Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232342e302f32342d3234203d3e203437353833.roa
File:                     3138352e3234392e3232342e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          tuik8OPcT5H8rHoL0WXhwOcba7q7sdZLSq6QKR27/u4=
Subject key identifier:   36:61:BB:DD:CD:3D:4A:85:E3:AF:9B:38:3A:86:08:68:28:0E:93:66
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       56A4F0EC654FD5CEF7232828C46E36E5B4BAB97C
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232342e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:41 +0000
ROA not before:           Sat 22 Oct 2022 04:28:41 +0000
ROA not after:            Sat 21 Oct 2023 04:33:41 +0000
asID:                     47583
IP address blocks:        185.249.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a4:f0:ec:65:4f:d5:ce:f7:23:28:28:c4:6e:36:e5:b4:ba:b9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:41 2022 GMT
            Not After : Oct 21 04:33:41 2023 GMT
        Subject: CN=3661BBDDCD3D4A85E3AF9B383A860868280E9366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:8f:b2:06:62:2b:f4:9c:17:35:68:e1:29:
                    cb:9a:e7:33:88:e4:2e:c5:b2:19:e8:a6:29:2d:64:
                    9e:e9:5c:ff:71:ee:c2:fb:5c:be:dc:3a:ad:fa:a4:
                    de:a4:d2:a3:cf:22:33:37:30:b7:6b:1b:7e:3a:3d:
                    cc:82:aa:3e:ca:61:6d:2b:cd:6e:ad:7d:c7:41:64:
                    7f:13:98:53:c0:bb:2d:b2:c0:03:ad:a7:b5:42:01:
                    fb:8b:4a:25:68:f8:21:62:06:5c:09:81:0e:21:88:
                    19:15:a5:78:b3:9a:e8:0c:9d:eb:7d:c3:ff:80:b8:
                    73:b5:d9:55:4e:27:f5:e3:fe:71:d4:98:d9:57:2b:
                    4e:98:a7:d1:7d:46:9f:ff:f6:b8:bc:5c:a4:22:bf:
                    0a:34:fa:d1:aa:c0:b5:a9:a3:96:a7:14:fb:be:d2:
                    b8:d1:b1:52:87:ad:c3:6c:96:e6:49:3f:9e:cf:e3:
                    2b:57:56:f5:0f:4f:8d:fe:18:37:7f:30:0b:53:6d:
                    19:1e:0f:38:46:ef:e9:85:29:54:d5:de:4f:79:50:
                    9a:7a:91:93:88:6f:14:09:d9:db:be:f6:6c:66:24:
                    3e:c1:25:26:2c:a7:7f:a7:d6:13:fa:52:1f:90:49:
                    3b:8a:5c:cf:33:64:f3:00:b5:7e:11:3a:81:79:99:
                    64:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:61:BB:DD:CD:3D:4A:85:E3:AF:9B:38:3A:86:08:68:28:0E:93:66
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232342e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:81:b4:f4:65:3f:72:98:54:5f:e9:67:7d:27:95:9a:2b:0a:
         b9:94:63:11:24:ee:15:0a:75:ec:d4:78:09:a5:b4:3f:7d:c6:
         f3:5c:a7:96:c6:0b:bb:25:6e:91:fc:2c:1f:c0:3e:1f:6d:74:
         09:9d:07:63:10:5c:8b:e2:3b:15:4d:d8:cd:8a:ce:7c:ce:cd:
         6b:86:26:35:ff:16:55:69:2a:c8:79:77:df:cf:08:57:06:53:
         e7:3f:52:7b:5b:55:26:d1:ad:aa:2d:b1:6a:76:65:33:34:d2:
         c5:75:5e:25:e3:f1:19:de:0c:80:03:3d:9a:0b:85:6f:1d:c6:
         46:d8:86:f8:82:fe:c9:3d:10:6b:4a:18:6e:53:e0:42:85:97:
         0c:cb:0f:f9:f6:73:c2:59:1f:eb:00:aa:89:c1:87:57:70:20:
         ef:5b:13:8d:45:f6:af:0a:72:75:02:57:5e:37:ca:3b:e2:14:
         ed:e0:24:e1:8a:cd:77:22:b6:78:42:f6:da:5e:97:ef:e2:d6:
         17:15:db:c7:4e:19:dd:b1:2c:d6:bd:a1:cb:2a:fb:e5:72:1e:
         4b:78:b6:07:e7:61:cf:d5:34:bd:29:ef:74:4f:f3:31:a2:8d:
         c5:8c:b4:9d:6a:4b:a2:31:3d:20:56:3a:43:18:4f:8a:76:2a:
         8f:ae:a7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org