Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37332e302f32342d3234203d3e20323033333830.roa
File:                     3138352e3231362e37332e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier:          N9YxTEoLo1UBFlMMEsCWS7gcDCSymfRRuTl1m08RPPQ=
Subject key identifier:   2C:35:91:72:7E:CA:3F:A6:5A:2C:7E:82:19:DB:04:A4:73:73:3C:ED
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       521E36115B66A0F8B337E1E7CFBB9173F02CFCC3
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37332e302f32342d3234203d3e20323033333830.roa
Signing time:             Sat 22 Oct 2022 04:33:19 +0000
ROA not before:           Sat 22 Oct 2022 04:28:19 +0000
ROA not after:            Sat 21 Oct 2023 04:33:19 +0000
asID:                     203380
IP address blocks:        185.216.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1e:36:11:5b:66:a0:f8:b3:37:e1:e7:cf:bb:91:73:f0:2c:fc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:19 2022 GMT
            Not After : Oct 21 04:33:19 2023 GMT
        Subject: CN=2C3591727ECA3FA65A2C7E8219DB04A473733CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:c2:2b:da:85:a5:b2:2d:77:73:8f:0b:cc:
                    71:e8:bf:f2:41:5c:20:36:18:88:7e:61:74:2e:bd:
                    40:a9:a1:5b:ea:b6:72:50:16:cb:a0:0e:ad:fc:3f:
                    bd:8d:3e:fa:d6:af:be:cf:49:c3:a1:06:12:68:aa:
                    90:38:10:8b:32:a3:91:15:e2:40:c4:8f:e7:b9:8e:
                    39:1e:92:93:e0:12:22:04:4a:53:0a:00:fb:47:2b:
                    06:97:be:43:74:cb:7e:63:2d:bb:ef:50:70:2c:a2:
                    fc:54:f9:fa:b6:74:35:c6:ea:16:47:4a:0f:4c:3a:
                    e1:1a:e1:20:69:d1:d8:49:d8:be:a5:d1:fe:11:ca:
                    1b:c3:ee:e5:92:a1:86:b4:d9:77:e8:75:2d:58:fc:
                    c7:9b:7e:8a:fb:b8:b3:52:5d:72:ae:bc:3c:b4:30:
                    98:c0:89:2e:d0:5e:96:3e:2e:52:76:18:fc:38:93:
                    eb:fa:c1:e9:d0:e2:81:8e:3b:33:72:28:cb:37:79:
                    c3:52:2c:69:5b:a1:33:11:7b:9b:c5:0a:45:63:97:
                    60:b8:df:d5:f6:9f:3e:9c:96:5e:cd:03:95:d5:80:
                    91:6f:40:ac:e5:68:2d:86:a1:3a:f9:51:37:cd:d2:
                    2c:d0:7f:f2:a8:54:26:a9:ee:64:c0:6a:0b:64:d7:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:91:72:7E:CA:3F:A6:5A:2C:7E:82:19:DB:04:A4:73:73:3C:ED
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37332e302f32342d3234203d3e20323033333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:61:e1:74:8c:98:47:df:c6:b4:b5:de:65:55:b0:33:99:8d:
         7d:98:61:31:12:13:fd:82:8c:2d:ac:6e:a0:95:b6:0f:87:34:
         8f:8d:0b:d4:a2:fa:95:09:b4:6a:6f:7d:4b:83:0c:51:f3:8e:
         a6:31:71:e9:f6:ce:fd:ab:c8:8b:a5:fe:4d:d8:44:2e:92:ce:
         46:19:43:eb:8b:39:1b:f8:b8:a4:9e:d5:38:d5:f1:7c:b1:54:
         d0:40:17:49:bb:5b:66:8d:2a:cf:d7:34:e4:b8:ad:c4:86:23:
         3d:72:0b:55:86:52:b8:35:a5:41:fa:62:71:97:5a:61:42:02:
         8f:e6:bb:1d:21:69:d5:3c:f5:ee:a1:63:86:6f:f5:f8:c5:d9:
         7d:bd:34:04:d7:12:e5:e1:d2:4b:06:83:9c:cf:be:28:69:bb:
         d0:45:e6:59:bd:ae:0d:e6:74:ee:3b:84:ca:0f:04:27:6d:de:
         55:66:ec:32:bf:73:13:a8:a6:22:d2:4a:35:a3:07:51:c7:78:
         28:d9:8c:b9:fb:34:45:ca:81:62:ec:1a:45:4e:1e:0c:c8:4e:
         b1:06:9c:4f:10:a2:dc:7d:9c:0d:27:40:e5:39:c5:eb:9a:79:
         b9:01:9e:f3:61:81:ab:94:d0:6b:13:e4:2e:d2:35:a5:a4:24:
         68:05:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org