Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e203330383233.roa
File:                     3138352e3230322e3232332e302f32342d3234203d3e203330383233.roa (raw, json)
Hash identifier:          fkDcKuFFV0l5X1DfZUUL/QAAgLpKrEgUctGbUDemV9s=
Subject key identifier:   33:FC:2E:88:F4:8B:65:5F:46:17:06:44:17:46:01:22:A6:27:A3:4D
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1CF91A069111ADE60B0B4A8195862481682A70A3
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e203330383233.roa
Signing time:             Tue 28 Jun 2022 04:40:22 +0000
ROA not before:           Tue 28 Jun 2022 04:35:22 +0000
ROA not after:            Tue 27 Jun 2023 04:40:22 +0000
asID:                     30823
IP address blocks:        185.202.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f9:1a:06:91:11:ad:e6:0b:0b:4a:81:95:86:24:81:68:2a:70:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:22 2022 GMT
            Not After : Jun 27 04:40:22 2023 GMT
        Subject: CN=33FC2E88F48B655F4617064417460122A627A34D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:58:eb:65:85:44:58:ce:81:54:f9:01:76:
                    d6:31:5d:9d:92:fe:cf:a5:f9:ee:92:26:fa:4c:e7:
                    05:b7:c5:6d:47:5b:34:d6:06:d6:97:97:74:3e:e3:
                    be:a0:75:a5:6f:b8:1a:f8:e0:36:46:51:1a:b3:0d:
                    f3:3c:b1:07:35:3b:dc:79:1f:07:b9:e8:72:90:75:
                    de:23:7a:64:5f:b7:83:92:f8:d9:a3:de:5d:6d:46:
                    1a:a6:f3:79:c2:2e:ea:65:c3:99:51:ff:eb:d2:c8:
                    35:d5:47:37:45:1b:f3:b7:70:71:79:a3:09:7f:0d:
                    2c:51:29:1a:c0:70:3b:60:69:2b:74:c1:2b:ea:f3:
                    28:d9:74:ed:dd:96:3c:f1:03:a0:54:15:21:58:d8:
                    08:32:97:f0:20:9d:c4:08:b4:77:77:5c:7d:ee:33:
                    b2:d6:5f:31:bf:a0:d9:4d:bd:3c:2d:a9:a0:5c:b0:
                    9e:7d:b0:f5:fb:8f:2e:22:7a:e4:3c:f2:12:97:44:
                    b7:e1:25:c2:85:30:8a:4a:54:dc:d8:c0:11:15:2b:
                    2f:29:8f:0f:4f:dc:52:36:52:36:d2:39:f4:ea:13:
                    f4:7f:be:b2:e5:be:68:f9:91:b6:02:ee:8a:4f:c6:
                    bd:fd:01:8b:37:4f:b1:0a:21:58:80:12:a3:71:4a:
                    23:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FC:2E:88:F4:8B:65:5F:46:17:06:44:17:46:01:22:A6:27:A3:4D
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e203330383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:2e:d5:c8:21:61:43:0d:29:cc:1d:ea:07:0a:c8:b1:0a:
         9d:91:e2:6f:01:e5:73:76:d3:4e:b0:52:a1:39:af:a1:07:59:
         a8:42:66:24:26:aa:91:dd:d3:85:ae:2b:f8:90:e1:e5:59:8e:
         86:2a:03:ce:b4:f4:4d:b9:30:2b:3d:00:b8:b8:e2:9d:ee:69:
         31:51:8c:60:76:b6:8e:29:c9:85:8b:6f:3a:db:b5:f3:30:41:
         84:5a:4a:d2:68:e3:75:8f:a4:b4:c7:a1:93:8f:94:df:44:46:
         50:15:a8:29:4f:4f:b6:86:19:0b:02:5e:90:c5:15:80:51:c4:
         1a:5b:22:24:65:e5:71:97:6d:9c:e2:94:dd:bd:82:9d:06:ed:
         e7:bc:2b:e0:ce:28:13:5d:26:b5:88:91:b3:2d:0b:23:55:f2:
         bb:52:76:e1:c4:d7:d7:9e:b7:62:17:ed:e2:5f:98:f8:ff:69:
         8f:5f:3f:b2:57:da:1d:19:38:77:74:99:17:9d:d6:c8:27:60:
         9d:cb:70:e1:87:2e:51:b0:e4:34:03:26:a5:5d:a4:d2:53:80:
         48:19:89:dc:58:2f:72:04:99:f4:49:b6:71:f0:0c:c7:a5:c4:
         73:3a:be:8f:59:fd:9d:21:e8:8e:7b:01:c3:ff:63:f8:67:39:
         50:3d:8c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org