Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32332d3233203d3e20323035323230.roa
File:                     3138352e3231362e37322e302f32332d3233203d3e20323035323230.roa (raw, json)
Hash identifier:          mJYZmTXxwkzZRMMWdjGJo9fqpSqwwlaBledW5boaqmQ=
Subject key identifier:   91:73:5E:86:9A:C7:E7:DE:6F:08:13:02:6C:C1:59:81:C2:49:92:63
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5BBD493913204B0EA11806C581BD96BC63487AAC
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32332d3233203d3e20323035323230.roa
Signing time:             Sat 22 Oct 2022 04:33:14 +0000
ROA not before:           Sat 22 Oct 2022 04:28:14 +0000
ROA not after:            Sat 21 Oct 2023 04:33:14 +0000
asID:                     205220
IP address blocks:        185.216.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bd:49:39:13:20:4b:0e:a1:18:06:c5:81:bd:96:bc:63:48:7a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:14 2022 GMT
            Not After : Oct 21 04:33:14 2023 GMT
        Subject: CN=91735E869AC7E7DE6F0813026CC15981C2499263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:be:15:70:f2:50:3a:6e:a0:5d:14:94:63:
                    9e:46:02:9f:5d:5e:55:28:a1:db:67:e9:1d:d4:68:
                    cf:37:01:70:9f:a2:ab:9c:c5:5d:e7:9a:e6:31:58:
                    f1:9d:c4:9f:62:5a:a4:cf:fb:62:31:06:7b:12:3a:
                    a6:a4:19:56:83:4f:ad:b4:ce:9a:a2:bb:75:78:52:
                    7f:5e:68:15:8d:6a:e3:84:df:fd:c6:e7:c0:99:a4:
                    f2:8c:84:45:da:9d:e7:65:98:c5:d0:f8:44:78:2e:
                    73:ca:06:93:30:31:44:90:67:92:ae:3f:68:b5:b6:
                    f2:f4:7b:44:0b:2e:a7:64:d8:d2:47:16:bf:9a:9f:
                    23:ce:2f:28:5e:c2:14:6c:5b:d7:91:54:84:05:44:
                    d0:37:26:d3:12:04:95:bd:a7:34:bf:de:7c:04:34:
                    08:62:23:73:2b:68:22:88:92:66:99:99:ee:38:24:
                    1e:b0:c0:ba:71:30:73:4b:86:39:45:29:d4:25:56:
                    14:9a:f0:ee:47:12:1d:d4:4e:cb:aa:5f:48:eb:a1:
                    f6:2f:7a:a1:bf:a7:93:13:e6:ea:ad:ea:23:bd:91:
                    ff:24:06:c3:2b:b4:7e:3f:c8:cb:46:6b:4c:ab:14:
                    75:26:b3:89:70:d1:af:be:0a:35:0e:8a:78:62:7c:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:5E:86:9A:C7:E7:DE:6F:08:13:02:6C:C1:59:81:C2:49:92:63
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32332d3233203d3e20323035323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:70:15:6b:3e:3f:d8:da:4c:55:1a:2e:01:89:d3:64:dc:05:
         22:c0:aa:f8:b6:db:b3:38:aa:64:8d:81:d5:21:7a:e0:39:06:
         5e:02:9c:74:64:82:15:72:b4:45:4d:9b:cb:90:ec:4a:82:be:
         53:48:50:c8:6f:2a:75:65:e0:2e:91:a8:cc:3f:c8:d5:87:c6:
         7b:8f:86:0f:ca:ce:c3:5d:e3:be:34:e6:76:7f:fd:9b:b9:15:
         15:fc:db:f2:91:3c:e6:fd:88:70:45:1b:ce:1d:bf:0a:75:c6:
         3c:2f:cf:e1:12:23:e5:fc:10:8d:8f:1e:9b:d1:ad:6c:74:a0:
         d3:12:e4:22:eb:ff:ac:f7:22:4e:12:9a:d2:da:0c:25:c2:f3:
         eb:e9:8e:0c:c3:a0:e9:a4:df:4f:03:e3:2b:41:00:fe:f8:21:
         58:03:5c:2c:7e:d2:01:09:32:23:71:72:65:b1:02:1f:6b:66:
         d1:d1:39:3f:a5:7b:69:e4:48:bb:ea:09:58:de:ed:0f:e8:88:
         3e:36:4c:1b:fc:2a:08:e1:c0:d9:c3:02:d0:40:a2:70:a7:ca:
         d2:68:54:04:72:db:a4:2b:64:c1:a6:87:fc:fd:1b:31:a0:bf:
         0d:4b:fd:25:1b:bf:4b:bc:23:b0:ec:82:0d:57:82:4b:db:ac:
         4c:6b:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org