Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139322e302f32342d3234203d3e203630373231.roa
File:                     3138352e3139372e3139322e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          +g8zBe0kIZG8TRQ6AwIiwVVALUqAyRzLGoqhrmBuei4=
Subject key identifier:   35:84:4E:91:87:41:C2:D2:24:3B:01:40:AF:10:7B:19:55:6C:8F:B1
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3D0634092C06BA9253BCDF3AB566B40D1D342DBB
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139322e302f32342d3234203d3e203630373231.roa
Signing time:             Tue 28 Jun 2022 04:40:25 +0000
ROA not before:           Tue 28 Jun 2022 04:35:25 +0000
ROA not after:            Tue 27 Jun 2023 04:40:25 +0000
asID:                     60721
IP address blocks:        185.197.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:06:34:09:2c:06:ba:92:53:bc:df:3a:b5:66:b4:0d:1d:34:2d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:25 2022 GMT
            Not After : Jun 27 04:40:25 2023 GMT
        Subject: CN=35844E918741C2D2243B0140AF107B19556C8FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:57:4d:a7:c9:e2:34:5d:ef:e9:fd:f7:db:
                    94:58:78:6d:04:33:24:de:8e:b3:8f:ad:45:8b:2a:
                    be:eb:b8:63:f0:a8:16:72:96:15:db:85:a4:de:15:
                    07:f2:4a:aa:27:85:39:7e:d3:27:b2:1a:51:87:31:
                    3e:08:cb:e5:05:16:9b:3d:bd:bd:bd:23:a8:a5:22:
                    f7:32:77:d9:c7:9a:13:c2:56:ca:73:b3:7e:8f:f7:
                    c0:92:06:b3:d6:c7:0b:16:86:9a:83:e9:7e:bc:40:
                    b4:aa:8c:2b:50:04:57:3a:cd:b1:af:c8:de:86:a7:
                    48:58:01:a9:6b:87:2e:e6:1d:6c:63:f8:8b:60:df:
                    54:bc:a7:9a:93:2d:20:5a:ea:6d:4e:1e:00:cc:dc:
                    fe:e1:6e:d9:b4:3f:fc:34:cc:7f:0a:63:32:ce:24:
                    e4:6d:a1:1a:11:97:a2:3e:be:7f:19:ac:ee:4a:63:
                    c6:c3:ca:ba:bb:7f:b6:ab:e8:e1:a6:b2:fb:69:14:
                    1f:1f:94:bd:17:16:08:fd:74:55:1c:ae:bd:fa:d0:
                    c3:ed:e9:c2:96:18:b6:ab:56:dc:55:c6:79:5e:30:
                    58:d0:c1:9d:15:b4:e1:83:0a:b8:e9:a6:d8:5f:f3:
                    79:b2:4b:6a:c4:8a:89:6d:94:ac:60:36:07:2c:3c:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:84:4E:91:87:41:C2:D2:24:3B:01:40:AF:10:7B:19:55:6C:8F:B1
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139322e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:b0:62:9c:9a:a8:72:fc:2c:dd:31:7b:0e:c9:5c:6b:3c:30:
         ac:54:04:2d:fa:ce:f8:c3:2a:d5:a3:0b:a4:97:8a:38:e8:89:
         6b:04:15:af:46:6a:1b:99:c2:03:d5:78:65:e8:ab:2f:b0:ef:
         15:3c:c5:b3:21:f4:be:dd:67:4e:ad:71:ed:cf:e5:35:e3:e0:
         b4:81:4f:63:ec:6b:57:af:63:3d:ae:11:5b:4a:2f:dd:c3:aa:
         f6:00:fc:0c:ba:b5:b7:2c:5f:27:ad:72:03:03:60:fb:ab:53:
         39:1b:4b:91:2c:3a:35:00:d5:28:df:57:44:a1:ef:87:cd:32:
         96:31:b3:c4:1f:2b:f8:c9:35:24:10:ff:f9:85:d1:a1:a0:4c:
         45:30:f2:6a:90:5c:cc:70:cf:84:b1:e2:f0:8c:8c:34:c0:5c:
         3c:55:68:90:93:c2:53:9e:8d:cf:20:19:e5:23:40:ab:c9:47:
         fe:55:50:3b:65:54:6c:1c:ba:13:90:e0:22:08:e0:ab:61:98:
         a2:19:88:3d:06:11:9d:32:83:6b:93:92:b4:5d:6c:fb:cc:b7:
         2e:22:f9:9f:9e:9f:8d:e2:74:c3:4e:04:63:cf:a8:87:9a:05:
         9e:5b:0c:db:fb:07:73:63:82:9c:c3:b9:95:4c:13:54:41:b1:
         6f:19:45:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org