:50:26:D9:C8:01:59:8D:C0:FD:69:7E:BD:39:4B:D0
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:13:84:4d:f2:63:c5:ea:49:30:3e:6d:dd:29:4d:a0:93:1f:
         8e:b8:4e:5f:93:fa:25:ff:19:64:50:c1:ca:c3:73:0d:33:f1:
         8d:cf:2b:1e:2c:a2:70:b7:49:31:73:0c:43:39:4b:71:a5:0b:
         db:8b:5d:5d:4f:5d:b6:79:ff:08:78:81:3c:bf:dd:62:0e:75:
         9c:c0:71:40:c1:cb:77:3f:cb:c1:4c:a8:a8:3d:13:6c:84:5e:
         da:0b:7d:b8:8b:13:e2:8c:8b:d8:4a:fc:68:eb:c9:c5:da:2f:
         15:1c:58:68:19:b9:48:42:0e:20:61:ef:09:5a:c5:80:60:b0:
         10:d3:57:c8:36:62:2f:c7:e8:c8:af:23:81:fa:6e:35:14:8e:
         83:9a:4e:2d:f2:61:3b:58:66:ba:2a:99:2d:57:fc:0c:0f:a6:
         bb:d8:58:1a:cf:4e:58:72:b2:03:36:d1:8a:56:93:8a:74:b5:
         7f:95:58:36:a9:fd:1a:da:66:1c:96:45:3a:ca:dc:88:23:f6:
         3d:4a:5c:96:19:bc:f3:a7:f2:c4:36:1e:c8:8b:25:f2:d9:11:
         e6:3a:10:1e:72:50:c8:9e:62:80:d0:d3:d6:e9:cc:16:59:6b:
         2c:e6:04:c7:b8:e8:a5:80:43:ae:38:b1:54:15:80:d2:a8:8a:
         00:b8:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-fra.rpki-client.org