Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36382e302f32342d3234203d3e20323037313337.roa
File:                     3138352e3233342e36382e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier:          cgZYCPcsshzl+UDQZFAfno3TSrPhdXf3SPkYpHi2GqE=
Subject key identifier:   9D:9E:55:6D:76:F2:AD:1D:36:22:D0:C0:EE:1D:06:4C:1F:A9:E1:25
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       2784DE8B88EC47C266A4BA07C44CA243B250A894
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36382e302f32342d3234203d3e20323037313337.roa
Signing time:             Sat 22 Oct 2022 04:33:23 +0000
ROA not before:           Sat 22 Oct 2022 04:28:23 +0000
ROA not after:            Sat 21 Oct 2023 04:33:23 +0000
asID:                     207137
IP address blocks:        185.234.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:84:de:8b:88:ec:47:c2:66:a4:ba:07:c4:4c:a2:43:b2:50:a8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:23 2022 GMT
            Not After : Oct 21 04:33:23 2023 GMT
        Subject: CN=9D9E556D76F2AD1D3622D0C0EE1D064C1FA9E125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:ca:df:25:2f:c8:80:54:e1:03:f3:26:56:
                    17:86:a1:e9:17:db:06:bf:44:b2:76:40:34:10:e6:
                    ce:61:8d:98:46:44:99:11:2e:94:02:e1:ed:a6:9c:
                    ca:9b:8d:45:79:f7:ab:d2:db:a8:64:ca:84:0f:e4:
                    68:32:99:82:30:f8:23:09:39:bd:3e:9b:6b:08:38:
                    c0:92:38:ca:14:2e:e3:3e:33:51:af:ff:46:c9:42:
                    c5:a6:01:cf:1b:4e:71:32:33:a4:fd:1a:68:5c:5b:
                    f9:5c:e5:de:fe:9c:c0:19:12:bb:e3:0d:c5:dc:5e:
                    98:9a:6e:1e:69:cb:34:d5:1e:7b:09:9d:03:29:6c:
                    91:d4:05:92:3a:3a:bc:35:14:0b:3e:cc:52:77:d7:
                    67:a1:c2:0a:e7:e1:af:45:b1:16:df:4d:09:83:2d:
                    b1:2c:6a:03:4f:f0:40:93:2a:49:9e:1e:7a:9c:b1:
                    12:d6:d7:26:71:2a:11:79:77:4c:95:73:f0:c0:41:
                    c9:ae:0c:e7:55:8c:ba:70:cb:f1:b9:8f:3c:84:63:
                    3b:a8:0e:b4:93:61:98:00:c7:f9:0b:da:75:78:90:
                    bb:69:4d:87:c6:b5:c5:9e:95:7e:5a:30:64:a1:e7:
                    40:d8:5a:be:02:3d:6d:ef:fa:66:f1:b9:b9:49:56:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9E:55:6D:76:F2:AD:1D:36:22:D0:C0:EE:1D:06:4C:1F:A9:E1:25
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36382e302f32342d3234203d3e20323037313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:0f:96:02:6e:5b:2c:c2:8f:9a:99:37:a3:8b:e0:8a:82:6a:
         89:a3:d4:37:67:8c:a4:6f:9f:38:0b:20:76:80:61:35:70:4f:
         c6:77:cb:5d:be:d9:39:e1:ff:96:89:0d:05:41:c6:09:62:78:
         af:5d:ca:73:ab:8d:14:e5:23:70:14:c1:39:11:97:9d:5d:1b:
         3b:b3:ce:99:91:f7:c3:dc:f1:45:61:34:b2:9a:e7:5c:e6:03:
         ad:5f:08:66:f0:3b:34:92:a1:2c:a5:2b:55:cd:74:9b:35:e2:
         c8:e9:09:78:64:c3:3e:1f:23:17:51:c6:d5:2b:f8:e9:7d:f3:
         a7:62:e4:b8:b7:8c:ba:ae:d9:e3:72:61:21:62:83:80:c0:dd:
         a5:55:2e:80:22:cb:a1:29:a7:17:b6:8f:ea:b5:98:91:fa:6b:
         6e:20:06:d0:7e:6c:75:51:d3:40:f7:ca:eb:ad:8d:bb:6d:47:
         80:01:97:85:b6:92:f9:a8:be:37:48:06:64:d4:dc:89:22:5e:
         e3:af:3d:a2:a7:00:c7:fc:9e:ee:90:87:e5:34:30:f5:4f:99:
         a9:45:ed:98:96:5f:b2:af:37:50:41:80:4b:39:78:04:0c:2c:
         6c:5d:7e:ee:dc:57:f4:4c:46:c4:5e:9c:bd:34:d9:95:31:b4:
         48:6a:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org