Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234332e302f32342d3234203d3e20323131343539.roa
File:                     3138352e3232322e3234332e302f32342d3234203d3e20323131343539.roa (raw, json)
Hash identifier:          HZWwHv0nLUMKWvHr3vJ9xQBzZEp8yifpNv3VB/EG7rs=
Subject key identifier:   75:40:51:96:CF:54:FD:3C:D9:D4:8A:14:1D:7A:43:B5:5D:72:F5:64
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       2189103180F835C87C552EF6E4052B31987DA02C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234332e302f32342d3234203d3e20323131343539.roa
Signing time:             Tue 28 Jun 2022 04:40:21 +0000
ROA not before:           Tue 28 Jun 2022 04:35:21 +0000
ROA not after:            Tue 27 Jun 2023 04:40:21 +0000
asID:                     211459
IP address blocks:        185.222.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:89:10:31:80:f8:35:c8:7c:55:2e:f6:e4:05:2b:31:98:7d:a0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:21 2022 GMT
            Not After : Jun 27 04:40:21 2023 GMT
        Subject: CN=75405196CF54FD3CD9D48A141D7A43B55D72F564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:f3:1c:62:09:bb:3a:07:5d:e0:57:e7:8c:
                    2c:5f:f7:4c:2b:07:a2:4f:56:15:0d:65:35:72:21:
                    69:94:ae:a7:1b:74:63:6e:75:17:32:19:13:2d:7b:
                    de:08:7f:71:2e:5f:82:db:a4:ae:96:ef:20:ab:76:
                    ef:e2:2e:d6:a0:9f:11:89:87:1f:e4:9b:99:bf:7c:
                    90:c3:7f:3d:64:f0:8b:11:28:4c:36:39:ac:61:33:
                    c0:db:1f:21:9f:50:66:d1:fa:5a:71:db:cb:e9:37:
                    11:97:be:de:0c:e5:54:b0:6d:23:23:ff:c8:09:56:
                    0d:a9:e6:e3:b7:1a:19:d4:1d:e0:0a:52:63:05:38:
                    95:7e:80:33:06:8f:5a:58:f7:78:0c:b5:ab:3a:71:
                    41:1c:06:94:a5:ee:f1:3d:c9:31:4b:7f:bc:3e:fa:
                    b4:c8:cd:c7:cd:3e:a5:1f:0e:93:87:ba:88:97:de:
                    78:f0:a3:0d:57:58:9e:51:bf:25:5b:a9:77:1c:57:
                    c4:af:a7:3c:93:07:dc:55:65:d2:04:20:8b:71:92:
                    54:3f:26:0d:bd:35:a1:fa:cc:b4:76:80:f5:31:be:
                    fa:f9:9d:65:f0:fa:b9:94:b3:76:7e:ca:7e:2d:bf:
                    35:6c:02:52:3f:e1:35:83:17:de:f3:23:98:cb:07:
                    7e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:51:96:CF:54:FD:3C:D9:D4:8A:14:1D:7A:43:B5:5D:72:F5:64
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234332e302f32342d3234203d3e20323131343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:bf:3c:31:77:2e:56:9c:41:7c:3b:8a:f3:b8:cd:86:bd:
         26:21:c2:f5:6f:5f:42:3f:a3:9b:6d:1d:eb:54:fc:26:99:89:
         7b:6a:6e:3e:bc:41:d0:62:7f:e9:33:37:4d:76:65:ad:8a:ef:
         ab:39:01:81:f7:20:bd:a6:c7:83:e4:ea:a2:16:ae:53:5a:a3:
         7b:0e:83:28:45:7a:1e:8b:3b:33:14:82:6d:f6:09:cf:60:11:
         66:83:13:c0:d5:78:c7:3e:19:c8:df:83:72:43:04:8e:c2:23:
         fd:76:5f:1c:f5:86:c3:e1:a4:9f:f9:e3:94:f9:e9:4a:b0:84:
         69:cf:34:27:74:0b:12:24:a7:55:5a:1c:06:2a:b5:b2:b3:bd:
         23:61:ce:64:a8:9a:cd:1e:b9:bb:ed:a7:fc:1d:c4:38:b6:7c:
         35:d4:d2:76:21:ff:db:8a:22:bc:6f:e1:4f:c4:cc:af:d9:4d:
         cc:19:9f:9b:72:c5:be:e1:66:cd:56:12:32:c3:df:8e:c5:55:
         30:e4:d5:44:97:a4:92:a2:84:9d:9d:b6:20:6e:06:5f:5d:e9:
         26:0c:67:71:a9:f9:b9:d1:13:01:6a:67:f9:5c:5b:10:12:21:
         d0:1f:51:26:15:6d:13:18:22:9c:38:7a:9a:51:94:20:df:d5:
         eb:27:9f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org