Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e203232373733.roa
File:                     3138352e3231392e3134322e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          fBVYguDVscMQj7ZpQmmpexutr0b2iBdRxij7RGJfBv4=
Subject key identifier:   96:7E:03:D1:B4:52:C7:A6:F6:6B:BF:06:B9:79:D6:5F:0A:CC:0E:1D
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       758C1D77780172A7D97A870BF9DF64584A57882E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e203232373733.roa
Signing time:             Tue 28 Jun 2022 04:40:25 +0000
ROA not before:           Tue 28 Jun 2022 04:35:25 +0000
ROA not after:            Tue 27 Jun 2023 04:40:25 +0000
asID:                     22773
IP address blocks:        185.219.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8c:1d:77:78:01:72:a7:d9:7a:87:0b:f9:df:64:58:4a:57:88:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:25 2022 GMT
            Not After : Jun 27 04:40:25 2023 GMT
        Subject: CN=967E03D1B452C7A6F66BBF06B979D65F0ACC0E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:ab:e1:e7:81:f6:bc:59:56:42:68:f9:ea:
                    50:3d:fa:25:54:24:8c:13:6c:c5:a9:6b:c5:5c:14:
                    97:74:a6:82:44:d7:e7:f7:ce:20:0c:02:07:ab:df:
                    ef:79:1e:89:38:7d:92:18:63:45:37:b1:ac:0c:f7:
                    d8:30:5a:fa:4b:ba:0a:9a:bc:62:0b:08:03:e9:48:
                    72:fd:80:72:87:3a:d7:75:eb:aa:a9:2b:2d:b8:6d:
                    b2:8e:98:60:73:8a:ce:45:56:81:36:51:b1:7a:54:
                    6b:1f:77:87:50:4e:7a:d6:3f:e1:44:bf:83:6f:4d:
                    56:9f:f6:56:27:41:df:d8:15:d6:e5:81:80:7f:5b:
                    1c:ed:40:36:1a:67:8b:ca:55:33:49:70:a6:89:e7:
                    fc:fd:7f:d0:23:59:90:cf:6f:d2:95:3f:bf:07:cd:
                    fd:30:2a:12:db:d7:3a:f5:52:4e:ad:92:22:34:4c:
                    c1:bb:a4:27:7f:45:80:17:5c:c9:04:05:3c:06:00:
                    ec:f2:5f:ae:fc:97:3e:67:ac:64:e3:1c:b9:ea:f5:
                    5a:38:1c:d1:b2:78:d5:2b:ad:90:7f:c0:de:d9:d4:
                    61:f8:52:c4:2d:7d:19:d6:e2:ea:85:39:b2:05:4b:
                    66:f1:63:68:89:45:f0:75:fe:68:32:9a:f3:58:40:
                    8e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7E:03:D1:B4:52:C7:A6:F6:6B:BF:06:B9:79:D6:5F:0A:CC:0E:1D
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:f0:4f:85:00:17:94:ee:2d:7a:7d:c1:ee:d5:fe:38:96:29:
         d0:6b:21:b9:6e:04:78:3f:d8:4e:b5:40:17:f6:76:03:02:28:
         3b:3e:e6:5f:67:f3:f2:2b:96:e1:59:bb:4f:85:f3:6d:e6:80:
         2a:00:42:99:9a:da:ea:e0:40:72:e7:2c:ab:25:b8:7a:83:98:
         37:ff:a6:80:dc:f6:b8:0c:a0:a0:d5:68:80:25:28:40:62:ac:
         7e:c5:57:5a:c4:7d:c7:3a:eb:aa:e0:63:c4:2d:bb:d0:83:c3:
         fa:d1:81:97:8a:bb:63:f9:8a:bf:70:20:bc:52:71:a0:66:07:
         ca:82:ff:53:fa:5a:b2:b3:db:55:31:6f:0d:1c:95:af:67:63:
         b5:43:bc:18:ac:ca:d6:08:3c:45:14:b0:89:62:48:fe:f7:b3:
         66:7f:46:ff:63:57:78:39:cc:12:6e:57:62:34:cc:53:49:da:
         3d:ac:64:0a:48:d8:e5:08:ec:96:c2:88:93:cb:56:16:b0:0d:
         86:ba:f5:4b:2e:bc:20:3e:7e:cf:7e:3c:e9:7f:5b:5c:0f:be:
         15:14:63:f1:dc:d1:16:51:6b:ec:9c:39:1d:4d:40:23:07:57:
         ff:3e:e4:4e:9c:06:5b:b5:b3:43:1c:1f:91:93:c8:1e:7f:0c:
         bd:b6:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org