Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3135332e3137362e302f32342d3234203d3e203630303638.roa
File:                     3138352e3135332e3137362e302f32342d3234203d3e203630303638.roa (raw, json)
Hash identifier:          5pJWpn02YIRJlXEALW3h7xkNa1PqF8Jxg9ecvvgC0RY=
Subject key identifier:   5F:CE:35:47:A3:D4:7F:25:A8:D0:89:33:20:66:4F:82:77:FA:10:EB
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       4183A0528FDE672B6767A1E57CA55BB4AA7F394F
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3135332e3137362e302f32342d3234203d3e203630303638.roa
Signing time:             Thu 12 Jan 2023 12:21:35 +0000
ROA not before:           Thu 12 Jan 2023 12:16:35 +0000
ROA not after:            Thu 11 Jan 2024 12:21:35 +0000
asID:                     60068
IP address blocks:        185.153.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:83:a0:52:8f:de:67:2b:67:67:a1:e5:7c:a5:5b:b4:aa:7f:39:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Jan 12 12:16:35 2023 GMT
            Not After : Jan 11 12:21:35 2024 GMT
        Subject: CN=5FCE3547A3D47F25A8D0893320664F8277FA10EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:71:86:0a:5f:39:e0:cc:56:09:cd:25:1d:
                    e4:4f:48:0f:d4:23:87:29:ec:ae:4c:55:e2:09:ac:
                    09:c7:e8:30:91:b6:97:c5:7f:38:26:5c:b8:4e:95:
                    6e:32:6f:18:19:4e:d5:98:db:55:7b:ca:f3:3f:a6:
                    93:c6:c6:60:d0:be:07:ce:f2:9c:0f:c7:70:f8:69:
                    54:be:77:ba:32:0f:3a:47:eb:04:c4:91:94:17:9d:
                    07:45:10:32:c9:5e:ea:4a:56:33:c8:51:aa:21:44:
                    0d:af:be:d6:50:08:ff:e0:8c:d8:87:06:d8:09:b0:
                    18:e8:c0:bb:f0:41:4e:2f:0f:55:ec:3d:9e:f2:39:
                    52:e5:0f:6a:ec:98:ec:c2:21:7b:1d:bf:54:f5:ad:
                    45:1d:6d:75:1e:c7:bb:14:3c:90:f8:80:db:58:d5:
                    a7:c2:2e:25:2d:8b:dc:d6:6c:52:99:43:e4:a1:9c:
                    d8:16:61:59:b8:7c:25:af:2a:b6:ff:82:94:23:1a:
                    0c:aa:93:b5:41:c1:be:7b:ec:f1:e1:86:b6:82:db:
                    d9:f1:ea:72:e8:62:76:32:60:57:21:1c:56:23:85:
                    e3:a8:0f:24:82:c7:b4:8a:99:f5:e5:e1:e3:2c:9f:
                    6d:b5:e0:82:be:75:66:fc:40:4b:10:91:b3:6d:07:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CE:35:47:A3:D4:7F:25:A8:D0:89:33:20:66:4F:82:77:FA:10:EB
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3135332e3137362e302f32342d3234203d3e203630303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.153.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:fe:36:23:37:a8:ab:f6:a8:cf:d0:3e:bb:cf:47:56:b7:42:
         f0:55:06:e3:6e:83:25:c7:da:4b:0f:0e:ee:b8:7e:07:89:90:
         9c:27:3a:6b:fc:8e:19:0c:f4:0d:03:c5:2b:9d:10:36:37:5c:
         54:20:a2:87:89:6c:b8:00:db:22:d8:71:9a:c8:01:19:e7:b9:
         38:9c:97:f0:ed:51:76:e5:e7:a4:d3:b5:44:da:da:6c:0a:42:
         94:de:77:8c:84:65:15:f5:b4:b4:de:1b:79:ff:d5:24:2a:9f:
         ca:b5:0c:ca:fb:6d:65:67:42:6f:45:0b:7f:bb:8e:b9:66:0d:
         4e:c9:54:a5:c2:55:e1:33:7b:ee:42:22:32:c2:3e:17:5b:e4:
         fa:b9:bf:ec:89:e8:9a:54:9b:2c:1f:c2:6d:ec:2f:8b:35:b5:
         53:eb:e5:db:9c:b2:a6:f4:ab:b7:21:00:f7:b9:05:df:d7:e1:
         6e:62:18:56:95:bb:97:a0:7c:10:aa:3b:6c:8b:06:21:29:ae:
         21:c9:e4:25:05:b6:66:e6:92:c5:92:34:1f:b3:d8:db:72:f5:
         a5:4d:c6:df:45:14:65:75:3d:48:26:51:e3:99:a3:c1:d8:7b:
         8c:8a:7c:f5:e6:c2:e1:12:3e:e1:79:2b:ac:f3:17:58:3b:16:
         ab:af:5c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net