Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33382e302f32342d3234203d3e203630373231.roa
File:                     3138352e3235302e33382e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          mRe3VVaZf3qGCsPHeeLwQRoSAfqR4IrhN6/P14DJRQQ=
Subject key identifier:   78:76:33:47:A7:B9:7F:AD:1C:8A:27:B2:DB:C5:D4:37:68:50:8D:F9
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1FBF5F6CA1EF53C27ED5CAEC20862CD6CF479D66
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33382e302f32342d3234203d3e203630373231.roa
Signing time:             Tue 28 Jun 2022 04:40:29 +0000
ROA not before:           Tue 28 Jun 2022 04:35:29 +0000
ROA not after:            Tue 27 Jun 2023 04:40:29 +0000
asID:                     60721
IP address blocks:        185.250.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bf:5f:6c:a1:ef:53:c2:7e:d5:ca:ec:20:86:2c:d6:cf:47:9d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jun 28 04:35:29 2022 GMT
            Not After : Jun 27 04:40:29 2023 GMT
        Subject: CN=78763347A7B97FAD1C8A27B2DBC5D43768508DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:d5:c6:98:da:b3:dd:3e:34:c7:30:66:66:
                    49:fa:6e:8f:28:7a:66:5e:8e:77:01:40:a1:52:6d:
                    e5:5c:07:39:e2:40:fe:51:cf:82:5f:01:25:fe:9c:
                    c4:dc:2c:ba:3f:0b:52:65:66:c4:38:81:d8:f8:88:
                    47:ef:f3:3b:36:1f:52:b4:aa:4d:2b:8b:ad:27:56:
                    d8:dc:74:a0:94:d5:8b:25:d0:2b:e4:eb:d6:ec:84:
                    aa:c7:be:80:26:44:18:fb:53:b7:39:f0:75:94:9a:
                    63:d0:60:42:be:63:0c:a7:cc:c3:a7:9e:e3:fb:5b:
                    52:c4:bc:8f:c8:e6:c7:3e:c9:4d:b1:d9:9c:c4:13:
                    a4:e8:74:54:d4:78:0d:91:90:20:38:72:9c:d3:d5:
                    7f:98:bc:8b:8f:75:43:e6:76:34:aa:3d:97:fa:b3:
                    f9:94:3c:b9:39:96:89:4c:ce:5f:f9:0d:5e:e2:53:
                    3b:26:5c:38:e9:e1:98:00:b0:f1:4c:84:73:07:62:
                    e9:7b:e8:88:70:e1:bc:8a:a6:d7:c0:ab:21:ee:09:
                    dc:50:0a:24:a2:1e:d5:56:2d:72:a6:d6:b1:4d:ba:
                    7a:d9:57:71:fa:17:de:b7:5a:82:16:08:cf:4a:38:
                    48:ee:07:04:83:9c:07:eb:ea:ae:2d:ea:0d:69:d0:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:76:33:47:A7:B9:7F:AD:1C:8A:27:B2:DB:C5:D4:37:68:50:8D:F9
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33382e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:df:89:99:c6:34:d8:83:9c:e2:2f:ee:8e:f5:30:21:6d:e6:
         bf:f3:c4:59:9f:17:82:f6:a7:78:a9:73:69:6e:32:03:84:72:
         96:6f:e4:f2:b1:18:2e:09:d8:58:3c:b0:ee:ed:de:8c:fa:11:
         ee:ce:c9:99:3d:87:c9:71:e3:27:2d:9c:7a:a0:aa:26:28:3d:
         65:5b:94:ba:4d:82:56:54:04:f5:5c:b7:65:85:01:96:98:08:
         e2:3a:09:53:3f:29:11:36:77:bb:13:e8:84:63:a1:36:95:6b:
         19:dc:8b:3c:f9:f8:1c:80:9c:f8:ad:9e:54:da:f6:9f:b8:2f:
         7c:3e:50:e1:1f:3c:f0:3f:c2:8d:7f:e2:d6:f8:c7:ca:ee:16:
         f1:d6:33:55:fe:c4:57:9b:91:22:93:31:3a:bd:a8:f0:31:65:
         1a:53:e4:51:76:8f:c5:1d:06:4d:22:ae:2d:16:aa:a8:00:c1:
         51:bb:69:48:20:65:61:41:f1:50:ce:6f:82:ae:bb:c5:d6:42:
         c8:e6:c7:36:61:d1:be:b3:61:4e:11:96:56:86:45:88:c3:cc:
         b7:7f:31:a8:2b:12:bd:87:1f:0b:ff:09:c9:87:78:41:37:d8:
         fc:d0:c0:26:0c:dc:d0:ee:02:4d:ca:18:24:8a:b9:41:7e:be:
         91:4f:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org