Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139382e32372e302f32342d3234203d3e2030.roa
File:                     3138352e3139382e32372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          0IOXocwhFThdzgWNw0z8Kezml9YhE6oaIZIV+EBiJWI=
Subject key identifier:   E4:FA:E8:F0:BB:F1:35:B0:54:39:34:15:9D:AF:7A:80:ED:DE:27:56
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       36B9AC02412BFEFCC5DCABFF6EAF48529A43F2F4
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139382e32372e302f32342d3234203d3e2030.roa
Signing time:             Tue 28 Jun 2022 04:41:00 +0000
ROA not before:           Tue 28 Jun 2022 04:36:00 +0000
ROA not after:            Tue 27 Jun 2023 04:41:00 +0000
asID:                     0
IP address blocks:        185.198.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b9:ac:02:41:2b:fe:fc:c5:dc:ab:ff:6e:af:48:52:9a:43:f2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Jun 28 04:36:00 2022 GMT
            Not After : Jun 27 04:41:00 2023 GMT
        Subject: CN=E4FAE8F0BBF135B0543934159DAF7A80EDDE2756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:c1:31:03:ac:59:8e:8d:c1:07:d5:17:ef:
                    58:fc:73:96:9e:63:d2:2a:a8:da:13:d4:4c:9d:3d:
                    0e:99:7c:10:f9:df:83:8c:b1:3b:a5:63:50:2d:b4:
                    36:7a:97:dd:c9:46:1f:b1:68:f2:d4:13:78:85:bd:
                    9d:15:45:23:13:12:33:5e:fe:62:ee:2c:9a:c7:de:
                    b3:1b:5a:5c:a6:c5:54:e6:b4:89:fc:70:99:14:5a:
                    93:8c:85:ca:10:c4:62:dc:6c:8c:be:fa:c7:3b:de:
                    89:6a:3d:e1:05:f6:9d:4a:25:17:02:43:7b:b4:51:
                    50:02:4a:57:07:d3:6f:9b:0b:e3:60:4f:9b:ce:fa:
                    2d:80:c5:99:88:18:12:ab:9d:55:44:c7:db:81:53:
                    69:5f:ff:3a:93:ba:87:bd:5b:7b:72:30:27:0a:48:
                    6f:e9:c0:43:b6:f7:7d:18:50:6b:af:3d:47:ad:d7:
                    6f:c6:54:a5:5d:1c:5f:f5:34:18:d3:73:06:32:ab:
                    60:52:17:4b:b0:94:7a:a6:86:ea:1a:be:e9:c2:91:
                    bb:af:51:25:4e:34:fc:b2:bb:85:df:aa:00:c8:d5:
                    4f:0e:5e:ea:19:60:78:c2:66:b4:61:42:e7:cf:58:
                    a5:5a:2b:6b:8c:06:b3:fa:43:24:97:05:c7:40:a1:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FA:E8:F0:BB:F1:35:B0:54:39:34:15:9D:AF:7A:80:ED:DE:27:56
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139382e32372e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.198.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:65:70:44:25:a5:13:59:5b:b1:11:79:62:c3:dc:07:c6:0e:
         07:35:ec:70:9d:37:ab:4a:58:4b:b6:cd:c0:ca:cd:f9:83:0b:
         23:20:0f:8a:3c:c6:1f:1a:83:c4:77:cd:fa:6a:11:ba:c5:6f:
         13:ba:ce:ef:88:1c:dc:56:f3:1c:13:33:62:9d:4a:26:ed:75:
         ef:40:08:f3:1d:6e:f1:a6:fc:a7:6f:19:33:bf:e6:5e:3a:bc:
         af:98:a7:a6:41:56:69:dd:8b:1a:3f:6c:44:55:f9:a1:4a:f0:
         9d:89:40:9d:1a:f3:29:1d:82:45:90:b0:e0:f5:87:6f:43:5e:
         cc:0e:e0:a6:f2:da:70:e4:67:80:ec:39:fb:a7:05:a0:12:ce:
         7d:e4:22:24:a8:9b:37:4e:7b:93:f0:70:91:35:cd:dd:33:36:
         9d:54:ef:ff:29:e6:38:c9:bd:41:b9:ce:b8:2d:59:ca:d4:26:
         3b:de:b2:10:5a:7e:44:fe:88:a2:82:09:44:6c:56:e4:e2:9d:
         75:ed:a1:84:87:e8:e6:73:c0:19:50:04:2f:d0:b8:48:c3:96:
         46:ca:ab:b7:df:2a:3c:4c:bf:31:08:8f:aa:45:16:86:36:2b:
         f7:bb:62:5e:11:4e:b8:df:c9:4d:91:37:25:0f:e5:fd:70:14:
         23:fb:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net