Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32342d3234203d3e20323132373933.roa
File:                     3138352e3138372e3136382e302f32342d3234203d3e20323132373933.roa (raw, json)
Hash identifier:          xyfODK/EjdpA973wX+ADKfxyzvQRZFaRvVv/f9bGEPE=
Subject key identifier:   37:52:4C:50:8A:00:DE:A1:25:4D:4D:B2:E6:37:3B:30:93:4D:77:BF
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       179AA5868C177A8247EA39C5BDD49040B8B5E3DB
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32342d3234203d3e20323132373933.roa
Signing time:             Tue 28 Jun 2022 04:40:44 +0000
ROA not before:           Tue 28 Jun 2022 04:35:44 +0000
ROA not after:            Tue 27 Jun 2023 04:40:44 +0000
asID:                     212793
IP address blocks:        185.187.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9a:a5:86:8c:17:7a:82:47:ea:39:c5:bd:d4:90:40:b8:b5:e3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:44 2022 GMT
            Not After : Jun 27 04:40:44 2023 GMT
        Subject: CN=37524C508A00DEA1254D4DB2E6373B30934D77BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:68:60:ed:78:17:14:e5:df:1a:f5:7e:a1:
                    20:b3:26:4b:51:4c:b6:0d:c9:7b:f7:95:69:09:b5:
                    11:1a:b2:f7:66:a1:75:c7:bd:df:a8:1e:35:7c:b4:
                    ad:00:10:48:db:82:5d:07:86:ae:81:de:40:06:2e:
                    30:6c:ee:94:e7:e0:19:3c:24:fa:d5:7b:a0:97:2a:
                    45:e0:ee:d3:b0:e4:3d:0f:0d:8c:98:8b:c3:96:3d:
                    f2:48:56:ee:44:f5:66:c9:8a:55:d8:62:4c:6d:15:
                    a0:7a:1b:1c:7f:ea:28:88:f7:dc:b9:78:da:17:93:
                    53:8f:21:67:d3:18:a7:ed:f6:68:05:1e:c8:68:9d:
                    b0:43:37:f9:2f:64:44:a4:3a:06:6d:c1:76:46:3d:
                    97:6e:5f:4b:0d:4c:72:f5:9a:56:7b:a8:5c:12:26:
                    25:d2:69:01:fe:11:9c:b6:a2:4a:aa:c4:45:e0:4e:
                    91:d1:16:37:2b:79:ef:ee:a2:cc:2f:81:b7:9b:46:
                    f3:98:e6:63:a0:e4:9c:57:e8:15:3c:3a:d9:d9:e9:
                    fd:67:df:f9:d1:73:32:0e:00:d2:d7:4f:66:28:f6:
                    e2:93:32:b6:5f:00:62:59:61:c0:2b:93:f1:3c:b1:
                    2d:e9:87:a4:24:aa:1b:37:c5:e0:7b:4f:11:68:39:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:52:4C:50:8A:00:DE:A1:25:4D:4D:B2:E6:37:3B:30:93:4D:77:BF
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32342d3234203d3e20323132373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:a0:41:8b:47:d9:5b:d8:da:67:e3:35:8e:70:85:b1:d4:15:
         38:da:62:10:71:ea:42:36:3e:88:b9:d2:0f:98:9a:d6:52:1d:
         41:9d:2c:96:1b:54:14:df:9b:81:46:40:8e:e6:40:29:ec:05:
         89:6c:4e:35:66:2e:ae:e9:da:93:17:fb:c9:db:d0:34:a0:91:
         be:6a:73:06:63:6d:4f:50:ce:6a:14:38:84:70:fa:f4:ed:9b:
         6e:dd:14:ef:ad:f2:ce:f5:8c:3c:ab:5a:fb:92:e3:8e:9b:92:
         a6:cf:a9:83:21:05:18:3f:2c:eb:97:c5:11:6c:19:eb:7a:63:
         b2:dc:3e:f6:1c:90:7c:d5:94:d8:e9:2d:e4:0c:82:c5:2a:5a:
         e1:c3:8f:57:74:ac:89:63:ee:52:eb:09:20:c9:14:ae:d5:bb:
         78:3a:97:6c:a4:2b:11:c8:30:01:f2:b8:ef:64:99:4e:c0:b4:
         8e:0e:aa:2d:d2:0f:ec:8b:e8:f4:01:65:23:f1:0a:7f:25:65:
         bd:24:05:c6:04:d8:96:56:f1:42:fe:68:94:68:a3:8d:2b:fd:
         1f:bc:fc:ae:27:e0:8f:b4:5a:56:03:9d:73:76:5d:ba:65:14:
         8b:e1:93:b4:b5:2d:3a:9c:1e:80:bc:78:86:6e:e0:e5:6a:c0:
         b2:cb:9b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net