Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
File:                     3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          ubCthy/ADHcHCtKhbn3jj2CzuREk7/hyiVG+4edcvcg=
Subject key identifier:   FB:11:99:0C:6D:89:8B:1C:44:99:19:12:8C:58:A7:B0:18:06:4B:C8
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       70E88F2C234FAD78611758235EB0BC732A77214C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
Signing time:             Fri 24 Feb 2023 07:45:07 +0000
ROA not before:           Fri 24 Feb 2023 07:40:07 +0000
ROA not after:            Fri 23 Feb 2024 07:45:07 +0000
asID:                     141039
IP address blocks:        185.203.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e8:8f:2c:23:4f:ad:78:61:17:58:23:5e:b0:bc:73:2a:77:21:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 24 07:40:07 2023 GMT
            Not After : Feb 23 07:45:07 2024 GMT
        Subject: CN=FB11990C6D898B1C449919128C58A7B018064BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:35:f6:0e:5d:bb:68:63:e1:5a:66:57:e6:f1:
                    91:be:fd:9e:4e:f7:87:f8:c1:ae:57:2e:34:9e:6e:
                    85:40:12:eb:a5:14:5a:7d:dd:11:64:0d:86:60:4f:
                    8f:f6:1d:7e:76:60:8c:d8:78:f2:48:1d:4b:3a:33:
                    6d:39:ba:13:61:fe:ac:13:63:f5:e9:ae:5c:59:ff:
                    59:91:e0:ab:50:64:db:b8:b6:06:4a:f7:66:5a:eb:
                    50:4c:37:eb:aa:8c:1d:66:4f:75:3a:01:8d:10:4b:
                    7e:27:cd:bd:f7:24:97:5d:4b:45:1d:8c:ec:59:3a:
                    16:7c:fc:2f:82:0e:53:9e:87:74:95:27:10:3c:41:
                    d3:a1:7f:6f:93:53:4e:8c:7d:1d:7f:1f:a3:5e:83:
                    fb:51:d8:c5:58:ef:af:c0:cb:dd:8d:7a:eb:10:8c:
                    bf:43:3a:37:15:81:eb:07:a8:dc:23:cc:0f:32:e7:
                    62:d6:77:e4:a5:12:93:43:23:cb:7a:65:ac:61:f5:
                    16:24:84:28:22:95:61:c0:3e:d2:2c:da:b4:86:5e:
                    0e:c4:a6:8b:5e:04:ac:bb:31:aa:5d:c5:22:10:67:
                    36:04:75:6a:e0:8e:95:ea:b4:a5:a3:bd:44:d6:f0:
                    b1:68:aa:82:ba:0f:9b:ff:7c:ca:14:dd:24:af:92:
                    4b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:11:99:0C:6D:89:8B:1C:44:99:19:12:8C:58:A7:B0:18:06:4B:C8
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:10:a2:f2:96:48:c3:04:a0:b4:0f:e0:c1:7e:60:2f:a7:96:
         88:6e:75:16:be:6d:c8:7a:8a:f9:35:01:bd:d1:63:85:57:f8:
         92:5a:45:2a:99:e7:87:c1:22:95:2b:a6:f9:f5:14:7d:6f:d4:
         33:4e:de:d9:f3:62:0c:f0:ed:8d:3c:dd:b8:68:75:f1:26:52:
         a1:8b:b5:83:f3:50:c8:f5:aa:cb:bd:e9:5e:ea:c0:87:32:7d:
         31:ae:56:4d:46:cc:51:ac:5f:ee:99:27:69:4d:b8:34:75:1e:
         a4:fc:34:fc:6b:42:d2:80:9c:b7:af:d7:fa:d0:6e:55:de:6e:
         55:c1:50:c3:c2:e2:32:e4:e8:56:cc:17:8d:e6:56:f6:0f:ea:
         4e:a3:9a:1d:e1:b1:ea:c6:5d:3a:81:8c:79:b9:21:ee:b5:49:
         20:ad:6a:f9:18:a6:1e:6b:ba:87:19:5b:6a:75:b1:5f:d6:13:
         35:6d:84:57:46:df:47:51:ad:a6:1e:04:6e:50:04:20:ae:34:
         a2:0c:58:c2:ca:27:b3:16:9a:d1:76:3a:b4:1c:0c:ac:cd:c6:
         a4:4e:ed:10:92:c9:05:dd:b4:26:dd:7a:42:50:18:6d:f8:44:
         e3:9b:b9:a5:fb:b7:25:d0:86:10:e2:13:af:e5:40:ca:7a:fd:
         01:e8:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org