Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa
File:                     3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          JRlUFwwEEXNGNmuL8Qc3tH1G9AmhrccK+Wgu8kWsGcY=
Subject key identifier:   7F:20:6B:AC:16:9E:E0:E4:B8:41:DA:56:63:9B:8A:D9:34:F4:88:C2
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       730665329BF7C373885039DACF8E4ACB12BC5792
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:20 +0000
ROA not before:           Sat 22 Oct 2022 04:28:20 +0000
ROA not after:            Sat 21 Oct 2023 04:33:20 +0000
asID:                     51167
IP address blocks:        185.239.211.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:06:65:32:9b:f7:c3:73:88:50:39:da:cf:8e:4a:cb:12:bc:57:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:20 2022 GMT
            Not After : Oct 21 04:33:20 2023 GMT
        Subject: CN=7F206BAC169EE0E4B841DA56639B8AD934F488C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:57:61:3e:0a:bb:67:84:3d:9f:47:1b:3b:
                    fd:89:38:37:4c:a5:c0:54:56:73:99:9d:fc:e7:a4:
                    53:c3:15:5b:43:4d:57:44:4c:68:20:f1:bd:d1:79:
                    82:f9:d8:ff:00:fd:bb:fc:cc:40:92:ae:73:47:1a:
                    63:24:cf:eb:63:a8:04:a8:74:b4:36:ca:87:58:08:
                    db:3f:ae:a8:ee:f9:65:91:cf:c0:a3:37:5a:52:ed:
                    8b:87:61:c4:cc:55:8e:2d:d9:39:22:05:d1:c2:4e:
                    84:cc:8d:76:f8:fd:7e:2e:bb:49:a1:0b:55:aa:7a:
                    ac:a5:2e:d8:b0:c9:53:d5:e3:1d:49:e4:7b:c9:c1:
                    7f:90:d2:d3:a5:a6:e8:64:eb:1b:6d:70:8d:2d:9c:
                    44:e8:47:07:7a:6f:1f:68:b9:6e:e5:9a:e6:1d:f1:
                    b5:4d:e2:52:2e:c2:58:69:c0:7c:a3:ca:6d:26:f1:
                    c0:85:59:c4:33:10:8c:be:36:e1:e8:cb:86:8b:1b:
                    90:92:00:c8:a4:28:1b:00:14:55:ff:e4:f4:25:8f:
                    77:7b:e2:98:9f:f4:5e:3f:d8:cf:00:7f:62:ad:7f:
                    95:e1:1b:93:68:a3:cf:0a:40:3e:2e:76:75:d2:52:
                    5b:33:67:47:50:3d:11:a6:09:87:af:af:22:73:f6:
                    55:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:20:6B:AC:16:9E:E0:E4:B8:41:DA:56:63:9B:8A:D9:34:F4:88:C2
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:1f:cf:6f:6e:d8:1b:8a:ee:a9:29:76:e6:b2:90:73:af:b1:
         b2:8b:2f:97:7f:68:51:24:92:0a:88:62:8d:f4:e8:40:2e:21:
         95:63:60:62:3d:84:f7:9d:fb:19:71:66:54:46:56:bb:91:17:
         fc:cd:69:01:79:9c:0f:d4:a0:13:1c:4d:ec:61:be:19:c3:f1:
         5c:2b:37:bf:2f:f1:23:99:78:d4:2a:82:7a:bd:3e:59:cd:99:
         18:19:a7:db:26:87:64:15:ca:88:8d:dc:ed:d5:b1:09:24:b8:
         4d:38:9e:f6:32:4f:29:e3:30:3d:de:ed:c7:98:48:7e:19:20:
         8c:cb:cd:bd:0e:ee:0e:ae:af:57:b0:18:8d:d3:88:3c:54:d3:
         78:cb:d9:bf:d6:83:49:c1:d0:28:fc:e6:3c:75:d5:22:eb:cb:
         b7:c1:a4:5b:fb:73:2f:ef:ac:25:7c:86:f7:d2:6c:73:8d:93:
         9f:54:25:12:fc:d8:1a:47:84:31:77:95:f6:80:39:35:60:bb:
         dd:e2:65:a6:61:96:59:df:97:20:5d:55:bf:09:3c:af:6a:23:
         50:83:db:40:ef:e5:0e:b2:b5:37:32:7a:59:ee:0e:4c:a4:91:
         48:a9:f8:9d:fd:27:0c:5b:b8:40:eb:90:22:34:1e:21:b2:0d:
         f5:27:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org