Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203531373635.roa
File:                     3138352e3234312e3135302e302f32342d3234203d3e203531373635.roa (raw, json)
Hash identifier:          vSAQ0wcr1WDx2+U8nRRUKfZ+NKROp+2Lisl9MGYA4KE=
Subject key identifier:   AB:73:AB:2D:46:88:01:98:2A:66:EC:8C:5C:32:34:55:47:8E:53:09
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1EE9F74B479F084FDC2417B8BCF93735115A28C0
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203531373635.roa
Signing time:             Sat 22 Oct 2022 04:33:13 +0000
ROA not before:           Sat 22 Oct 2022 04:28:13 +0000
ROA not after:            Sat 21 Oct 2023 04:33:13 +0000
asID:                     51765
IP address blocks:        185.241.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e9:f7:4b:47:9f:08:4f:dc:24:17:b8:bc:f9:37:35:11:5a:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:13 2022 GMT
            Not After : Oct 21 04:33:13 2023 GMT
        Subject: CN=AB73AB2D468801982A66EC8C5C323455478E5309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:67:5e:f8:23:54:81:16:a1:64:7e:b3:8f:
                    1f:2d:b9:73:c2:93:5c:e3:5e:7a:71:e6:1a:a4:d2:
                    05:33:e3:15:14:ed:07:0e:46:10:43:6f:aa:10:c6:
                    a4:dd:ac:13:7a:5f:86:aa:3c:0b:10:f6:0f:27:b4:
                    a6:50:44:d8:28:ca:a3:a4:50:fc:1d:36:4d:ed:4c:
                    24:71:69:fe:27:18:64:b8:12:71:d6:83:c6:ad:d5:
                    6b:04:3d:0e:fc:d3:ee:ac:9c:ab:5a:68:ef:4d:b4:
                    61:69:6c:cc:aa:81:71:35:6a:2a:54:af:86:13:e7:
                    ee:da:7b:b0:74:2c:f1:63:42:b3:6d:e7:90:ff:e4:
                    57:2e:67:1f:7f:50:44:3f:f7:46:26:8b:22:9d:2b:
                    76:40:34:6f:a2:d9:35:fe:b5:29:18:8f:57:0d:d7:
                    c6:53:2e:12:ed:f4:45:cf:73:18:89:e6:50:c1:91:
                    4e:91:e3:16:3c:88:6f:61:34:c1:87:f1:7a:62:e4:
                    51:09:f3:2b:0e:17:a0:41:76:4b:38:43:7d:8c:e1:
                    bc:fe:39:29:49:3a:1f:1e:c3:44:53:13:9b:e0:ee:
                    fa:72:64:ac:e6:c7:b8:8e:18:d3:8d:26:58:6f:62:
                    8f:0f:ff:f7:4c:0e:b7:fc:ef:03:cb:bf:11:04:9a:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:73:AB:2D:46:88:01:98:2A:66:EC:8C:5C:32:34:55:47:8E:53:09
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32342d3234203d3e203531373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:91:f1:5e:12:c7:ed:91:9a:33:7e:0e:d6:97:83:2d:4e:80:
         72:4d:8c:bd:c3:70:24:2a:16:a2:dd:a5:b4:52:af:51:ab:ae:
         7d:b8:2b:b7:db:7a:20:af:90:8e:94:1a:ab:7a:a9:96:87:06:
         88:86:76:42:75:86:db:b5:07:e5:51:65:b8:70:97:f9:b0:1f:
         af:be:71:e0:66:e7:4c:65:18:6d:0e:47:20:6a:2c:2f:30:d1:
         47:2c:62:c1:8a:2e:f0:01:e4:74:46:fd:54:cb:da:b2:dc:07:
         06:e4:ac:81:d6:39:c3:65:4a:4a:d9:cb:2e:81:c3:af:f2:6e:
         b4:35:df:6b:6a:4e:41:17:57:92:20:10:b8:52:b6:f8:69:46:
         39:b8:a8:4c:5d:4d:d7:e7:b8:ef:10:17:b7:62:e6:d3:a2:3e:
         e4:41:6f:67:c7:23:f7:ec:c0:a7:df:0d:25:5e:86:03:0c:88:
         3c:99:47:42:8d:c5:5d:b6:0c:91:0e:ce:30:60:b0:3d:73:c8:
         bc:85:43:0c:1e:86:81:e8:e2:65:d3:26:61:6b:ab:92:0b:a5:
         7a:7c:97:6a:47:62:f0:1d:d4:e4:e9:1b:a9:6f:6c:be:6a:d7:
         0e:7b:b8:3c:73:c8:95:51:ea:3e:67:d3:b7:6b:3c:13:1f:16:
         13:fe:1f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org