Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
File:                     3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          RdZHri8Xna2tRAA1M1QKGC1PjUuwEIXjTY7kKi/kq2o=
Subject key identifier:   5A:B7:5F:2D:ED:29:C0:E4:3C:A2:29:0D:0E:1C:B7:28:3F:42:9D:FE
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       098D20B900389CC72459DF859132DDBCA6C0506D
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:23 +0000
ROA not before:           Sat 22 Oct 2022 04:28:23 +0000
ROA not after:            Sat 21 Oct 2023 04:33:23 +0000
asID:                     51167
IP address blocks:        185.197.194.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8d:20:b9:00:38:9c:c7:24:59:df:85:91:32:dd:bc:a6:c0:50:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:23 2022 GMT
            Not After : Oct 21 04:33:23 2023 GMT
        Subject: CN=5AB75F2DED29C0E43CA2290D0E1CB7283F429DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:6e:8c:8a:5d:18:93:5c:fc:d1:49:86:39:
                    29:92:d8:f2:1e:13:43:5e:b8:06:8c:68:9d:78:ee:
                    ba:29:23:3e:28:9f:c3:98:3e:14:64:0a:63:92:76:
                    88:c1:57:13:97:04:fd:4a:4a:9f:20:3c:a9:aa:6a:
                    b1:2b:5b:c2:55:bc:42:9b:80:a3:31:76:c2:3c:eb:
                    af:7b:12:aa:39:aa:f3:dc:5d:bb:c4:c8:6e:52:a5:
                    95:c4:c6:43:49:db:77:fe:ba:e5:d6:8c:51:02:cf:
                    a7:e4:d5:81:46:2b:ff:6e:f2:51:b5:b8:e5:38:38:
                    f4:66:73:20:cf:0d:0f:ac:66:17:c7:60:ac:80:bc:
                    a8:44:21:1d:66:78:b0:de:72:e1:b8:bc:06:30:bb:
                    1b:3b:9e:95:89:e9:fa:29:15:6b:b8:66:09:1d:8c:
                    dd:c3:79:59:06:db:61:93:18:5a:9d:f5:8a:d1:0e:
                    2a:7e:6c:f6:3b:5c:c3:cc:c2:92:9c:c1:db:6d:47:
                    d7:d5:1d:94:12:9e:21:2b:a6:cf:5e:80:df:28:13:
                    ed:d2:52:8b:77:12:fd:17:8b:5f:5b:99:36:26:d7:
                    c1:0c:36:b7:08:82:03:be:65:b2:64:5b:09:17:a1:
                    6e:35:aa:52:6d:09:8f:fa:d2:ac:7f:b2:74:c7:cc:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B7:5F:2D:ED:29:C0:E4:3C:A2:29:0D:0E:1C:B7:28:3F:42:9D:FE
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:75:89:73:b4:c4:9f:12:af:6b:45:8d:a9:3f:38:c4:84:b4:
         23:6b:88:55:b4:49:24:cb:70:48:82:2f:98:ad:a9:de:36:eb:
         13:2a:13:68:05:4f:f6:2e:5d:f6:21:d4:20:44:b1:c9:c1:b4:
         69:56:44:f0:8f:b2:0e:dd:32:9f:f3:61:60:95:19:a1:dc:70:
         f4:7b:5e:5b:67:52:80:4f:73:3b:de:3e:21:95:4a:e4:6a:f7:
         7e:dd:a9:54:3b:fa:eb:b1:b5:a6:ae:be:e9:ba:77:ee:da:27:
         73:34:89:f9:5b:9e:12:46:3d:6c:5b:f7:59:c4:3f:03:a3:be:
         e2:bd:00:d6:35:dd:28:88:6d:93:02:34:77:98:2e:7f:5d:8a:
         a6:01:94:4a:b7:9a:50:0f:b1:1a:c2:02:a9:42:3d:3a:e5:14:
         c4:02:b0:0c:83:d3:3c:d4:eb:84:08:dd:28:b7:8b:5f:1d:49:
         f0:0d:38:a3:ef:ef:92:b4:0c:73:96:d5:05:4f:90:b0:48:49:
         cb:4b:a7:88:01:bd:a5:0a:b3:a9:26:ce:58:80:d4:f6:ca:de:
         8f:56:65:14:da:bf:15:bd:be:1b:2a:6e:a9:8f:a5:60:5d:20:
         44:d3:69:97:b3:52:f1:46:db:e5:af:bb:d7:16:c5:22:5d:de:
         79:ad:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org