Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3234203d3e20323132303034.roa
File:                     38352e3230382e35312e302f32342d3234203d3e20323132303034.roa (raw, json)
Hash identifier:          QEy1QZSvey7OwZTl9f/AiC8lGC64747dlkRDPZIR/lE=
Subject key identifier:   9B:7D:25:EC:E8:82:01:96:0F:7C:06:42:C0:08:4D:CF:DE:A4:96:C3
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       0A3D8C402670034DB40A333F624AB06CD6FF0411
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3234203d3e20323132303034.roa
Signing time:             Tue 09 Feb 2021 17:06:15 +0000
ROA not before:           Tue 09 Feb 2021 17:01:15 +0000
ROA not after:            Tue 08 Feb 2022 17:06:15 +0000
asID:                     212004
IP address blocks:        85.208.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3d:8c:40:26:70:03:4d:b4:0a:33:3f:62:4a:b0:6c:d6:ff:04:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb  9 17:01:15 2021 GMT
            Not After : Feb  8 17:06:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:30:a9:90:a8:fc:e8:ee:b6:ce:d2:0a:a8:
                    8a:ad:fb:72:ef:11:80:d9:a5:64:c5:e4:eb:74:8e:
                    44:df:74:45:33:34:99:1e:d4:ed:72:a0:0d:84:72:
                    54:0c:7f:26:43:cb:02:a4:3b:56:8c:17:4f:69:ab:
                    91:27:e7:ed:db:47:a6:f8:52:bd:da:7e:8f:13:89:
                    69:f8:29:4c:71:d0:04:e3:0f:e5:24:87:45:f1:64:
                    d7:3a:f4:07:d4:3d:45:1b:0f:31:65:94:ab:1e:f8:
                    ee:73:af:6b:96:6d:30:bd:28:0a:dd:5b:78:dc:fb:
                    c6:ff:62:23:97:a5:a3:ea:d1:c1:fa:e8:25:b9:b4:
                    1b:8a:5d:bc:26:43:9a:28:c7:0a:39:86:51:3e:71:
                    94:e8:32:34:2c:3f:f0:8a:8a:95:22:82:94:9e:72:
                    39:18:49:e3:10:77:64:8c:b2:94:02:3d:9d:1f:66:
                    a9:d1:de:8a:6f:c3:50:4c:84:da:d8:7b:e2:d9:ca:
                    d7:5b:30:ea:0b:92:eb:dd:d4:19:17:f6:b3:f2:67:
                    8d:6d:b6:87:8f:a7:0c:2e:60:8a:c0:5f:c1:65:66:
                    14:68:57:8d:32:49:5d:de:4c:d0:92:bf:ca:6f:dd:
                    a3:b6:85:af:84:47:0f:a0:41:83:79:be:fa:29:1e:
                    ee:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:25:EC:E8:82:01:96:0F:7C:06:42:C0:08:4D:CF:DE:A4:96:C3
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3234203d3e20323132303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:af:c2:fa:02:52:f2:eb:11:31:73:d5:1d:f5:33:73:6b:e1:
         0c:2d:32:91:ea:be:44:5d:13:c9:63:fd:2a:9e:49:d2:f2:72:
         21:0d:3c:78:5e:1c:3b:49:8b:5f:34:a4:12:07:aa:db:80:ca:
         2a:0a:19:c0:e7:d2:9a:94:13:72:b8:3a:b4:23:4a:c4:c8:32:
         03:46:20:28:a4:94:84:5d:8f:15:79:a4:2c:ac:f6:87:91:ae:
         09:46:64:80:c2:a6:f9:8e:91:44:e6:d4:21:88:11:ef:7e:5b:
         f4:f5:8a:47:1a:c4:3e:80:65:fa:f3:5f:be:b1:ad:97:f0:fb:
         b1:4e:f6:81:d2:17:45:15:2e:b0:9b:2d:3f:28:7e:ec:ab:17:
         48:bd:3f:0e:5b:5a:96:3d:cd:05:a4:cb:55:d6:1d:bb:7d:18:
         25:49:f5:9c:23:be:25:f4:2c:a2:b1:c5:c1:1b:a6:fe:79:e7:
         c0:5e:5b:35:2c:7e:19:6c:18:3e:58:89:94:f1:5e:a0:34:b2:
         32:82:c4:24:3f:ae:8c:b3:3e:3f:8c:a6:ce:98:d7:33:bb:cd:
         75:24:da:56:da:57:7e:4d:a6:21:9f:5d:99:4d:a8:c5:aa:55:
         13:42:83:1d:8d:43:62:14:2a:66:9f:4a:1a:09:82:07:30:23:
         46:55:bf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:29 2024 by rpki-client on console-fra.rpki-client.org