Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e20323132323139.roa
File:                     3138352e3230322e3232332e302f32342d3234203d3e20323132323139.roa (raw, json)
Hash identifier:          vCwe0jUbc/f7cP0hKV467FgaqfgpnlHGiBjW1zq8neg=
Subject key identifier:   37:8B:DE:BE:D1:F5:40:88:61:A1:22:0A:9C:3F:EC:92:F3:67:8B:9C
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       084564400D73BD7EB806F485C86C21707726EF57
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e20323132323139.roa
Signing time:             Tue 28 Jun 2022 04:40:22 +0000
ROA not before:           Tue 28 Jun 2022 04:35:22 +0000
ROA not after:            Tue 27 Jun 2023 04:40:22 +0000
asID:                     212219
IP address blocks:        185.202.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:45:64:40:0d:73:bd:7e:b8:06:f4:85:c8:6c:21:70:77:26:ef:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:22 2022 GMT
            Not After : Jun 27 04:40:22 2023 GMT
        Subject: CN=378BDEBED1F5408861A1220A9C3FEC92F3678B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:53:8e:ae:90:31:1a:6a:29:0c:77:f1:6e:
                    a8:6b:69:3c:cb:9a:8d:e2:de:b1:e3:2e:cc:05:47:
                    c6:4b:2b:44:9a:a5:52:a8:d5:b2:6a:3f:40:34:bf:
                    a7:f3:9c:53:20:3f:de:1f:96:e8:84:a7:07:a8:37:
                    17:97:78:25:3f:b8:1e:28:e5:92:1c:4c:1c:1d:9c:
                    0a:4f:05:b3:b4:ac:ee:52:30:60:9a:97:f9:00:f2:
                    02:a4:9f:ff:2f:6d:ae:42:db:98:72:2b:17:0f:6d:
                    90:56:25:19:23:16:10:d6:f8:49:ce:90:8f:5d:fe:
                    40:a4:59:94:36:39:d3:2b:ce:43:53:50:14:d4:9e:
                    07:07:94:6b:bb:e0:68:3a:33:e6:48:9a:e9:93:d8:
                    14:96:04:bb:03:02:66:91:0b:28:c4:54:b2:9b:61:
                    fa:a8:56:ef:08:14:38:d1:6d:10:d0:be:7d:8a:d4:
                    b7:ca:35:57:96:f6:7a:ab:b3:66:bd:4f:76:f1:6b:
                    e7:dc:0b:bf:c6:9f:a5:01:d7:a0:1f:7f:95:e0:d6:
                    05:55:5b:ca:e3:0d:66:54:17:19:e2:99:fd:31:ca:
                    bd:1f:5e:dc:08:04:2b:84:de:40:8a:36:bf:29:ac:
                    b2:b5:e9:5e:5a:51:8a:b8:b8:12:a9:ca:06:5c:68:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8B:DE:BE:D1:F5:40:88:61:A1:22:0A:9C:3F:EC:92:F3:67:8B:9C
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e20323132323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:78:df:d1:03:d4:3a:1d:6e:aa:15:12:a8:37:6f:46:d5:8f:
         34:23:67:d3:de:6a:e1:00:19:be:60:8b:73:c7:27:93:e8:11:
         a6:68:95:bd:b5:9f:de:83:6a:0a:c3:d3:ab:65:4c:40:8e:32:
         10:89:30:da:f0:50:35:f8:11:79:48:1f:7c:a1:13:1a:bf:1e:
         9a:78:32:c1:6c:64:5c:44:18:74:4c:da:03:3d:37:15:9e:89:
         32:5b:24:9e:2a:23:0f:84:c3:67:34:e0:82:25:48:00:fa:96:
         87:98:08:82:14:9d:62:88:92:67:73:89:34:9b:6d:bd:2b:9b:
         12:dc:64:6a:2f:50:0a:7d:8b:2c:f4:7b:f3:43:22:e7:6c:44:
         0c:e8:56:d9:e2:55:62:fd:9f:af:4c:dc:ba:aa:38:fd:5e:e1:
         36:e8:d6:f4:86:91:16:04:89:d5:5a:ab:53:92:1e:9e:5f:fd:
         c6:22:31:84:4d:c0:e9:09:83:27:62:a1:7a:01:a3:40:c8:b8:
         16:f7:7a:8f:96:d5:78:1f:c8:f3:b6:4a:e0:0d:78:89:52:61:
         31:a5:0b:64:42:da:27:2f:e8:75:58:8d:11:61:14:dc:28:f2:
         08:fc:84:7b:9a:db:52:58:9d:8f:26:16:00:aa:8f:ea:55:d4:
         b9:21:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org