Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa
File:                     3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          PeJbbJbSgaLzj0Kad1GTS0YVzAicU1dZX1R5p0BKTDE=
Subject key identifier:   24:49:ED:10:FD:79:E5:2F:EC:9F:AD:4B:17:90:64:8C:BC:74:5D:FE
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       660E9EFD6C180018A7ED11B9DFD7B145D606A6AC
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa
Signing time:             Sat 22 Oct 2022 04:33:24 +0000
ROA not before:           Sat 22 Oct 2022 04:28:24 +0000
ROA not after:            Sat 21 Oct 2023 04:33:24 +0000
asID:                     147049
IP address blocks:        185.213.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0e:9e:fd:6c:18:00:18:a7:ed:11:b9:df:d7:b1:45:d6:06:a6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:24 2022 GMT
            Not After : Oct 21 04:33:24 2023 GMT
        Subject: CN=2449ED10FD79E52FEC9FAD4B1790648CBC745DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bf:7c:e4:78:f0:47:0c:e4:ca:78:0f:06:f4:
                    64:04:f2:34:51:d8:8a:a7:7a:68:2e:6f:8b:e2:20:
                    e8:26:60:12:de:2d:c0:e2:6a:84:6a:18:cb:cc:93:
                    c9:24:1f:79:ac:cf:40:73:22:65:47:01:98:e8:c2:
                    05:8e:73:72:6d:f0:82:6a:7a:a8:9c:c6:15:07:cb:
                    71:15:63:70:f9:59:08:cf:70:8d:5d:45:84:6c:69:
                    be:b0:f7:fa:a8:49:0a:c9:01:e1:13:21:67:d1:15:
                    40:96:5d:ba:3f:f1:cd:3b:bd:18:40:86:ac:d1:55:
                    2e:4b:8e:f5:b1:47:84:e5:9c:53:05:a3:97:6c:55:
                    38:14:02:0b:f7:0e:76:d0:40:14:6b:98:06:d5:cf:
                    4b:dc:80:e8:fe:63:01:36:00:80:4b:fe:d3:de:99:
                    b1:be:75:d9:f9:0d:33:75:8b:c2:3e:87:2a:3c:34:
                    60:95:00:56:7e:bd:3a:81:25:28:1a:df:33:8f:04:
                    bf:09:e3:5b:37:bc:d0:ca:09:ea:1b:e9:f7:71:78:
                    f1:ae:4c:ac:eb:9b:08:d4:59:ca:81:7d:56:70:da:
                    4b:77:b1:73:95:52:67:ec:6b:a7:77:21:a6:42:86:
                    3c:7c:f1:35:8c:e9:b3:34:7c:b5:d1:26:62:7c:ea:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:49:ED:10:FD:79:E5:2F:EC:9F:AD:4B:17:90:64:8C:BC:74:5D:FE
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d3:25:68:3c:12:69:8a:e5:fb:60:c9:1b:f9:86:65:98:5e:
         c0:b3:45:23:a1:0e:c2:da:77:40:9a:95:1b:a4:45:bb:53:00:
         14:09:e8:49:8f:c5:9c:43:3a:65:48:17:cd:7d:9d:ed:59:f9:
         b2:2e:75:53:f6:44:b3:b5:7f:2a:a3:e1:82:67:e9:e6:b5:f7:
         84:b2:90:79:77:e7:c9:6e:20:7d:05:43:a4:77:41:52:39:60:
         de:38:4e:fb:f0:8d:79:83:75:9a:00:b0:d4:7c:11:a7:ea:c1:
         84:d2:e4:6d:6d:1c:26:2c:b2:95:47:a6:95:54:4a:00:fc:87:
         a0:15:f3:26:3d:35:1e:96:67:e9:ba:73:46:d6:b5:d9:47:db:
         04:22:65:b2:be:32:18:a7:66:75:46:f9:b0:32:12:48:f8:5b:
         8f:d9:e9:ad:70:bc:49:f0:29:56:de:29:ec:ce:51:85:0c:6f:
         2c:54:23:f0:4b:3b:a0:cb:58:be:d1:c7:f1:d6:6f:45:b2:16:
         86:bd:2c:e0:8b:63:6c:54:20:52:34:5b:02:23:cf:e0:d7:e0:
         27:25:31:4d:1b:b9:b4:d0:f9:a1:89:a8:f8:e7:07:d7:06:6f:
         f8:b2:35:46:be:8a:34:4e:63:62:87:31:0f:92:f1:f5:7c:62:
         08:b4:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org