Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233372e302f32342d3234203d3e20323633343631.roa
File:                     3138352e3230322e3233372e302f32342d3234203d3e20323633343631.roa (raw, json)
Hash identifier:          UZhrkl3fK3YzgmMnszE4XdyaPrAaqmox51WBhHhuCIM=
Subject key identifier:   01:80:36:64:1E:B9:8F:2D:E8:A4:99:AA:6B:34:E4:05:62:52:FF:B2
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6ACA40D133D1596542145FAFF590E84CDD35BA5B
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233372e302f32342d3234203d3e20323633343631.roa
Signing time:             Tue 28 Jun 2022 04:40:20 +0000
ROA not before:           Tue 28 Jun 2022 04:35:20 +0000
ROA not after:            Tue 27 Jun 2023 04:40:20 +0000
asID:                     263461
IP address blocks:        185.202.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ca:40:d1:33:d1:59:65:42:14:5f:af:f5:90:e8:4c:dd:35:ba:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:20 2022 GMT
            Not After : Jun 27 04:40:20 2023 GMT
        Subject: CN=018036641EB98F2DE8A499AA6B34E4056252FFB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:d3:d7:93:fb:56:d5:d1:14:2e:f4:13:97:
                    8f:4c:6c:29:49:89:8f:3d:52:9a:56:68:17:71:20:
                    97:4c:92:97:8e:32:3e:79:d1:0d:6f:b6:54:be:d0:
                    25:23:04:94:77:60:83:73:be:c8:86:f1:4b:44:be:
                    a9:ed:26:10:56:a3:61:c3:f1:5a:f3:6e:c4:04:68:
                    91:18:45:93:f6:51:c0:74:c8:aa:f4:5d:a8:cf:17:
                    dc:3e:c7:ef:6c:8c:f2:1c:e5:4a:8f:88:f1:91:5d:
                    c7:47:e0:75:11:4f:34:28:a2:1c:ff:4e:60:11:05:
                    e1:d0:3c:61:92:ca:ee:9b:a9:69:64:7e:d2:9c:79:
                    de:40:2f:66:05:f3:1c:b8:eb:ca:82:cc:30:31:b3:
                    bc:ea:27:d4:f5:1e:c7:ff:58:64:5f:df:4e:9a:dc:
                    ae:d2:bd:c5:ef:69:39:1a:d4:ea:38:af:3d:c4:67:
                    32:10:df:b6:4d:6e:61:5c:11:0f:81:63:fb:8c:e5:
                    68:73:c1:3f:29:f3:5f:72:3b:9c:ae:99:07:37:64:
                    6a:89:80:40:a5:60:0b:19:27:1e:64:a9:24:c1:d0:
                    2e:e3:02:65:f0:c9:9a:be:4f:3a:b6:dd:23:27:2b:
                    d7:5f:82:27:ad:37:fd:4a:7a:cd:6e:85:b7:69:03:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:36:64:1E:B9:8F:2D:E8:A4:99:AA:6B:34:E4:05:62:52:FF:B2
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233372e302f32342d3234203d3e20323633343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:fa:2e:de:3c:5d:3f:34:39:8c:f7:71:8f:b8:bb:eb:bb:f3:
         72:b1:f0:0a:ec:75:28:b9:06:c2:cd:47:28:0c:2f:3c:d9:17:
         08:8d:12:3d:7c:9f:6e:cb:99:9a:be:20:b4:66:b9:60:d8:90:
         41:d6:6d:c0:f2:fd:4f:67:25:50:74:16:b8:c5:d6:3b:f5:3a:
         62:24:a0:14:6b:1a:fc:88:8b:4d:a0:4f:11:6f:28:73:05:6e:
         fd:15:97:07:2a:f9:9b:fa:52:ff:4b:a6:00:3c:e0:0d:ec:ba:
         b5:05:4a:bb:d2:31:b7:a3:2c:ad:00:ce:69:d0:f9:ea:b0:fe:
         d2:00:1e:d9:91:7b:d0:98:16:e4:d4:d8:3d:64:84:62:3b:ac:
         e3:3e:85:c5:10:7e:ea:7a:05:43:3a:32:b2:9f:a3:02:0c:31:
         54:8f:36:ef:4f:6a:0d:0a:10:5e:5e:08:7f:5e:19:6f:e1:23:
         89:94:8b:60:38:f9:35:a4:a2:67:26:22:46:ae:22:2d:c9:c0:
         40:41:64:bc:c2:84:0b:55:e8:47:91:72:5d:b9:8b:11:a3:5a:
         a4:d8:e5:dd:ba:b8:54:ab:3a:94:3b:e8:aa:61:39:06:a8:2e:
         9a:61:cb:56:c3:af:02:39:cc:8f:8c:dc:2f:b0:d3:36:1f:57:
         a0:39:48:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org