Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e302e302f32342d3234203d3e203432333636.roa
File:                     3138352e3136392e302e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier:          +q9l3QtgJYwQGzKjqFE0GQL1CfwhuUYjLSgtk6f0TNU=
Subject key identifier:   E2:B6:6F:C8:66:45:A5:DA:82:DF:02:E3:1F:D9:B9:6F:D3:57:97:B3
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       25B58841F0CEA88C1A178B4A700385EFA5D2BCF8
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e302e302f32342d3234203d3e203432333636.roa
Signing time:             Tue 28 Jun 2022 04:40:31 +0000
ROA not before:           Tue 28 Jun 2022 04:35:31 +0000
ROA not after:            Tue 27 Jun 2023 04:40:31 +0000
asID:                     42366
IP address blocks:        185.169.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b5:88:41:f0:ce:a8:8c:1a:17:8b:4a:70:03:85:ef:a5:d2:bc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Jun 28 04:35:31 2022 GMT
            Not After : Jun 27 04:40:31 2023 GMT
        Subject: CN=E2B66FC86645A5DA82DF02E31FD9B96FD35797B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:08:a4:fd:5f:e5:cc:0e:e7:d8:46:ab:ea:
                    c8:97:43:81:82:78:0f:05:c5:5a:24:57:e5:70:bc:
                    a6:28:3f:e6:44:d8:84:fc:c7:65:db:e3:3a:b1:82:
                    80:09:3f:27:a6:24:7f:43:8e:74:be:1f:8a:52:bb:
                    46:57:b0:6b:4f:20:bd:17:d5:7a:42:c2:5d:45:fc:
                    63:91:1d:cf:f7:cb:b5:61:14:0b:c4:47:e7:d6:93:
                    59:8f:94:8b:e9:53:ac:00:3e:26:e1:90:56:5b:cf:
                    f4:c4:c6:28:e7:08:bc:9e:94:04:8d:21:06:db:5f:
                    fe:78:13:59:96:40:05:db:6d:61:66:5e:8c:fe:6a:
                    62:a9:32:81:87:dd:50:07:15:ac:5e:a1:ee:18:6f:
                    b9:e6:4d:7e:9e:87:71:02:0e:05:3f:50:77:97:de:
                    bf:34:90:c9:c1:cb:71:ba:3c:45:38:f7:74:e3:f1:
                    f6:07:98:a8:77:e4:a1:ec:d5:67:b4:df:d5:e9:5c:
                    df:8b:ec:0e:2b:4e:97:c9:74:11:8a:27:eb:c1:12:
                    ce:83:20:01:c2:44:28:e3:29:75:89:fb:10:fe:6d:
                    c0:79:d6:fb:95:f0:ac:d2:48:55:15:a8:ee:88:57:
                    ae:d1:f1:70:27:92:0c:45:6c:64:f3:09:c0:f5:24:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B6:6F:C8:66:45:A5:DA:82:DF:02:E3:1F:D9:B9:6F:D3:57:97:B3
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e302e302f32342d3234203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:0b:98:c3:32:0f:d4:b1:e1:a8:a6:b8:6a:56:45:3f:92:2d:
         b7:8a:ef:29:88:2c:22:79:b9:b8:ee:78:09:68:f6:11:c3:e5:
         63:71:bf:72:7b:05:a2:83:cb:f6:21:11:16:17:fe:3a:74:b4:
         33:fb:d1:31:82:2f:2c:9d:e0:6b:cd:7f:d8:99:c9:2b:73:95:
         51:63:48:5f:80:7f:e6:40:34:65:d7:85:13:72:fd:18:89:47:
         57:a5:fd:0a:c7:04:0e:9c:32:f3:79:bf:23:7f:58:0d:4a:e2:
         ef:69:27:79:da:55:25:e0:c3:f7:77:a5:9e:a6:a7:40:7c:90:
         39:04:f0:6b:be:dc:99:4a:79:32:17:2d:09:f8:d6:5a:b0:9b:
         58:6d:c5:60:06:e3:96:aa:03:23:a4:48:f8:76:32:bf:b5:f4:
         65:06:43:40:e7:89:f9:4b:fb:ed:da:c0:92:93:16:99:e8:ea:
         9f:05:1b:e0:17:7f:ed:d9:b2:61:1b:c2:db:15:b4:00:42:12:
         7c:4a:57:1b:3c:08:76:63:cb:d7:33:ca:93:87:96:19:32:cb:
         1c:2f:ee:79:b7:df:5c:ae:71:6c:38:20:2f:00:be:ce:3f:f6:
         bf:b7:0a:f2:08:c9:ec:7b:bb:48:9b:b8:34:44:ee:b8:68:ce:
         a8:8d:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:58 2023 by rpki-client on console.sobornost.net