Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137372e3131362e302f32342d3332203d3e203531313637.roa
File:                     3138352e3137372e3131362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          0TV0UNGpwYT8RWbeOgReSGJIf1IFP/cxYw+COxJ2JO0=
Subject key identifier:   B2:7C:39:84:FB:C1:8C:0F:2B:D3:85:FB:C0:2E:EB:41:0C:4B:16:A1
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3E18B5A5C51D51A7BE8025D74046F67F5EAA80FD
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137372e3131362e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:29 +0000
ROA not before:           Sat 22 Oct 2022 04:29:29 +0000
ROA not after:            Sat 21 Oct 2023 04:34:29 +0000
asID:                     51167
IP address blocks:        185.177.116.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:18:b5:a5:c5:1d:51:a7:be:80:25:d7:40:46:f6:7f:5e:aa:80:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:29 2022 GMT
            Not After : Oct 21 04:34:29 2023 GMT
        Subject: CN=B27C3984FBC18C0F2BD385FBC02EEB410C4B16A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:b8:12:43:65:61:ca:39:97:33:35:3a:50:
                    d0:b7:cb:9a:7c:ff:76:26:82:06:dd:7c:fa:06:be:
                    6b:4c:ca:89:bb:5b:bd:68:3c:96:23:a6:09:f9:c5:
                    08:48:ea:00:73:fc:6b:05:26:2c:a6:ce:88:50:4f:
                    a1:1a:16:7b:eb:0e:f4:87:9e:13:0b:d3:e2:b0:9d:
                    05:02:4b:b1:63:41:b8:ab:45:f2:07:89:60:9f:14:
                    55:98:e4:59:a1:6f:85:1c:b6:46:a2:88:a1:ea:12:
                    82:d9:38:28:26:b8:d0:fa:0e:b9:6d:06:d5:fc:8d:
                    54:05:97:bb:cb:a5:96:d8:a2:7e:4b:79:cb:a1:74:
                    63:79:92:ee:7d:70:33:08:22:79:f0:c6:38:2f:1f:
                    08:e7:51:4f:96:67:88:ec:99:a5:a8:4c:65:36:dc:
                    1e:69:bf:72:18:23:3c:54:9e:08:06:6e:4e:2d:cb:
                    63:0b:52:66:52:d8:a9:6f:11:8c:c8:38:28:5a:7f:
                    20:3b:9e:ec:12:74:4b:8a:d8:ee:0e:44:ef:29:53:
                    a9:65:46:3e:b5:23:53:78:9e:58:95:a9:7b:b6:93:
                    6d:57:f3:44:f6:a7:95:c2:85:10:a9:3e:2a:09:b9:
                    7b:b1:ee:4e:34:9d:f0:4d:08:32:d2:5d:c1:34:b1:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:39:84:FB:C1:8C:0F:2B:D3:85:FB:C0:2E:EB:41:0C:4B:16:A1
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137372e3131362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:5c:5d:a5:dd:d9:39:40:b8:a3:b9:64:22:7e:f4:5f:f7:
         0f:d8:9c:7c:58:bc:10:21:cd:d8:e0:30:e4:eb:9f:3a:19:c8:
         7e:85:40:e4:b3:28:b0:9d:4c:cd:0f:36:ff:c8:70:bf:da:01:
         2d:2b:9d:80:a6:d6:4f:f6:02:7d:3e:b5:da:bd:26:4f:bb:56:
         66:ba:8e:d5:54:fa:73:4b:d5:19:7b:04:d6:85:63:df:50:5c:
         2b:f9:b6:34:42:43:db:b5:d7:f3:93:53:59:05:f9:68:7c:a8:
         95:5e:1f:f4:ee:df:ce:b2:c2:68:41:fd:ee:7a:83:e3:bb:76:
         42:f8:25:c5:57:7a:48:ee:2c:2d:d9:06:36:2b:b2:cd:78:5b:
         63:ba:3e:11:9d:a0:f3:f8:9a:d2:33:e9:e2:fe:82:aa:12:77:
         ee:4f:1a:d4:00:ed:b0:07:35:51:6f:f6:d0:1e:78:08:20:e4:
         33:95:42:e9:6f:0c:11:41:60:f0:40:01:9b:36:2f:81:44:31:
         49:11:ff:2f:7a:1b:e2:94:1b:74:c3:8a:43:cd:e1:ea:95:72:
         98:10:39:99:e8:4a:76:90:c3:7f:f2:22:1c:5a:7e:bc:dc:70:
         87:50:1a:9f:c1:67:af:39:3c:3e:eb:f1:3c:49:d5:4a:af:46:
         41:12:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net