Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33372e302f32342d3234203d3e203630373231.roa
File:                     3138352e3235302e33372e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          3/YzOoZ8SoHA7JNOum0GMk62ZQdY5b6G190Tkw9EkQg=
Subject key identifier:   85:1D:3A:F8:85:BB:CE:7E:74:B8:4B:6E:EE:74:B1:A7:93:78:9B:37
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4888670206616A7944376FAB4975DBA7C54632E7
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33372e302f32342d3234203d3e203630373231.roa
Signing time:             Tue 28 Jun 2022 04:40:30 +0000
ROA not before:           Tue 28 Jun 2022 04:35:30 +0000
ROA not after:            Tue 27 Jun 2023 04:40:30 +0000
asID:                     60721
IP address blocks:        185.250.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:88:67:02:06:61:6a:79:44:37:6f:ab:49:75:db:a7:c5:46:32:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:30 2022 GMT
            Not After : Jun 27 04:40:30 2023 GMT
        Subject: CN=851D3AF885BBCE7E74B84B6EEE74B1A793789B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:89:85:77:57:d6:c1:a6:1a:9c:c8:8d:78:
                    7a:f4:d4:03:f7:83:16:53:ee:36:ae:f7:6a:c4:95:
                    0a:5d:3e:9a:63:45:c9:b0:78:3d:12:0a:c9:12:1d:
                    00:be:39:a9:7e:2d:f0:f0:4a:05:e5:7c:2d:da:cc:
                    7b:5e:63:fd:ca:df:63:36:57:1c:66:80:0e:fd:b3:
                    77:23:65:9e:85:8e:2a:5b:1b:a9:1f:f4:92:87:4d:
                    75:43:24:3c:f3:95:a5:59:22:52:26:e1:86:96:91:
                    07:57:57:f7:26:d8:28:5a:25:59:1e:18:be:d4:70:
                    f1:d6:31:0b:1a:60:29:2f:75:a3:74:85:52:6d:57:
                    4e:1c:94:66:a2:1b:e8:02:80:ca:fc:c1:1c:97:0d:
                    f4:7f:b9:59:31:33:e7:39:71:69:61:f0:4d:c4:0f:
                    dc:1e:37:e5:66:69:56:81:f0:fd:99:94:b3:91:1c:
                    1c:ac:ba:3c:ed:93:03:cc:14:0d:ba:63:d8:df:b0:
                    b1:ba:5c:cc:bd:3d:6d:18:e4:1b:fb:46:52:83:fb:
                    db:3b:42:53:f6:c8:73:bb:37:e4:09:51:be:ab:ef:
                    55:d9:3d:b9:57:9e:4c:26:a5:c1:ec:eb:6f:4f:58:
                    3e:ba:7a:01:44:a7:f7:02:63:71:51:2e:f6:d3:e1:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1D:3A:F8:85:BB:CE:7E:74:B8:4B:6E:EE:74:B1:A7:93:78:9B:37
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33372e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ce:86:45:59:05:40:50:79:89:cc:6b:a1:a9:42:a8:44:56:
         2c:9b:5c:c7:63:af:7d:4b:e6:22:7c:e5:91:a3:23:28:fe:cb:
         26:a9:05:1b:4b:e4:c6:d5:b0:75:6d:ee:65:35:a5:32:34:8d:
         91:da:0f:db:32:c2:1e:89:4a:73:4d:e8:21:cf:24:e6:08:5a:
         77:ec:cb:82:47:b9:7a:e8:60:dc:7e:11:a4:54:fc:2e:03:05:
         8a:bb:b8:2c:11:cd:56:e5:54:a1:a0:7c:6d:f8:54:b3:b5:22:
         dc:2c:5a:d7:e9:29:6b:dd:ed:6d:00:2d:1f:45:ae:57:3f:e0:
         35:8f:2e:e5:a6:0d:01:5a:30:ab:ae:72:77:a3:4b:ca:ba:a6:
         e5:fd:5a:4b:96:49:d0:eb:d8:b7:2a:09:58:34:f5:df:2d:22:
         51:5b:52:0e:d8:ca:9e:85:a8:07:cd:49:f1:37:bf:9e:c1:b9:
         15:3a:ad:53:3a:cb:03:9a:9a:1c:83:3c:d3:b8:1e:bb:65:47:
         10:69:93:ac:12:95:53:66:38:de:b9:fd:ab:df:d1:1f:64:dd:
         a2:48:64:4d:32:76:44:f1:92:a9:3e:5f:e9:f8:fb:d6:dd:5b:
         9c:73:8b:bc:01:5e:50:34:04:9a:22:11:24:fb:a7:99:61:ca:
         23:cf:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org