Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32342d3234203d3e2037373234.roa
File:                     3138352e3234312e3134382e302f32342d3234203d3e2037373234.roa (raw, json)
Hash identifier:          68jbKS76XOqbx4FvHqXgRN4qqRnppjcvUjBs6GexRro=
Subject key identifier:   28:1F:80:38:76:89:79:79:03:17:67:CA:AF:AB:F6:98:E4:6B:21:11
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       137DD8AE51A1113E01C1CF92D61E431CF86AC1DA
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32342d3234203d3e2037373234.roa
Signing time:             Mon 22 Feb 2021 10:57:47 +0000
ROA not before:           Mon 22 Feb 2021 10:52:47 +0000
ROA not after:            Mon 21 Feb 2022 10:57:47 +0000
asID:                     7724
IP address blocks:        185.241.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7d:d8:ae:51:a1:11:3e:01:c1:cf:92:d6:1e:43:1c:f8:6a:c1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 22 10:52:47 2021 GMT
            Not After : Feb 21 10:57:47 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:d6:1a:bd:23:d5:bf:f0:e2:89:32:3d:bf:
                    13:0a:5c:ed:d5:6c:21:d0:2f:0d:9b:10:f0:0a:d7:
                    c6:40:8e:79:b5:be:f5:e2:51:d7:83:bd:af:e5:e2:
                    70:11:d3:7a:6e:57:a7:68:55:7d:81:52:3a:b9:29:
                    7f:04:83:0a:dd:4c:96:f7:7b:f6:79:94:24:bf:14:
                    c9:83:e1:f2:eb:4a:50:9e:cb:92:06:c7:f4:21:eb:
                    11:f2:d9:80:bb:aa:3a:d2:cc:62:dd:42:6c:fe:5c:
                    10:33:37:2d:86:69:27:6a:c1:c9:4c:9b:3d:93:5d:
                    de:fe:f9:23:48:3a:2d:69:39:6b:12:35:51:28:ec:
                    47:75:f0:72:04:be:e5:50:1f:0c:d8:77:47:7e:b3:
                    ce:07:c9:8e:00:66:c5:a5:c1:c6:a7:77:4b:73:bf:
                    09:36:5c:ec:4f:cc:da:03:24:79:e4:ba:14:1f:33:
                    2a:69:a7:ca:2a:27:d6:55:36:46:42:cf:77:0a:5e:
                    04:75:36:a3:57:ac:d8:8f:14:99:13:70:4e:0d:0a:
                    8b:23:3d:c4:27:3d:20:25:f6:a6:ed:f5:ac:f4:b2:
                    08:71:a0:88:dc:e9:29:4f:11:20:65:61:f4:c0:37:
                    77:ea:f7:4a:09:47:cc:f1:70:cc:8f:5f:77:3c:5c:
                    2f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1F:80:38:76:89:79:79:03:17:67:CA:AF:AB:F6:98:E4:6B:21:11
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32342d3234203d3e2037373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:4b:2d:0e:4e:37:03:de:e8:3f:79:e7:45:25:53:98:a8:11:
         07:a1:aa:3f:25:78:87:0d:d6:05:90:4a:3a:35:58:b9:32:06:
         a5:0f:36:8f:f2:54:70:fd:4d:87:d3:53:8d:5c:08:2a:10:0e:
         8b:fe:6d:8b:8a:d4:ba:96:20:92:3f:48:5d:47:9b:53:38:c7:
         00:8a:cc:bb:f6:b9:25:ad:77:06:e1:b2:c5:b9:81:0d:80:48:
         43:0e:3f:88:16:12:e0:78:7b:82:ae:18:d1:7f:dd:89:c4:c9:
         bc:38:54:8f:00:e6:f8:ce:09:4a:4b:a4:89:c6:4f:b6:1a:61:
         56:27:49:7c:d2:2a:b8:4f:32:44:d5:6f:7e:ec:a0:71:6f:fc:
         91:8e:ed:bf:e1:1b:56:c6:8d:e7:a7:2f:8b:b1:17:e6:89:4c:
         92:4a:6e:ba:b2:bf:a6:cb:ad:d0:6b:43:39:a1:61:7c:ae:27:
         7c:10:70:55:1f:84:f2:5c:1b:96:00:b1:16:ae:ad:9e:a6:c1:
         17:cf:04:95:c4:0b:3e:9f:13:32:ec:60:57:90:d3:e1:86:ce:
         cd:83:60:83:1b:f5:05:7e:bb:1b:b1:3a:47:c6:44:89:12:95:
         40:1a:68:9a:a8:75:90:57:2b:0e:8d:76:e1:dc:4a:2f:3d:a2:
         45:c2:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org