Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232322e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3230392e3232322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          8wUgqbe9j5qn0ci1fRfMg6vnbNis9zD70PgPwGmA3Es=
Subject key identifier:   0E:C4:59:A1:24:FE:13:2F:6C:00:39:3F:51:DE:87:D9:93:8E:1F:27
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       414DC0CFD958E12524807946455641F760547239
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232322e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:21 +0000
ROA not before:           Sat 22 Oct 2022 04:28:21 +0000
ROA not after:            Sat 21 Oct 2023 04:33:21 +0000
asID:                     136787
IP address blocks:        185.209.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4d:c0:cf:d9:58:e1:25:24:80:79:46:45:56:41:f7:60:54:72:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:21 2022 GMT
            Not After : Oct 21 04:33:21 2023 GMT
        Subject: CN=0EC459A124FE132F6C00393F51DE87D9938E1F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:69:86:bc:91:32:04:69:fb:95:25:d9:87:0c:
                    cf:bd:07:d6:d2:34:fc:f4:7e:28:f1:17:2d:03:f0:
                    94:47:c3:0d:47:0a:80:5f:37:79:d8:16:5d:de:e1:
                    c0:72:80:aa:f6:1d:0f:eb:fe:91:32:a0:c6:c0:e7:
                    8f:fc:b7:60:37:d9:78:a0:0e:7d:23:4d:3f:3f:7f:
                    21:19:86:73:40:e3:5b:27:a0:bf:72:03:02:f2:ee:
                    2d:8f:f0:6a:fe:eb:ce:cf:7b:fb:88:b8:a2:55:21:
                    10:f2:5e:28:fb:71:b2:05:7b:7a:cd:fa:6e:ed:f6:
                    0b:2e:b3:b3:1e:f8:f7:7c:a4:41:a0:63:86:c6:6d:
                    1e:85:2b:5e:f2:08:2e:59:2f:6d:f3:17:1f:51:c6:
                    4c:7a:ba:c3:96:fa:94:39:0e:67:f2:54:b3:f8:40:
                    81:58:1f:94:58:bc:a2:8d:45:9b:88:85:e5:98:b6:
                    7c:be:77:66:7b:8b:85:b2:7b:64:bf:c3:db:5a:b3:
                    66:fc:f8:20:b3:67:e3:93:2a:1c:e3:3c:e7:d7:c4:
                    fe:ee:15:58:95:18:10:46:ec:81:91:d2:50:99:c0:
                    26:28:8f:86:18:34:5f:87:c1:97:fd:e8:f5:ed:ba:
                    9b:28:79:32:f5:f8:30:a2:0a:5e:d1:ff:94:a0:be:
                    39:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C4:59:A1:24:FE:13:2F:6C:00:39:3F:51:DE:87:D9:93:8E:1F:27
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232322e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ec:c0:38:a4:1a:dd:ea:f6:2f:49:80:93:e1:24:46:59:d7:24:
         dd:e5:7c:db:9f:43:36:7d:18:2b:e4:89:70:4a:9c:ea:57:fb:
         9b:93:20:d8:5d:9b:65:62:0e:57:62:2e:aa:ee:92:e5:9f:5e:
         c3:11:a4:36:99:c2:7d:87:29:c9:db:44:33:0f:92:6d:08:dc:
         e0:a9:c8:b0:80:49:15:2b:50:13:34:0f:15:37:25:f9:6c:d9:
         2a:04:2a:31:ea:1f:16:e0:92:7d:76:75:c1:7b:31:06:35:31:
         09:5c:ce:19:7d:51:64:32:00:36:d4:b3:0c:ef:16:c7:ac:39:
         2c:da:d1:8a:d7:4f:65:9d:15:82:57:a4:03:eb:58:a6:fc:d8:
         fe:75:09:3d:85:9f:4a:59:d9:9e:39:b4:73:fe:86:04:44:bd:
         4b:5b:5c:5e:62:04:45:eb:65:e9:dd:54:c1:73:91:20:59:ec:
         0e:2d:fa:e0:5e:14:0a:1b:a8:6e:de:f4:52:c1:0e:4c:ac:25:
         42:b9:4c:bb:e0:95:dc:c2:4c:44:ef:56:c0:72:16:ac:31:1e:
         ba:d3:03:57:1c:6e:c6:96:64:40:2c:aa:c5:2e:a8:48:30:fd:
         07:7a:99:1c:0d:79:98:c9:bd:3a:07:5f:4d:73:66:d1:a1:ef:
         8d:18:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org