Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e362e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231312e362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          53XZEUUr62iRbZj8MSTRAz6iNKT2rLoXc1JJdbN4oD8=
Subject key identifier:   9E:8C:7F:A8:B3:2B:54:1E:95:DE:22:E9:3C:B2:EC:CB:7D:45:BF:B7
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1D26B1BDD89EC1FE14B5B9E92113983F86AE1E38
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e362e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:13 +0000
ROA not before:           Sat 22 Oct 2022 04:28:13 +0000
ROA not after:            Sat 21 Oct 2023 04:33:13 +0000
asID:                     51167
IP address blocks:        185.211.6.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:26:b1:bd:d8:9e:c1:fe:14:b5:b9:e9:21:13:98:3f:86:ae:1e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:13 2022 GMT
            Not After : Oct 21 04:33:13 2023 GMT
        Subject: CN=9E8C7FA8B32B541E95DE22E93CB2ECCB7D45BFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:2f:09:dc:e4:7b:34:c3:10:90:3e:8a:ed:
                    01:fc:6a:45:12:96:df:e8:94:2c:30:1d:59:8c:bf:
                    6b:f1:ad:a1:bc:12:27:2b:ca:20:d3:cd:3c:3b:60:
                    52:1d:22:b3:65:65:e0:1b:07:8d:7a:91:18:e3:d1:
                    ff:f0:73:7f:6a:37:02:6a:aa:07:37:07:b7:37:7d:
                    12:a2:f0:44:00:6d:29:c2:ca:20:83:05:e7:81:e7:
                    da:05:89:26:8d:7c:8f:fb:42:3c:f3:5e:29:01:91:
                    72:23:30:d2:71:a6:24:8e:77:77:33:56:65:39:68:
                    fa:e0:2f:b8:3b:24:6f:80:6d:62:cf:f2:e3:cb:d4:
                    a7:92:39:57:c0:04:6f:77:50:60:07:74:ff:ea:50:
                    ff:23:b6:ae:98:a6:89:22:99:fe:ba:5a:30:1f:29:
                    77:3c:3c:1c:8c:62:d4:67:3b:77:9d:68:80:ea:1e:
                    86:cc:42:d9:b1:db:94:d0:ea:d3:5b:4d:df:a8:38:
                    38:56:a2:f1:f4:ed:6f:1a:a2:74:35:21:9d:ed:df:
                    cd:55:21:64:c0:83:0f:ab:de:ec:d0:b7:c3:35:e3:
                    dd:1f:30:06:b8:6a:0b:9a:4a:58:77:40:40:58:f4:
                    ef:3d:71:08:fc:7c:da:fe:6d:e2:46:68:ba:04:eb:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8C:7F:A8:B3:2B:54:1E:95:DE:22:E9:3C:B2:EC:CB:7D:45:BF:B7
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:38:e2:e7:42:7b:a8:7c:c2:2e:ba:0f:09:67:16:cf:5b:68:
         22:3a:09:aa:cf:87:4b:77:27:8b:a3:55:45:83:2a:69:92:a4:
         19:a1:55:c4:cb:51:c8:38:07:3e:99:85:a3:e7:a0:35:d6:86:
         f9:06:26:49:95:0e:30:b9:ed:45:73:09:33:9c:25:84:aa:42:
         8f:ad:9b:98:6f:df:4d:2b:86:c3:3d:96:3c:1e:ce:d6:cb:df:
         32:50:ab:a2:1b:c2:f6:21:c9:02:c4:38:2f:94:fc:2a:bf:da:
         01:da:4d:96:87:a4:71:f7:bc:94:89:09:ed:f3:e9:d3:39:7c:
         b0:b4:a2:12:4f:e5:9e:c7:44:55:bd:09:3e:af:8b:a3:64:d9:
         39:f9:56:b6:3d:bb:76:56:e1:72:11:62:4f:6a:d3:75:72:fb:
         bb:0b:e9:a6:4d:07:e1:f0:38:39:99:dc:c9:e7:9a:fd:4e:b5:
         90:fa:54:57:47:c8:53:7e:9e:df:9a:b2:f2:40:a6:c9:60:83:
         21:9e:0b:18:a7:d6:31:b2:93:4c:b2:71:80:37:58:52:07:af:
         1e:bb:b6:b9:df:fb:79:8b:a6:f4:ae:d0:01:8e:56:30:fe:7e:
         13:82:ef:5b:4c:b3:a6:90:af:42:bc:44:84:ec:67:1d:3a:04:
         8c:bf:0e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org