Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135372e302f32342d3234203d3e203631333137.roa
File:                     3138352e3131312e3135372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          46eaPGX0FiBtXRqlT1iTN7NAOKQxOKLu6dg5EOBSjQs=
Subject key identifier:   F8:EE:7A:06:FF:55:E2:7F:44:E5:EA:F7:8F:3D:A3:1C:C5:80:AF:BE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       53E7E85F564FCC9F7FDED10CAEB8E567E7E02BD7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135372e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:22 +0000
ROA not before:           Sat 22 Oct 2022 04:29:22 +0000
ROA not after:            Sat 21 Oct 2023 04:34:22 +0000
asID:                     61317
IP address blocks:        185.111.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e7:e8:5f:56:4f:cc:9f:7f:de:d1:0c:ae:b8:e5:67:e7:e0:2b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:22 2022 GMT
            Not After : Oct 21 04:34:22 2023 GMT
        Subject: CN=F8EE7A06FF55E27F44E5EAF78F3DA31CC580AFBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:fb:58:ec:63:f4:19:c1:d2:4a:ce:8e:a9:
                    cd:c5:f0:20:e6:41:d6:c5:b5:3c:37:5d:af:b3:80:
                    72:35:52:a6:40:01:47:ae:98:f2:95:53:46:ca:b5:
                    9e:e3:4e:37:47:a4:c3:19:ca:a0:c5:97:83:69:7b:
                    8d:87:c9:1f:87:e1:a8:be:08:1b:26:b9:38:32:64:
                    d2:06:fb:0e:5f:62:12:28:e1:e2:ac:8e:e5:38:96:
                    9e:c4:fc:99:04:c2:db:d2:ab:ba:e1:bb:d4:11:af:
                    fc:35:78:8e:ca:01:74:08:af:5e:5e:17:75:6f:3c:
                    4f:99:7a:1a:c9:32:f2:bc:c7:ff:73:16:d9:1b:87:
                    fe:a7:e6:f3:ff:be:2d:f6:b8:05:b4:ee:c8:44:a3:
                    82:24:58:8f:1f:1e:f2:d4:0e:51:52:6a:b3:06:77:
                    56:ae:ba:92:b7:dc:00:0c:7a:51:08:b8:c8:9d:9f:
                    6f:bb:1b:dc:b1:c0:a0:ae:18:c2:3f:1f:da:be:c3:
                    1c:29:8b:a1:37:76:65:97:92:f0:74:5b:9c:7a:62:
                    b0:4b:fc:dd:1e:86:37:c4:2e:7d:e0:5a:f5:fd:27:
                    96:13:0f:12:93:84:39:2b:58:f8:bc:25:a0:e2:95:
                    0e:d2:21:2c:21:6a:55:5c:45:3a:7d:e1:79:20:c5:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EE:7A:06:FF:55:E2:7F:44:E5:EA:F7:8F:3D:A3:1C:C5:80:AF:BE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.111.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:f9:5b:d1:b7:89:8b:73:7b:cb:5f:59:34:2d:97:ff:46:90:
         ab:87:3a:26:98:3e:01:31:c2:9a:e9:59:04:61:60:08:8b:1e:
         bd:19:de:d9:ec:75:20:be:e5:0e:e3:e6:36:99:b1:96:a8:09:
         1b:9f:c2:f6:8c:74:a9:22:36:64:d1:a5:59:29:da:ac:6c:8e:
         94:1f:3e:1a:2c:b4:ec:7b:c9:74:1d:34:da:37:cf:e1:49:da:
         d5:64:c5:50:37:a7:55:aa:cd:b1:ed:51:56:b6:68:d7:92:9a:
         23:01:a3:35:55:14:2e:bb:1a:47:3a:7a:73:4e:2a:63:e2:13:
         c8:65:86:76:0f:c8:2e:37:a4:26:63:05:95:dc:c5:13:e5:f4:
         46:e3:ef:4b:53:85:f3:d4:8f:23:2a:bc:d7:9e:7f:09:49:1a:
         03:6f:93:86:f2:ad:8b:df:88:d5:09:ca:92:ac:1e:0d:80:33:
         a1:0b:75:1d:ac:77:45:bd:2e:ef:4e:ad:93:ba:b3:6a:de:fe:
         73:a8:75:da:83:ff:2c:d2:85:66:a7:ad:46:2f:d0:31:03:93:
         23:5b:9e:a7:18:8e:f4:c0:7e:cb:eb:e5:45:89:57:71:c7:b4:
         93:d1:9d:36:1a:46:73:ee:33:9c:ad:c8:87:fb:3f:dd:4b:99:
         2e:32:7d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net