Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e302e302f32342d3234203d3e2030.roa
File:                     3138352e3136392e302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          WedR52TDKeiTzt9YBTiqjvlGuXjcKPTbQqkFvqeTHd4=
Subject key identifier:   55:00:CE:FD:E6:2C:72:E7:B9:B1:CC:DC:F3:35:E5:F4:EB:03:3A:C0
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       1CDE338CFB79E68B07DBA774B52F1EA207C93B73
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e302e302f32342d3234203d3e2030.roa
Signing time:             Tue 28 Jun 2022 04:40:32 +0000
ROA not before:           Tue 28 Jun 2022 04:35:32 +0000
ROA not after:            Tue 27 Jun 2023 04:40:32 +0000
asID:                     0
IP address blocks:        185.169.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:de:33:8c:fb:79:e6:8b:07:db:a7:74:b5:2f:1e:a2:07:c9:3b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Jun 28 04:35:32 2022 GMT
            Not After : Jun 27 04:40:32 2023 GMT
        Subject: CN=5500CEFDE62C72E7B9B1CCDCF335E5F4EB033AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:01:e0:11:dc:a2:08:70:1a:75:37:ed:56:
                    bf:7e:0e:d5:a7:15:93:ba:77:18:83:2f:bd:08:75:
                    f7:b7:63:ab:82:e8:ac:8d:63:1e:c2:26:52:0c:02:
                    38:52:af:9e:1d:15:25:ec:13:d0:4f:45:a7:8b:b2:
                    f0:d8:76:26:97:d3:e7:16:fc:96:ac:be:e6:30:e3:
                    6d:a4:b9:c6:f7:72:98:32:b1:e6:32:57:ce:13:74:
                    57:a4:fb:58:e0:23:40:d6:0f:04:c0:32:65:d2:11:
                    d1:e4:eb:f4:1c:6b:93:8f:4b:dd:60:47:44:45:7c:
                    2b:c5:bb:6c:62:be:5e:bc:82:83:63:39:17:01:51:
                    91:f4:ef:ff:5f:57:cd:e5:f4:b0:b1:ec:69:30:f3:
                    68:01:12:f6:db:a0:b9:07:3c:05:05:65:75:c5:96:
                    25:92:88:c5:27:fe:12:32:6f:76:c5:42:60:4a:2b:
                    60:f8:cf:72:18:d0:9a:74:1c:fb:61:b6:cb:1a:ba:
                    06:65:d5:99:d8:98:45:6c:af:96:84:a4:74:16:4d:
                    34:0d:85:8a:a9:0d:f1:ec:21:77:f7:28:40:7a:88:
                    5b:37:a2:c7:5a:bf:90:2f:7c:7b:94:79:c0:65:a7:
                    d4:d2:06:a4:43:9b:f5:b7:71:9c:09:3c:8b:55:aa:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:00:CE:FD:E6:2C:72:E7:B9:B1:CC:DC:F3:35:E5:F4:EB:03:3A:C0
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:9d:43:55:67:f4:74:d1:64:4b:ae:7f:8b:18:ce:f6:a9:69:
         22:05:ef:e5:e7:63:3d:39:74:55:18:26:f6:91:d8:36:e0:7b:
         a8:29:e2:13:22:80:ae:7d:5d:af:56:df:6e:eb:ce:11:19:1d:
         27:11:9a:df:e8:fe:03:82:ab:8d:47:ee:f0:77:53:f2:99:3c:
         f1:69:10:73:21:3e:69:ed:0d:34:2d:c4:a7:24:2d:ad:c2:5b:
         f7:30:2e:f3:44:51:02:47:3f:9b:f2:41:f7:03:9c:59:4c:19:
         27:d0:c7:44:fe:17:a7:71:85:12:5f:67:46:c4:dc:49:17:73:
         b0:b0:6c:55:b7:c9:bd:47:fd:cd:a6:5f:b3:05:09:c6:3c:ed:
         71:3f:2e:70:54:63:f2:c7:87:41:01:e6:18:7e:99:f5:28:92:
         99:02:a7:ed:1e:73:ff:fe:35:34:db:b7:09:86:54:1c:6a:38:
         22:c8:59:1c:64:03:49:ca:c6:4a:b7:0f:1d:91:47:d4:eb:22:
         c7:9e:4c:22:5a:19:fa:18:a5:9e:f9:a1:83:15:00:26:99:1f:
         b9:b1:f8:ec:b5:8f:61:44:e8:2c:ae:50:0b:71:e5:8f:f9:48:
         3a:00:02:99:15:f5:2e:cc:88:da:42:47:de:0d:05:be:a1:78:
         74:a7:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net