Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3332203d3e203531313637.roa
File:                     3138352e3230382e3230372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          +xRXQj6592ympshkRpSFuo+eef/XCF5Nax4pbXBE6fc=
Subject key identifier:   13:5A:E9:1B:D8:E0:6F:57:75:74:D1:5E:65:75:8C:7A:24:2E:7C:73
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6EDDC4483358767AF6B0F3BC2B0EACE65565C3C7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:15 +0000
ROA not before:           Sat 22 Oct 2022 04:29:15 +0000
ROA not after:            Sat 21 Oct 2023 04:34:15 +0000
asID:                     51167
IP address blocks:        185.208.207.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:dd:c4:48:33:58:76:7a:f6:b0:f3:bc:2b:0e:ac:e6:55:65:c3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:15 2022 GMT
            Not After : Oct 21 04:34:15 2023 GMT
        Subject: CN=135AE91BD8E06F577574D15E65758C7A242E7C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1e:e1:32:3c:d3:fd:b8:d8:3f:bd:ee:c3:ce:
                    fa:99:92:c5:bb:2a:13:2f:29:aa:86:0b:42:0e:6d:
                    fe:1c:b5:35:66:51:c8:5d:c6:95:3d:43:dd:a3:42:
                    32:c9:ba:9c:b8:b8:30:99:de:ba:06:bc:da:82:42:
                    d8:11:04:01:dd:97:57:e6:1d:97:71:0a:c7:11:ee:
                    ab:36:bb:2e:97:b4:86:a0:67:e8:5b:07:ef:34:42:
                    a1:99:8a:b9:f4:af:d5:81:98:b4:2b:59:d9:c1:a3:
                    aa:49:47:62:e3:13:47:5b:61:49:52:8c:25:bf:ff:
                    29:6b:7a:5b:81:a4:31:f2:8e:14:d9:62:3b:bb:09:
                    43:4c:a3:26:54:3f:69:7e:67:a6:5c:a8:a6:09:5e:
                    56:3b:e2:34:85:69:c4:b2:1a:e9:37:a5:37:18:6a:
                    5f:3e:4b:e7:96:9a:35:46:18:bf:19:39:2c:b1:ee:
                    be:aa:f4:29:a1:66:80:7d:64:ec:4f:b3:8c:ec:01:
                    ea:cb:21:e2:e1:b4:a7:20:78:c8:da:30:ce:c2:30:
                    76:34:e5:92:6a:84:a0:e2:c6:f8:bb:ef:e5:90:2c:
                    05:0e:a1:a2:0f:32:54:58:e3:a1:e0:fa:c3:94:88:
                    90:90:5a:e9:30:77:d7:2c:d3:14:ee:14:1b:a8:7f:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5A:E9:1B:D8:E0:6F:57:75:74:D1:5E:65:75:8C:7A:24:2E:7C:73
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230372e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:f4:e5:19:65:48:53:84:32:26:60:a7:bf:42:34:74:8d:91:
         b3:21:89:15:81:cd:3c:92:3b:f9:09:fa:49:72:40:f4:8b:fa:
         7b:95:4f:e3:27:bb:0e:ec:97:71:c7:ca:77:60:4b:b6:8f:8c:
         7b:70:a3:eb:b0:db:2b:78:33:f7:0d:71:42:30:2c:3a:d1:1a:
         ad:fe:9c:6c:e3:c1:4d:13:75:58:86:3a:f4:be:c3:89:c1:a7:
         5f:8a:57:cb:66:33:07:9e:22:10:f6:e4:af:be:e6:2f:15:94:
         52:bb:19:60:c4:20:85:5f:18:d8:2e:e1:aa:f3:8c:c0:a4:dd:
         6d:9a:10:e8:af:13:80:a3:52:fa:48:8c:83:27:a1:44:d6:1b:
         fe:e7:0d:7f:71:59:ec:71:26:7d:3a:b8:bb:06:80:b4:2b:b1:
         e5:11:60:d5:db:c1:16:dd:51:ab:4b:cc:11:6a:6c:fa:32:94:
         af:43:d7:95:4f:56:92:2e:66:cf:f2:6a:f3:e0:ab:63:4a:45:
         5d:fd:c8:3e:a5:e0:62:d7:47:e7:69:06:fb:0c:b1:a7:14:84:
         7c:63:8e:2c:14:9f:24:9c:f3:b3:f2:96:54:4c:78:e8:25:d5:
         72:24:1e:b7:4d:ef:a6:90:38:d4:07:97:bf:c7:4c:d1:97:d0:
         e8:3d:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net