Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e20313333393733.roa
File:                     3138352e3138372e3233352e302f32342d3234203d3e20313333393733.roa (raw, json)
Hash identifier:          QcEFbbzUov5oAync8UxxCwpOLmWmqRPMUQaGR+apFB8=
Subject key identifier:   C5:BC:1A:62:CA:12:19:D1:17:85:F9:D9:45:AF:25:6E:5A:3E:49:C3
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       567D82CAE4652360873EDAA63D0B2380D5878F89
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e20313333393733.roa
Signing time:             Wed 11 May 2022 09:21:01 +0000
ROA not before:           Wed 11 May 2022 09:16:01 +0000
ROA not after:            Wed 10 May 2023 09:21:01 +0000
asID:                     133973
IP address blocks:        185.187.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7d:82:ca:e4:65:23:60:87:3e:da:a6:3d:0b:23:80:d5:87:8f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: May 11 09:16:01 2022 GMT
            Not After : May 10 09:21:01 2023 GMT
        Subject: CN=C5BC1A62CA1219D11785F9D945AF256E5A3E49C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:79:ee:23:d8:0d:cb:ac:a6:e1:a1:5d:dd:
                    91:df:5d:6b:bd:4c:c2:99:86:5c:04:ca:4e:dc:a5:
                    3c:cd:f5:cb:9d:47:b5:bc:38:6b:af:c1:37:69:c0:
                    6b:99:5d:03:51:6e:ca:fd:e0:f9:1e:65:63:db:25:
                    4f:c6:58:8a:31:84:9e:50:de:6c:80:2d:7a:5b:43:
                    2e:0e:ad:c0:4b:24:7b:93:d2:d2:27:f0:8e:8f:66:
                    c8:b4:01:3d:49:a4:ab:a8:11:da:3b:08:ab:cf:cc:
                    40:53:73:09:f6:70:8f:90:de:3d:da:9f:9a:67:fd:
                    67:ff:09:cd:dd:9b:21:cd:62:9c:49:17:86:e2:ab:
                    bb:c7:53:52:89:39:1c:4c:e4:f8:4c:43:34:5b:34:
                    e4:d9:b6:b8:ce:55:12:43:a1:46:d2:a2:4f:f4:56:
                    ad:6d:7a:ac:fe:ef:e9:1a:5b:5d:67:59:15:85:a8:
                    98:c5:2d:eb:0f:b0:77:7c:78:4b:b8:0d:9b:f5:fd:
                    15:4a:cd:fb:87:37:41:9c:fa:c6:2c:7c:ef:c2:7a:
                    8b:3f:c6:6f:b4:10:bb:b7:e9:1f:cc:55:e6:26:ed:
                    7e:8f:4f:23:15:a2:ba:ec:b2:39:3c:76:1f:96:63:
                    c6:d4:42:4d:08:c4:08:ce:67:c6:26:9b:92:1f:f7:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BC:1A:62:CA:12:19:D1:17:85:F9:D9:45:AF:25:6E:5A:3E:49:C3
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e20313333393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:fd:ae:c1:31:cd:28:81:5b:42:d8:da:b0:eb:73:3e:60:
         03:bc:69:b0:b4:6f:68:c5:8b:a2:76:21:26:14:98:75:ff:69:
         27:29:be:c0:ca:69:e1:19:c7:94:76:86:c1:25:c8:08:d2:cf:
         68:ab:ac:76:2b:64:33:47:55:26:f0:96:d9:70:2b:cb:cd:18:
         dc:30:b3:3b:f2:35:fe:d2:27:1d:58:72:d5:50:cb:c6:2b:ce:
         63:ee:b7:09:12:7d:b1:b5:94:0c:5d:c2:eb:9a:2f:85:99:c3:
         93:f6:d8:a4:78:67:14:ea:3f:11:37:bb:26:a8:d0:c8:3e:0a:
         cd:b0:0d:68:f5:f6:94:e4:d5:61:b0:66:38:b2:26:df:c8:c3:
         9c:59:0f:c2:74:7a:b9:ca:60:89:ae:9f:30:c4:64:03:22:b9:
         9e:57:5d:04:1e:f7:d4:37:79:cf:95:8c:c5:26:4c:4d:50:49:
         a9:40:ba:af:61:6a:8f:5c:87:00:cd:8f:13:bb:2b:7b:a4:cd:
         4e:d7:fd:b1:e4:de:54:54:b4:d5:45:b5:ef:a7:a8:dd:ed:20:
         aa:eb:4f:c9:d0:dd:1f:35:2f:d6:19:cd:f0:67:74:50:58:ad:
         b0:e2:97:48:b7:6c:96:ff:0b:1b:53:35:43:aa:f0:6c:c5:d4:
         a0:3b:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org