Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e203630373231.roa
File:                     3138352e3138372e3233352e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          Oy972/H5rGmAW0vl+L/201K/c/Y56ZMBsJwWncVs330=
Subject key identifier:   01:E3:17:F7:07:1B:9D:1F:80:76:C0:84:FF:A5:B3:B8:29:E1:BC:54
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       529126ADC58F8C6346F0E8E042B814E2A902C129
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e203630373231.roa
Signing time:             Tue 28 Jun 2022 04:40:25 +0000
ROA not before:           Tue 28 Jun 2022 04:35:25 +0000
ROA not after:            Tue 27 Jun 2023 04:40:25 +0000
asID:                     60721
IP address blocks:        185.187.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:91:26:ad:c5:8f:8c:63:46:f0:e8:e0:42:b8:14:e2:a9:02:c1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:25 2022 GMT
            Not After : Jun 27 04:40:25 2023 GMT
        Subject: CN=01E317F7071B9D1F8076C084FFA5B3B829E1BC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:23:41:e5:65:ea:16:eb:22:ec:c9:40:ab:
                    e7:1b:2b:73:80:47:47:e8:8e:1e:79:ec:e0:57:16:
                    9f:98:d0:ab:f6:06:7f:ff:7e:21:94:74:a9:ff:0b:
                    db:74:07:de:3b:dd:15:a5:ff:bd:1a:4f:04:a5:00:
                    46:08:c8:9a:a5:c4:52:68:4e:09:d0:fb:b7:1a:82:
                    df:f2:e9:36:f7:7e:5b:99:e9:17:8a:b9:0a:44:6d:
                    4b:3f:b3:f6:6b:0e:91:ff:6b:c4:ba:3e:41:ab:97:
                    93:43:e3:12:c4:14:e5:62:e7:9b:69:56:7e:ff:12:
                    3c:3c:1e:b6:eb:54:ea:e9:5e:f5:3f:fd:82:b3:80:
                    8f:0c:54:af:e0:fc:1f:d6:24:5e:d5:42:21:92:ce:
                    e7:a7:22:08:14:45:92:12:1e:dd:65:54:46:f2:a6:
                    5a:1d:f1:a8:2a:19:f5:52:06:d3:b4:50:be:2f:02:
                    ee:9e:42:54:06:67:d7:b3:8f:98:2c:14:cd:52:cd:
                    5e:82:5a:41:19:85:7e:9e:a3:72:de:0a:26:88:e1:
                    ed:3d:2b:ea:b3:a4:14:7f:3f:ce:f7:5f:c6:2c:94:
                    0c:30:3e:c1:72:19:5c:a1:5a:77:dd:16:28:5a:9b:
                    57:88:42:e5:c4:ff:b3:c7:42:bf:76:7a:4c:d6:52:
                    17:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E3:17:F7:07:1B:9D:1F:80:76:C0:84:FF:A5:B3:B8:29:E1:BC:54
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:da:8b:80:da:1c:b9:e2:f8:af:67:16:18:75:d4:85:ff:e3:
         bb:de:38:a6:07:bb:cc:e4:03:42:20:e1:19:3b:1b:09:ae:c4:
         7c:3a:43:f5:12:27:10:3b:2e:76:63:15:85:62:57:c0:df:37:
         7d:5d:52:d8:aa:a8:0a:dc:4c:61:8b:5d:53:bd:ca:d7:8a:d3:
         7e:bc:01:76:ff:10:e6:6d:af:50:db:70:fd:d3:b3:1a:62:16:
         1b:ce:1a:df:ed:60:dc:f0:2f:39:e8:6f:23:9e:df:83:71:d8:
         bb:68:5b:29:d0:67:d2:aa:cf:a0:4c:3d:8e:ad:aa:63:eb:70:
         8f:64:53:9c:a4:7f:d8:53:e6:17:85:ba:84:20:1d:39:7a:4d:
         c9:2a:07:14:79:83:0f:4d:9a:18:5a:ec:d2:1b:97:f8:d7:b3:
         8e:0d:18:14:9f:4c:d9:7a:a3:01:47:25:c4:63:8a:f7:3a:25:
         3e:4f:91:1f:d2:10:91:d1:58:35:92:99:40:fc:ff:47:fd:ba:
         14:37:83:a3:6d:86:1e:0b:ff:90:6c:3a:36:85:e2:69:9c:6d:
         d1:4d:06:6d:50:a0:8f:a4:12:74:fb:ae:20:7d:90:e7:5e:b6:
         01:cb:98:71:73:41:fb:35:32:0f:db:1b:15:07:77:b0:54:3f:
         24:85:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org