Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33372e302f32342d3234203d3e203233343730.roa
File:                     3138352e3235302e33372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          f5qZE2Y5et59bZuO4nhqM5IwK7mnpmyz3JDdIkZc5Mk=
Subject key identifier:   B0:73:62:E1:A7:57:0B:B6:DF:8E:65:E2:BF:94:8A:2A:1C:FA:63:D2
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1A4C32FFE50AC65ECD8846C79400DC26D8E5D45E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33372e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 28 Jun 2022 04:40:22 +0000
ROA not before:           Tue 28 Jun 2022 04:35:22 +0000
ROA not after:            Tue 27 Jun 2023 04:40:22 +0000
asID:                     23470
IP address blocks:        185.250.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4c:32:ff:e5:0a:c6:5e:cd:88:46:c7:94:00:dc:26:d8:e5:d4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:22 2022 GMT
            Not After : Jun 27 04:40:22 2023 GMT
        Subject: CN=B07362E1A7570BB6DF8E65E2BF948A2A1CFA63D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:d8:10:54:6d:f1:a7:1a:22:f0:87:07:60:
                    3a:04:f4:ca:e8:19:85:72:ba:19:68:1e:57:4f:b2:
                    fe:3b:1e:79:f9:0b:be:9e:45:ae:6e:d4:01:4f:49:
                    1b:6a:37:f4:0b:f4:50:44:5b:91:70:0e:00:70:40:
                    c0:fa:11:47:e2:f5:82:1a:6b:97:51:8f:56:15:0a:
                    d5:7d:c0:08:52:32:9c:95:8b:07:40:70:28:de:c3:
                    7f:de:12:8d:70:3d:a8:41:90:01:11:06:9d:ae:7c:
                    3c:e8:37:85:7a:d4:bf:92:64:4d:20:4f:15:41:c6:
                    7f:0b:23:7d:3b:5f:e8:34:bf:18:8a:17:19:b4:25:
                    ce:72:ff:b7:50:59:22:b9:7c:0c:fa:c1:d2:5e:b7:
                    8b:72:9e:40:75:82:ef:6d:24:84:45:cc:66:43:8e:
                    cc:e5:a5:e7:8f:92:71:8a:55:d8:80:d6:62:e9:99:
                    52:d4:98:cc:fc:f9:ab:01:45:8d:aa:f8:40:ff:d2:
                    6c:1a:fa:4d:b9:36:c8:e4:38:c3:b1:79:1e:32:59:
                    77:d8:9c:3c:8a:5c:77:30:ef:e9:b0:cc:62:11:82:
                    95:90:3b:29:ad:21:c8:5b:73:cb:3e:9d:c1:a2:53:
                    53:71:47:94:75:a1:e7:0f:85:bb:f0:ee:de:be:73:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:73:62:E1:A7:57:0B:B6:DF:8E:65:E2:BF:94:8A:2A:1C:FA:63:D2
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:40:37:ad:44:d0:25:20:ec:83:28:41:95:be:c3:87:55:54:
         70:e0:92:17:9b:10:de:22:21:9c:96:3f:b3:2b:22:d9:ba:0c:
         b9:4e:71:a6:14:47:b0:6a:fc:ee:c4:a8:fc:dc:76:6a:87:12:
         0c:73:c1:b3:5e:08:8d:fb:5f:3c:e7:91:31:e8:70:25:bd:6f:
         3e:1d:8a:b8:61:57:c9:bc:6b:49:0e:f4:00:f9:7d:d0:5e:de:
         20:a6:f9:6a:bb:ec:39:8f:d6:32:82:b6:ae:ae:63:4a:fa:04:
         a0:b8:01:aa:3b:47:4e:00:87:18:94:58:ea:7a:8b:9e:4b:2f:
         3f:ba:35:43:1a:29:52:b3:51:0c:5b:d2:a6:6b:bf:50:69:86:
         22:fd:2b:10:f4:35:c2:54:9b:12:b4:fc:33:69:75:11:e5:3a:
         14:b4:e3:4c:0b:42:ec:6b:e8:92:86:c8:26:ef:28:22:b2:a6:
         65:ba:25:88:88:88:6c:df:9e:88:17:d9:4e:d3:c7:77:02:b6:
         ca:77:84:45:9b:1d:f9:44:29:04:df:b9:fe:02:01:7a:44:62:
         95:bd:e9:ef:04:59:53:26:63:ee:1a:28:07:72:e4:51:d5:f2:
         25:05:57:11:e9:10:75:fb:f6:87:7f:76:13:d7:76:fe:76:ae:
         1b:66:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org