Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
File:                     38352e3230382e35302e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          hAAxW8wo0iDE7dYquUJP4tt3NI0eaQO9eUkCuxGCRJI=
Subject key identifier:   33:76:25:A9:DE:38:38:A1:E0:1E:1D:1B:65:0F:DD:AF:E6:1D:62:BC
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       638DFD511A5ACF42EC468121642930C49FF78816
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
Signing time:             Sat 22 Oct 2022 04:33:21 +0000
ROA not before:           Sat 22 Oct 2022 04:28:21 +0000
ROA not after:            Sat 21 Oct 2023 04:33:21 +0000
asID:                     43260
IP address blocks:        85.208.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8d:fd:51:1a:5a:cf:42:ec:46:81:21:64:29:30:c4:9f:f7:88:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:21 2022 GMT
            Not After : Oct 21 04:33:21 2023 GMT
        Subject: CN=337625A9DE3838A1E01E1D1B650FDDAFE61D62BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:f7:34:54:88:b2:f3:e8:04:fb:f7:e9:a2:
                    ed:27:04:ca:87:3e:6a:8a:2a:6c:cf:87:a2:e3:e4:
                    98:89:56:14:97:a0:dd:b8:6f:6c:b0:b2:29:91:0a:
                    eb:c9:dc:2b:67:85:16:79:7b:ba:7b:63:97:5f:31:
                    fb:12:14:05:d8:b4:e3:69:fc:f0:9d:c0:f7:e5:b3:
                    77:aa:52:1f:5c:ab:df:b1:a8:12:78:fe:ff:a7:d7:
                    61:51:69:1f:68:8e:d0:84:90:a4:8d:07:5a:3b:c5:
                    56:c0:75:0a:94:31:82:9f:4a:35:99:a7:df:0e:65:
                    58:a4:32:ee:df:16:00:03:9c:6d:bf:90:27:6d:6d:
                    91:50:7f:0d:cc:f1:ba:cb:b5:57:2a:75:53:8c:6d:
                    0a:11:e0:33:28:11:3c:9e:9b:fc:ef:ed:0e:91:cb:
                    de:3b:10:bf:b0:89:a4:5f:b2:12:a8:1d:df:b3:c3:
                    1b:5e:85:9d:b0:e3:37:14:e7:64:fa:88:b6:1d:ba:
                    a5:48:42:4a:2c:fa:d3:2a:92:4f:80:f8:ae:5e:af:
                    d7:13:9a:a7:9d:5b:9f:10:cd:17:d1:4d:e6:f8:25:
                    df:20:f9:1e:65:9b:31:9a:c2:f1:27:f1:10:02:c1:
                    53:f0:c9:51:22:aa:d9:6d:bc:23:82:a5:69:29:e1:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:76:25:A9:DE:38:38:A1:E0:1E:1D:1B:65:0F:DD:AF:E6:1D:62:BC
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:72:4e:db:1a:e0:b7:3e:7d:d1:34:34:0c:1e:ee:40:ec:fe:
         2b:b5:19:b4:75:41:1d:f4:19:cd:c7:32:fa:a7:1a:d8:66:a5:
         19:70:66:9c:24:3b:1e:ff:9a:2e:07:81:a7:0b:b5:8e:d6:f3:
         ea:46:08:40:a1:73:d7:69:80:f4:c3:8e:04:6b:1d:bb:09:35:
         8e:9a:b0:fc:d1:02:8c:e3:c1:a8:33:39:da:a6:74:ba:e1:25:
         76:c7:da:92:fc:a3:93:31:dd:3e:35:58:b9:f4:91:be:5d:51:
         f3:45:08:4c:59:86:9f:24:28:5a:2f:31:18:02:e4:a6:6d:aa:
         d7:ca:eb:71:55:ed:e8:f5:02:cf:ad:1b:f8:22:b4:10:df:9c:
         e7:9e:9b:d7:e5:df:45:c5:58:c1:9c:d3:7c:89:d2:a9:bc:52:
         23:af:5b:4e:50:f8:09:12:c4:17:a2:ac:b3:7b:db:68:62:78:
         8b:14:51:ed:4f:64:1c:8e:cc:2f:5a:d9:71:b6:c7:45:5e:15:
         ed:1b:39:0c:1e:7d:1c:cb:f3:86:96:92:34:e4:c5:15:c1:20:
         ab:84:69:5b:af:f0:e5:44:62:ec:6c:f9:69:fd:b6:3e:19:6d:
         c5:8e:df:02:82:5a:35:c8:de:f1:b7:d2:7b:1e:dc:34:e8:48:
         2d:9e:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:57 2024 by rpki-client on console-ams.rpki-client.org