Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e2037373234.roa
File:                     3138352e3234392e3232372e302f32342d3234203d3e2037373234.roa (raw, json)
Hash identifier:          yVJ5gvGBL+e5Sp1NpKaYesdGaaEUWEwEdj2IlgjjhdY=
Subject key identifier:   D6:10:E7:26:D9:D9:9E:ED:AB:89:6C:87:C9:88:9D:94:C5:01:2B:6F
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       587420648F3A64048D9294ED14BC23051ED5E4D4
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e2037373234.roa
Signing time:             Tue 28 Jun 2022 04:41:02 +0000
ROA not before:           Tue 28 Jun 2022 04:36:02 +0000
ROA not after:            Tue 27 Jun 2023 04:41:02 +0000
asID:                     7724
IP address blocks:        185.249.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:74:20:64:8f:3a:64:04:8d:92:94:ed:14:bc:23:05:1e:d5:e4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:02 2022 GMT
            Not After : Jun 27 04:41:02 2023 GMT
        Subject: CN=D610E726D9D99EEDAB896C87C9889D94C5012B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:59:06:74:a9:b6:1d:73:31:bd:1b:60:bd:
                    3e:85:2b:9c:62:4c:3d:69:96:91:80:8e:2b:71:a1:
                    74:dd:6d:6d:aa:01:4b:7c:02:b2:39:ff:fa:08:89:
                    99:e0:2d:2c:fb:ea:81:ba:58:d6:c9:d2:30:44:5a:
                    42:27:54:08:a6:b5:87:43:63:d3:a5:fb:7a:b5:06:
                    65:6d:6c:39:fa:d2:76:7f:b2:6f:01:74:58:85:ca:
                    ff:6a:e4:5e:b4:e5:5b:8d:97:ee:0f:68:fe:99:d5:
                    15:d4:7c:b3:09:ac:9f:45:9c:26:53:28:26:65:36:
                    77:fb:7b:a9:8b:72:46:ab:16:89:b7:99:68:14:9c:
                    e6:53:68:f8:b2:34:36:a0:d6:45:37:b1:a3:52:6f:
                    35:fc:70:4c:18:15:81:63:10:f5:98:cd:f3:6d:12:
                    43:f2:74:cf:51:f6:fa:bb:67:23:ad:e4:53:0c:57:
                    b5:83:81:11:ed:8a:10:03:45:4c:60:56:96:d6:c8:
                    52:95:41:c0:fc:56:20:42:59:49:c1:5d:34:ae:60:
                    3a:83:04:5e:f5:15:1e:ad:45:6a:1b:ea:08:0c:c6:
                    ca:4f:4f:1c:bf:ca:22:29:dd:f9:c6:5f:82:e6:2c:
                    3c:26:20:5f:c2:e5:b0:1f:4a:47:7b:e2:03:01:52:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:10:E7:26:D9:D9:9E:ED:AB:89:6C:87:C9:88:9D:94:C5:01:2B:6F
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3234203d3e2037373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:3e:31:22:bd:0e:d1:c3:72:5d:45:d1:80:50:c2:c1:58:
         1b:5f:ab:65:18:3e:fe:01:04:ac:d7:c7:f3:52:a0:cc:93:87:
         27:cf:af:d2:6f:47:c9:b7:c5:4a:bc:01:f6:89:5d:38:77:83:
         f0:93:68:fb:f5:6c:cd:1d:3c:d2:d5:42:35:8a:75:b7:21:1f:
         e3:ff:d9:9c:53:01:9a:a9:88:58:8d:6e:a9:c3:7c:d3:18:42:
         85:5b:5e:fc:23:f4:33:75:70:5e:8f:9d:9f:ab:4b:6c:89:ef:
         76:3d:11:60:4d:09:8c:6f:d4:66:a1:96:97:0c:72:67:94:63:
         8a:6b:70:5d:67:a8:ca:6b:84:36:23:22:02:af:76:34:76:d8:
         54:8a:b3:c2:66:15:7b:cd:f5:fd:7c:43:aa:82:b1:b5:af:d2:
         ee:e6:e8:a9:c4:b0:d8:b2:1f:48:f9:0e:fc:08:ac:d3:c6:81:
         dd:63:48:af:48:63:b4:ff:83:64:20:77:e8:fc:df:ce:b8:43:
         fd:06:75:74:8c:34:13:c3:a8:ee:61:98:0b:cb:55:0e:a3:73:
         34:f6:c7:39:91:77:5a:4a:fd:6d:b9:94:9a:fe:57:1a:8c:f2:
         65:2b:d5:84:b0:63:38:61:3b:28:55:59:40:51:32:f2:e1:c4:
         0c:14:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net