Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e20323037323739.roa
File:                     3138352e3233302e3133372e302f32342d3234203d3e20323037323739.roa (raw, json)
Hash identifier:          tM65zWozxOy94Q2p5nnWryj9cWxnXSOtcdDjym2n+Lo=
Subject key identifier:   7D:61:66:91:21:4E:E1:AF:8D:0D:D1:0E:C4:74:A0:BE:C3:B6:DA:19
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       050D280068A8290EB0F5A8766CAC00A7EC65EC9F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e20323037323739.roa
Signing time:             Thu 10 Nov 2022 10:25:21 +0000
ROA not before:           Thu 10 Nov 2022 10:20:21 +0000
ROA not after:            Thu 09 Nov 2023 10:25:21 +0000
asID:                     207279
IP address blocks:        185.230.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0d:28:00:68:a8:29:0e:b0:f5:a8:76:6c:ac:00:a7:ec:65:ec:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 10 10:20:21 2022 GMT
            Not After : Nov  9 10:25:21 2023 GMT
        Subject: CN=7D616691214EE1AF8D0DD10EC474A0BEC3B6DA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:de:f7:73:84:b6:52:0e:f6:19:c6:73:96:
                    3a:dd:fb:ba:e9:77:a9:f4:fd:79:af:a9:5d:84:63:
                    91:de:36:ad:a4:d6:7e:ac:0b:7c:77:bb:4c:9e:f0:
                    4b:62:9a:55:74:b2:88:10:ee:36:7f:77:fe:c9:1c:
                    ab:ef:5b:86:33:82:3f:89:69:d5:8f:de:a9:83:05:
                    b2:33:92:99:44:1c:a1:b7:08:8b:94:db:51:65:7c:
                    43:bf:a2:81:14:f3:41:3a:b9:72:52:c6:f7:b8:26:
                    17:57:1a:98:c2:c0:3a:49:c2:4c:64:f6:60:de:61:
                    3c:c4:da:e7:c0:8f:ae:b2:42:c5:d3:c9:65:e6:f0:
                    e1:bc:55:61:a0:e6:4e:8e:25:1c:a0:dc:11:fc:70:
                    13:2f:7d:3e:87:f9:92:cb:5c:8d:63:90:2e:97:bb:
                    52:79:88:7a:f5:c7:30:b2:a7:63:a3:2b:8c:86:6c:
                    4b:7c:7c:e9:d1:41:10:8f:f4:40:49:03:01:ad:9b:
                    46:d9:05:05:bd:8e:33:62:d9:0f:cf:7c:9b:be:9e:
                    74:9b:c1:30:f9:1d:08:6b:89:41:d0:01:29:ea:d3:
                    d3:26:95:3a:6a:17:88:12:c3:ed:2b:de:08:b0:e3:
                    39:fb:e2:12:90:80:ef:58:90:17:fa:62:fb:73:7d:
                    5d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:61:66:91:21:4E:E1:AF:8D:0D:D1:0E:C4:74:A0:BE:C3:B6:DA:19
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133372e302f32342d3234203d3e20323037323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:46:c9:6e:a6:09:09:61:32:54:4c:6c:7a:30:0e:85:f9:40:
         86:05:14:9d:a4:17:6a:58:77:f0:eb:d8:54:cc:d0:8b:02:fb:
         50:53:80:bc:05:66:5f:3a:db:f2:77:6f:1a:94:5d:69:9f:14:
         4c:89:f3:79:17:88:1b:1f:ba:ed:07:d7:86:c6:08:29:77:c0:
         27:88:8a:52:4a:2f:3e:f8:5f:6b:5b:54:83:b7:35:42:f9:c6:
         b4:45:96:69:b3:bf:c9:9d:2c:46:64:f2:9d:42:ce:57:14:76:
         ad:9d:55:cd:f8:ef:e1:c0:4d:b1:d7:e9:5a:d9:c1:06:67:7d:
         e1:17:a6:64:6b:b0:72:76:ed:6b:f8:2c:dd:c7:7e:6e:50:f2:
         28:3d:ee:52:d5:c2:dd:6b:65:0b:98:85:27:54:98:99:62:56:
         74:50:86:52:5e:9e:b9:5f:a5:cd:0c:6b:85:ee:8e:b2:f0:33:
         53:53:44:18:60:82:35:7b:7c:83:35:7c:2e:de:cd:e1:c9:13:
         7c:d9:12:99:07:27:b3:33:53:47:8f:ec:3c:22:08:d0:4f:fa:
         cf:8c:19:ea:6b:54:85:58:3f:f5:45:c6:e4:10:60:f4:5a:f0:
         5e:0f:3e:05:bf:3d:bf:94:97:b6:5a:07:6c:9e:78:3d:f4:fe:
         f5:47:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net