Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e2033333536.roa
File:                     3138352e3231392e3134322e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          JmTIUlOgaRGKyJgKI20K9PhI9QBB4gKuPWZhRj3UY0A=
Subject key identifier:   04:D8:FB:EB:F4:F1:75:FC:00:CB:C9:D0:FA:E3:53:E3:8D:09:90:48
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       01D5581F2D31045FDDABAD43B741CACB9DF87CA2
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:40:31 +0000
ROA not before:           Tue 28 Jun 2022 04:35:31 +0000
ROA not after:            Tue 27 Jun 2023 04:40:31 +0000
asID:                     3356
IP address blocks:        185.219.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d5:58:1f:2d:31:04:5f:dd:ab:ad:43:b7:41:ca:cb:9d:f8:7c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:31 2022 GMT
            Not After : Jun 27 04:40:31 2023 GMT
        Subject: CN=04D8FBEBF4F175FC00CBC9D0FAE353E38D099048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:15:ec:71:70:e8:47:11:89:af:e7:12:2f:
                    b9:6d:1c:02:57:b6:35:f0:51:a3:3d:61:08:ef:e1:
                    02:6d:b6:d5:a1:24:bb:cd:3b:3a:35:5f:ec:e3:f6:
                    04:3c:f7:26:83:69:18:cd:49:88:26:c2:e9:b7:2b:
                    b1:1c:c9:d4:d3:37:dc:a8:2e:02:13:a5:3e:e8:d3:
                    90:3e:4e:09:a3:fd:fb:88:7e:27:8b:7d:75:8c:99:
                    76:5e:b7:11:1b:6b:4b:c8:e0:ec:63:56:bf:66:3f:
                    af:2f:52:96:93:c2:4b:77:a5:d4:c8:c3:d2:bf:18:
                    6e:0b:56:e6:29:70:36:bf:91:21:a9:74:9d:0c:15:
                    12:2c:db:e2:10:0e:cd:7b:b9:8d:fd:ae:85:21:3d:
                    b5:f0:8d:34:30:a6:85:6d:d6:d2:5b:2d:df:fd:72:
                    af:db:ee:1b:16:32:0f:9b:e2:94:9b:20:cd:83:55:
                    a5:ec:9b:a6:c5:25:30:62:38:9b:30:70:bd:29:9b:
                    ec:92:97:96:17:69:e5:4d:b0:1b:f1:aa:cc:ad:7d:
                    a7:ac:50:47:e1:69:01:36:75:f4:67:a8:2c:c1:a2:
                    7f:ed:17:c9:90:e8:e4:bd:b7:78:82:1b:14:81:e9:
                    b9:b9:e4:d6:2f:ab:f8:94:dd:da:c8:fa:f1:00:e3:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D8:FB:EB:F4:F1:75:FC:00:CB:C9:D0:FA:E3:53:E3:8D:09:90:48
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:6d:d3:0d:8d:e5:58:41:65:60:2b:98:5b:27:69:7f:e4:f5:
         2c:fd:05:78:60:61:4d:96:38:1d:85:97:09:de:02:17:7c:8f:
         cc:93:60:68:5d:ea:9b:cf:8c:6c:7d:e3:05:fb:9d:8f:e6:29:
         9e:91:42:88:a7:24:b8:4f:35:c3:e3:e2:be:a4:06:dc:9c:04:
         63:fe:ec:23:f9:7d:26:77:7f:80:d1:f9:cd:bd:62:0d:fe:a0:
         3e:fa:fe:79:28:82:b8:05:58:fc:81:af:fd:db:be:d2:97:68:
         9a:86:a2:ce:c2:2a:57:d2:b8:c3:7c:2e:d5:77:d9:23:41:0a:
         a8:ac:ae:ba:a9:2d:04:af:5b:45:58:00:bd:87:aa:50:b0:28:
         4e:e9:e4:df:a2:01:fb:ca:dd:27:7d:4e:4b:fc:2d:e9:8a:db:
         19:81:d6:3b:82:21:ca:73:ce:8f:b5:13:f7:02:9f:d0:ed:f9:
         98:73:7c:ea:e8:1d:46:ab:0f:61:28:74:6f:6d:39:69:81:91:
         1b:48:9d:7a:08:1e:cb:14:b5:1a:05:d1:31:f9:ba:0f:13:d5:
         98:6a:d4:92:d1:33:c1:ff:1d:93:19:8a:35:07:cb:9d:be:25:
         7d:a0:ff:6c:a0:91:5e:5f:54:06:a0:65:4f:71:ad:28:b3:a2:
         01:6c:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org