Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203433343331.roa
File:                     3138352e3234312e3135302e302f32342d3234203d3e203433343331.roa (raw, json)
Hash identifier:          J+Ozic0EKhpJHPQnF5cMp160SxmIBwwwNjnNGhDusLU=
Subject key identifier:   9D:BE:64:5F:74:E7:32:C1:39:94:56:F2:05:CB:59:B5:65:3A:8E:8E
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6DF0AF7C4590347E8EDC8E0E00AC9C1D910A6F78
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203433343331.roa
Signing time:             Fri 02 Sep 2022 18:35:17 +0000
ROA not before:           Fri 02 Sep 2022 18:30:17 +0000
ROA not after:            Fri 01 Sep 2023 18:35:17 +0000
asID:                     43431
IP address blocks:        185.241.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f0:af:7c:45:90:34:7e:8e:dc:8e:0e:00:ac:9c:1d:91:0a:6f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Sep  2 18:30:17 2022 GMT
            Not After : Sep  1 18:35:17 2023 GMT
        Subject: CN=9DBE645F74E732C1399456F205CB59B5653A8E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:07:10:32:52:de:2e:a6:ac:c1:17:da:86:
                    ea:bb:01:20:d2:bc:c4:a0:18:80:e2:5f:6f:d7:1b:
                    99:8b:ca:38:f4:48:9d:1c:91:8b:33:a1:84:15:69:
                    a2:60:a1:72:e7:b2:f4:f2:84:35:97:95:4f:ff:f1:
                    6a:d5:70:d7:d6:82:13:ed:7e:8a:b1:d5:d0:4d:05:
                    00:b5:cf:12:30:4b:d3:27:e0:c3:c5:2b:7a:d9:a5:
                    28:86:ba:e3:c4:d2:dc:60:7d:ab:48:f8:76:d8:74:
                    e7:e8:10:ea:c1:0f:4b:e2:2a:fb:e7:92:8d:0e:35:
                    18:86:5c:c7:46:27:97:ad:e8:b7:b4:42:38:15:40:
                    2d:9f:21:e8:06:7c:12:a3:05:af:a3:45:a1:9b:02:
                    fd:38:0a:c9:80:41:49:89:ca:be:f3:f7:4f:6a:4e:
                    4e:e2:7e:0a:4b:1b:65:c4:00:3c:63:2b:35:ba:07:
                    77:ed:d3:27:88:d9:0b:d4:84:23:12:71:3f:55:8f:
                    0d:a0:85:a1:9a:4c:c6:ff:7a:40:63:71:a1:a6:47:
                    12:cc:e1:6f:d6:f1:4b:77:ad:d7:26:ba:0b:d8:48:
                    4e:0d:9e:f9:7b:b0:e3:4f:85:82:48:47:3d:a6:f7:
                    d0:a3:fc:41:10:26:83:19:91:e9:00:14:81:bc:5f:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BE:64:5F:74:E7:32:C1:39:94:56:F2:05:CB:59:B5:65:3A:8E:8E
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203433343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:04:4a:e9:cf:3b:e0:32:89:7f:62:79:1f:c0:ba:78:22:da:
         9b:3a:44:51:c3:ee:aa:44:32:2b:9e:70:4e:d7:49:00:cd:03:
         d7:b1:a0:2b:9d:c5:58:41:da:86:e8:76:83:96:4b:fa:9b:24:
         96:10:b4:b7:93:ad:f9:9e:78:6d:75:80:22:9d:39:df:7c:39:
         8b:d0:05:22:cb:62:61:8d:70:49:8c:34:a8:9f:cd:3e:02:e0:
         2a:38:e0:a3:04:69:65:85:82:14:b3:8d:c0:53:ba:99:3a:3b:
         e8:75:91:3f:0f:ca:f7:09:5d:88:e6:5e:84:2f:d3:31:8f:e6:
         f2:3d:e4:3c:bd:af:43:f3:71:aa:27:89:6c:0a:1a:93:be:7e:
         33:b6:35:0b:73:c3:70:55:d1:a3:40:13:98:b6:28:43:f4:aa:
         6a:d1:05:f7:10:65:cf:4d:12:8e:90:76:7e:ff:46:24:a2:10:
         29:c6:52:68:88:38:9b:dc:9d:97:2a:ed:cf:0b:ff:62:a2:e3:
         8f:ec:ae:ed:24:78:c7:08:6d:74:39:5c:ce:4c:f1:6d:cc:1c:
         bc:e3:24:d7:4a:e4:ae:db:fd:35:25:f0:be:f9:7a:47:ed:f8:
         41:8d:aa:c7:86:e1:25:09:07:50:96:dc:b7:53:43:13:a9:01:
         7e:89:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org