Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e2037383537.roa
File:                     3138352e3231392e3134322e302f32342d3234203d3e2037383537.roa (raw, json)
Hash identifier:          1aTIWxS7SPCVqVdVdxIyZj7Gff7Xbr6UptZO3+XUqyc=
Subject key identifier:   25:B5:72:49:DB:3C:6F:36:78:CF:C7:88:E3:BB:AA:F8:55:4F:2F:52
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       149ED5AF2D24180CFB8CCC1576E5F1E44ADA9EE7
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e2037383537.roa
Signing time:             Tue 28 Jun 2022 04:40:22 +0000
ROA not before:           Tue 28 Jun 2022 04:35:22 +0000
ROA not after:            Tue 27 Jun 2023 04:40:22 +0000
asID:                     7857
IP address blocks:        185.219.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9e:d5:af:2d:24:18:0c:fb:8c:cc:15:76:e5:f1:e4:4a:da:9e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:22 2022 GMT
            Not After : Jun 27 04:40:22 2023 GMT
        Subject: CN=25B57249DB3C6F3678CFC788E3BBAAF8554F2F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:2e:1d:5b:0e:a4:82:cf:af:db:8f:2b:45:
                    a4:94:b1:94:8c:65:a7:33:e6:43:fb:e7:f6:d2:0d:
                    d3:77:75:f7:3c:e6:cc:28:ab:2d:0e:3b:66:74:b0:
                    f5:d4:0c:85:ca:85:19:7d:8c:3b:96:b0:26:15:18:
                    b4:84:c5:b8:9d:ff:3c:2e:80:65:21:bd:51:f4:23:
                    89:f5:a6:ad:9f:df:07:e9:08:c5:38:98:20:08:93:
                    ca:5d:50:f3:e7:e3:51:cb:70:43:9c:46:6e:36:07:
                    b4:29:aa:48:80:d7:c2:41:68:ba:16:69:4d:64:4e:
                    62:55:e3:42:07:32:3e:3b:bb:ad:af:d2:30:03:51:
                    5f:e4:6e:c8:d4:26:ae:15:98:e1:99:14:e4:57:d1:
                    33:62:d0:0b:2d:36:6a:a7:a9:be:85:1e:46:a6:b7:
                    65:7a:a4:e1:67:66:c9:34:ba:71:72:98:95:58:4c:
                    ee:05:85:30:15:9a:b2:73:45:71:3b:b3:d9:f9:00:
                    82:5d:4d:b5:ec:64:3f:1a:c9:80:e5:99:5f:ca:13:
                    23:4d:b9:75:1a:d0:73:d8:89:c8:f0:ff:1d:ee:e5:
                    37:46:34:19:b7:44:1b:82:0b:58:c8:bd:9e:43:31:
                    7d:26:3c:fc:0e:71:e8:9d:e8:e3:ec:20:6b:16:ec:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B5:72:49:DB:3C:6F:36:78:CF:C7:88:E3:BB:AA:F8:55:4F:2F:52
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134322e302f32342d3234203d3e2037383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:95:0b:f8:c9:5a:d8:cd:21:9d:80:1c:5e:69:11:f0:63:
         48:db:12:2c:ce:c4:25:22:ae:7e:20:a8:9c:ea:84:70:b9:dc:
         33:65:b3:0d:ed:14:95:29:e3:ce:60:fb:62:6d:cf:c2:b8:6b:
         6f:69:bc:a9:8a:27:18:ba:bd:b9:39:6d:cd:be:b6:33:0e:19:
         0d:69:c8:3c:6c:fc:b6:b5:68:76:d4:32:a2:8e:7c:a8:9d:b1:
         c4:bd:56:07:38:f0:29:45:59:f9:9f:99:9c:6f:92:f6:6f:5b:
         ec:4f:3f:84:de:d8:d8:51:ca:8a:e5:f5:44:77:30:55:23:1d:
         eb:ca:33:fb:c4:e4:fc:39:05:69:b9:2d:83:ab:e5:0e:d3:16:
         bd:44:81:72:ae:a8:30:a0:0b:0d:b0:5a:1f:1f:9d:33:35:8f:
         16:4d:5f:9e:68:25:17:81:85:e4:69:cb:1c:67:d9:4f:5e:4f:
         8d:22:ac:57:c0:5d:90:38:e6:5a:5e:f4:3b:0b:51:72:fd:c8:
         1c:f5:24:a5:08:18:19:e0:ca:1e:d8:70:10:fa:58:e5:4c:7a:
         cf:f4:05:c3:4c:60:b0:94:63:65:94:9e:b8:36:61:af:e0:91:
         7b:58:08:ef:5b:fd:f2:09:e0:6a:5d:31:cd:8f:b8:eb:83:bc:
         e9:d1:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org