Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32322e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3139362e32322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          MKnCzYD+WvCz5H5jURdH4Yai8kCBNmbE7xkDLnDNA68=
Subject key identifier:   EF:4C:22:47:EB:63:AF:B7:B8:7D:79:D4:E8:CF:89:13:E6:9A:6D:DD
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       2F8750EAA8A8251C7B9FF38A36A7931092AD26A9
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32322e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:29:20 +0000
ROA not before:           Wed 28 Dec 2022 09:24:20 +0000
ROA not after:            Wed 27 Dec 2023 09:29:20 +0000
asID:                     136787
IP address blocks:        185.196.22.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:87:50:ea:a8:a8:25:1c:7b:9f:f3:8a:36:a7:93:10:92:ad:26:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Dec 28 09:24:20 2022 GMT
            Not After : Dec 27 09:29:20 2023 GMT
        Subject: CN=EF4C2247EB63AFB7B87D79D4E8CF8913E69A6DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:77:e0:49:89:c8:83:f2:a8:57:03:d2:c3:
                    51:2a:37:82:9a:8c:26:80:0c:a1:27:ba:c5:38:73:
                    7a:3b:19:d6:7c:c6:ea:75:29:8d:8e:81:3d:21:b5:
                    66:79:d8:f8:22:56:85:ea:2d:ea:f5:7e:24:62:f4:
                    1d:3e:a5:64:d7:ad:b0:fe:ad:10:e4:41:44:b1:b8:
                    9a:97:d5:c0:83:28:30:2a:e3:18:24:1a:cc:09:72:
                    8a:ff:06:e9:04:08:8f:47:88:18:46:9f:b6:35:a7:
                    2f:0a:e1:0c:66:71:9b:60:52:5b:32:6a:3f:5d:b4:
                    8c:b3:9e:58:02:f5:be:ff:a9:aa:87:47:95:e9:a3:
                    9f:b1:fd:ec:19:00:53:2f:59:29:c1:86:8d:8e:36:
                    66:49:72:13:87:3d:76:a9:f9:e4:ef:6e:55:60:92:
                    72:ea:78:4c:59:ac:76:bf:c5:9d:a0:f1:51:51:e5:
                    dc:ad:19:d8:7e:c7:12:23:58:78:43:11:f2:b2:f4:
                    27:8c:35:02:5c:f8:c1:b9:83:f8:f4:81:15:1e:ce:
                    78:c7:b4:f1:fb:b3:d8:db:ba:3e:84:e7:cc:7f:39:
                    ba:ab:bb:4e:3c:38:c8:6e:5d:a0:e0:2b:c0:3a:eb:
                    cd:46:9e:10:66:d0:11:76:fb:13:08:90:a4:04:89:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:22:47:EB:63:AF:B7:B8:7D:79:D4:E8:CF:89:13:E6:9A:6D:DD
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32322e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:8b:e3:4c:86:35:9e:ac:27:b4:36:6c:d6:16:49:30:43:ab:
         c9:20:4e:4d:2d:02:91:8d:b3:ae:af:66:77:57:91:8c:f2:97:
         2d:b8:ec:30:33:8f:3b:57:4d:50:a5:ac:a5:15:ad:b1:66:ff:
         2e:ae:a6:ab:2c:f2:52:2c:c8:11:54:a7:52:17:a6:85:d8:bd:
         00:7e:33:ca:18:ff:a2:fb:3e:46:4d:97:e0:8c:14:5a:1d:87:
         af:45:47:12:ce:61:5c:c5:a0:d4:24:e9:11:9b:da:f9:e0:4a:
         b7:bd:6b:f6:ca:6f:c1:21:96:e4:be:46:fc:3e:fc:6a:d7:e0:
         0e:47:0e:7a:79:d4:1f:6b:5c:ec:3c:6a:b4:36:19:9e:d2:f6:
         07:79:4d:c4:ff:e8:d8:42:4e:2e:90:2c:87:f4:dd:d2:e4:23:
         7f:a1:ab:6f:31:5f:3e:b1:5f:01:24:a0:05:7c:42:89:45:27:
         75:f4:c2:98:7e:99:8f:d4:27:5a:65:7f:f5:96:09:24:59:ba:
         20:68:70:6c:95:fd:64:8f:90:05:eb:7c:24:a1:d8:e9:e2:71:
         2c:ad:c4:07:df:6f:37:66:71:cf:aa:d8:1e:cf:f9:dd:b1:3d:
         f0:c1:14:2f:c2:24:6e:ea:ce:7f:08:0f:04:bd:f7:97:f4:78:
         6f:c4:27:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net