Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3135332e3137372e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3135332e3137372e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          XalEv0xh0TBJ6kO5GrzMclxEZguX8EMk0FySuxhHJz8=
Subject key identifier:   8A:59:45:AE:5E:C4:87:5D:AD:0E:9E:E4:6F:8A:08:85:97:57:03:C5
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       146CA925D2CC03780A5F6234156B669D1692DE16
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3135332e3137372e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:33:59 +0000
ROA not before:           Wed 28 Dec 2022 09:28:59 +0000
ROA not after:            Wed 27 Dec 2023 09:33:59 +0000
asID:                     136787
IP address blocks:        185.153.177.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6c:a9:25:d2:cc:03:78:0a:5f:62:34:15:6b:66:9d:16:92:de:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Dec 28 09:28:59 2022 GMT
            Not After : Dec 27 09:33:59 2023 GMT
        Subject: CN=8A5945AE5EC4875DAD0E9EE46F8A0885975703C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:c8:71:de:78:29:b1:78:0c:cf:c9:1d:cf:
                    33:81:96:3d:ed:aa:f5:32:48:7b:b2:99:ba:51:52:
                    91:94:e3:a1:c7:99:1d:ed:9a:5f:5d:28:1b:b9:02:
                    22:39:b7:af:95:71:27:7c:63:e6:c1:f5:5d:43:3d:
                    03:f8:d5:fb:1e:09:ae:65:97:5c:e6:cb:6d:f8:e1:
                    0f:8d:c4:cc:cd:bc:53:bf:6f:f3:2c:f5:3c:ca:f2:
                    61:3f:1f:d9:7c:d7:f2:0b:72:d3:3e:a4:51:5b:e9:
                    d5:85:e2:96:60:aa:d7:b0:f1:17:c0:0d:34:46:c1:
                    38:98:a6:22:4b:f5:76:13:bf:e6:ac:b9:78:48:89:
                    11:a7:1c:c1:f8:a5:7a:5a:89:d2:bc:15:f1:af:b0:
                    a3:61:aa:ba:f7:51:c9:30:62:ee:a9:6d:37:50:5d:
                    11:09:ad:b3:a1:b2:be:b3:84:1c:80:06:8c:10:26:
                    6d:81:6d:40:3b:8c:a1:cc:c5:4b:71:5e:2e:fb:80:
                    46:c9:8e:7f:3a:36:79:c0:47:1d:6a:be:34:48:3a:
                    69:53:02:42:60:e4:40:12:20:b8:5d:13:c7:6f:b4:
                    04:36:70:55:29:e3:ed:ec:3e:bd:8a:a2:a7:dd:f4:
                    25:a1:96:69:a9:b8:19:fd:af:e3:2d:94:92:bd:21:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:59:45:AE:5E:C4:87:5D:AD:0E:9E:E4:6F:8A:08:85:97:57:03:C5
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3135332e3137372e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.153.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:5d:07:7f:ea:51:ad:61:a5:58:5b:31:5a:81:b1:ca:26:77:
         a1:4a:60:73:26:3f:b7:41:a0:26:68:fa:54:bb:30:85:b2:02:
         4a:ae:f3:03:0e:88:9b:70:88:30:97:fc:26:b2:54:da:df:77:
         66:da:0c:87:1d:af:30:d5:14:42:c4:4f:8b:b5:26:92:9d:0a:
         f0:cc:83:84:5f:d1:95:b7:61:a2:72:e1:8c:c2:37:98:a2:bc:
         39:c6:ed:2c:44:04:f9:3f:6e:f8:44:2a:fd:f8:05:a1:f5:a8:
         d7:79:85:07:c5:20:c0:59:f7:cf:a6:bf:7b:90:b5:23:c6:33:
         b1:fd:d9:df:ac:b0:4a:3c:82:2e:93:85:ad:c6:1b:91:b0:2c:
         84:72:2a:94:da:8c:7e:c0:ed:7e:d5:2b:f0:25:34:28:7c:bb:
         a7:d4:22:38:0e:6a:ab:55:92:8e:0c:90:fe:e5:e6:73:18:6c:
         d8:57:58:41:f6:9e:2c:b1:bd:02:ee:00:e0:79:b2:87:20:66:
         dd:27:d9:fa:b2:17:fb:3d:18:52:fb:e9:c4:97:02:f9:d4:76:
         97:55:1a:2b:6c:f4:63:fb:ac:e0:d7:63:89:4b:3f:3f:03:24:
         a8:92:46:cf:4c:0b:aa:d3:ba:32:b0:64:96:ec:49:3c:6a:c5:
         44:2c:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net