Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36352e302f32342d3234203d3e203439393831.roa
File:                     3138352e3139332e36352e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier:          Wp592k5AV7AogVwr/IO6Qiq/dr47S0Mdo403gapcyRI=
Subject key identifier:   9A:E3:E2:8C:B6:82:6A:A3:C7:39:98:BD:B5:E7:F8:53:91:C3:9B:34
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       0B89489FE573F000B1357298664F0E4384C64BB6
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36352e302f32342d3234203d3e203439393831.roa
Signing time:             Sat 22 Oct 2022 04:33:12 +0000
ROA not before:           Sat 22 Oct 2022 04:28:12 +0000
ROA not after:            Sat 21 Oct 2023 04:33:12 +0000
asID:                     49981
IP address blocks:        185.193.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:89:48:9f:e5:73:f0:00:b1:35:72:98:66:4f:0e:43:84:c6:4b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:12 2022 GMT
            Not After : Oct 21 04:33:12 2023 GMT
        Subject: CN=9AE3E28CB6826AA3C73998BDB5E7F85391C39B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:2b:5b:63:15:98:57:d0:36:ec:1a:79:28:
                    3f:3f:99:27:c8:0b:e9:e7:c5:fc:7b:e6:51:5f:f8:
                    1c:97:68:cf:c3:77:fc:ce:a5:ab:62:f7:b4:4c:52:
                    ad:de:46:74:23:a0:b1:f5:7e:c8:40:ae:e6:79:55:
                    0f:8a:5e:e3:f9:bb:89:5e:20:bb:2b:95:d5:99:8d:
                    e1:02:54:80:9e:71:c1:3b:4d:ac:dc:dd:de:64:9b:
                    ab:8c:dc:82:d4:d3:68:59:b3:af:3f:83:d6:30:72:
                    ae:8b:e0:71:73:22:5b:0c:06:7a:1f:17:d4:62:74:
                    fe:b9:f3:e4:2b:74:1c:80:f9:3a:61:78:ec:7f:3c:
                    43:1e:87:24:22:c3:63:83:22:29:78:06:58:a5:d1:
                    5e:4b:69:28:7e:5e:dc:b5:f4:0e:ff:32:59:8c:18:
                    62:a7:05:3d:bf:3a:fd:64:f4:15:3f:f5:ac:33:58:
                    ea:16:84:84:68:0a:2f:75:64:cb:38:08:72:65:93:
                    83:03:de:83:1b:1c:14:c6:e1:a8:0a:13:74:71:68:
                    12:44:7c:1b:03:b6:e6:7d:3b:16:6e:c4:f4:15:ad:
                    4f:8f:04:45:53:01:a5:c0:de:07:c6:7f:1b:72:54:
                    ec:78:e4:1e:cf:69:bb:ce:00:4f:50:85:74:d0:fc:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E3:E2:8C:B6:82:6A:A3:C7:39:98:BD:B5:E7:F8:53:91:C3:9B:34
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36352e302f32342d3234203d3e203439393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e2:6b:a7:0c:d4:a8:a1:55:27:66:23:8d:b6:5c:00:ec:22:
         e9:f9:0d:c4:0d:6c:69:0c:2d:40:ba:78:0e:8f:33:15:55:3d:
         fe:2e:90:a2:0a:a7:5e:ba:4e:89:4e:a7:ea:d4:32:fa:bb:44:
         4a:fc:9d:cd:17:1b:ee:b6:97:a9:b3:80:a2:07:c9:fd:d6:bc:
         f9:65:b8:cf:a8:09:6e:cc:db:06:76:20:52:38:ea:a5:f0:de:
         a6:3f:d9:36:35:7d:36:43:a5:e9:44:58:89:44:1e:97:58:14:
         17:3d:02:97:1b:b6:9d:c3:ac:1d:85:73:e5:a2:96:01:16:cb:
         6e:f6:e2:04:0b:75:e7:a1:26:7c:79:c7:30:81:cb:cd:ae:16:
         de:02:2b:18:ce:86:c0:ac:62:b5:ad:4b:a1:f2:50:90:97:0d:
         5a:58:01:64:7d:36:e8:22:b4:34:c0:53:a4:a1:0f:d3:e4:8b:
         58:e3:c6:46:ea:f4:b2:a7:15:91:95:3a:1e:5b:89:72:9f:3f:
         72:e6:a5:f7:ba:e2:a6:8f:80:e6:05:c3:11:00:64:65:c8:10:
         15:a8:dd:4b:29:d9:dd:a5:32:1f:08:46:44:1b:96:9a:03:53:
         8d:ee:61:08:97:27:69:36:25:af:f7:da:a4:07:4b:ee:45:ee:
         6b:ba:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org