Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32332d3233203d3e203630353438.roa
File:                     3138352e3231362e37322e302f32332d3233203d3e203630353438.roa (raw, json)
Hash identifier:          tBWD/85XfCV5BfBUcxSkPxtoHUhUfWsAiFu+qKzoi1g=
Subject key identifier:   FF:80:7D:FD:6B:CA:A2:B3:6A:75:B1:E9:53:A5:CE:AA:83:0E:02:52
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       7F991E5634DB164314F3031BF9CDE37F6E65BC0F
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32332d3233203d3e203630353438.roa
Signing time:             Sat 22 Oct 2022 04:33:17 +0000
ROA not before:           Sat 22 Oct 2022 04:28:17 +0000
ROA not after:            Sat 21 Oct 2023 04:33:17 +0000
asID:                     60548
IP address blocks:        185.216.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:99:1e:56:34:db:16:43:14:f3:03:1b:f9:cd:e3:7f:6e:65:bc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:17 2022 GMT
            Not After : Oct 21 04:33:17 2023 GMT
        Subject: CN=FF807DFD6BCAA2B36A75B1E953A5CEAA830E0252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:c7:2c:40:29:2f:78:28:f6:2e:80:1d:e5:
                    8a:9c:45:2a:ea:84:e3:ca:59:92:7e:f1:1f:44:f9:
                    35:67:08:a5:18:77:fb:19:f7:c3:ec:f2:5a:97:a1:
                    ac:27:a7:91:fe:bc:ac:3a:59:b1:f1:46:4b:21:02:
                    d2:d8:74:d6:5a:fd:07:e2:46:b5:a0:c4:8d:c3:21:
                    1d:47:b8:9f:39:dd:59:9f:0b:7b:20:39:65:f1:f2:
                    c5:b4:82:f3:8c:7d:09:4f:6f:fd:4b:50:14:04:8d:
                    b4:2a:98:4e:ed:5b:1e:4c:66:50:86:cc:ba:5b:b8:
                    82:37:49:a1:56:6c:e1:d8:f6:fe:10:bc:b6:3b:d7:
                    26:6d:66:0d:02:7f:66:da:23:34:1e:65:75:14:5b:
                    4f:eb:c3:99:b9:a0:19:2f:1a:8d:30:14:45:36:00:
                    21:91:d5:5b:b9:96:a2:ac:76:bc:91:a5:c8:6c:7e:
                    14:9e:96:9e:8b:13:d9:1f:c6:93:94:7f:40:08:1b:
                    be:a5:e8:0c:82:c0:d9:88:f5:92:17:03:47:17:c7:
                    63:69:1b:49:15:82:58:6e:59:88:19:f0:36:b8:4c:
                    ae:e8:06:ea:8e:0d:f1:b0:63:41:c6:52:fd:03:48:
                    d3:ac:6e:0f:64:bd:ab:5d:e0:a7:03:d8:27:25:e7:
                    b5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:80:7D:FD:6B:CA:A2:B3:6A:75:B1:E9:53:A5:CE:AA:83:0E:02:52
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37322e302f32332d3233203d3e203630353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:9c:0b:0a:dc:09:83:76:28:36:18:d9:c5:ae:b7:74:4f:37:
         73:d0:a0:17:b8:73:d5:3b:1c:59:2f:7f:4c:6d:9b:cb:fb:f6:
         55:2b:af:4a:63:89:08:6d:92:af:7f:3b:b8:a1:f3:e0:0c:36:
         49:af:b1:84:e5:cc:00:44:e1:81:b2:91:6c:0b:42:36:9f:a5:
         f3:d5:94:fb:1c:39:a4:4e:25:b7:31:b8:e9:98:76:5b:d3:6e:
         00:17:3b:2e:38:47:1b:80:2b:3d:b5:e0:a7:c6:d9:a6:7f:45:
         30:7e:f1:cf:c4:6b:c6:48:de:ae:46:d9:3d:b0:b9:2f:17:3f:
         2a:02:67:35:50:88:43:c3:35:db:5b:e9:34:a3:de:c0:c6:8d:
         fb:7d:99:1e:e5:c0:29:da:b6:6c:ce:c4:46:90:50:e8:bf:ae:
         3e:99:4d:47:10:8b:d9:f4:f2:30:48:ae:f5:84:c2:15:bc:14:
         40:12:45:e5:84:f6:9b:18:27:67:bb:63:73:12:57:0b:9e:38:
         98:f1:2f:f5:79:d2:1b:67:b8:4e:c6:65:6e:f3:78:25:3a:59:
         d8:22:35:bd:62:17:3b:1f:78:5f:a0:23:e4:da:2a:5b:5b:9d:
         77:21:97:89:a5:d5:8c:3d:ce:81:b9:35:8a:d3:ad:69:66:b3:
         0e:ad:85:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org