Route Origin Authorization
Location:                 rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36332e302f32342d3234203d3e2031323339.roa (download)

Subject key identifier:   3C:42:7D:76:AE:91:9F:B1:84:8D:6D:04:62:69:44:4D:FC:E8:57:41 
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
asID:                     AS1239
Prefixes:
    1: 212.103.63.0/24 maxlen: 24

--
$ test-roa -p rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36332e302f32342d3234203d3e2031323339.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a0:24:2c:3e:bd:ac:1a:c2:5f:4c:2d:91:40:10:d7:32:99:50:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:28 2022 GMT
            Not After : Oct 21 04:33:28 2023 GMT
        Subject: CN=3C427D76AE919FB1848D6D046269444DFCE85741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:84:68:b9:5b:3c:71:b9:ca:e2:60:97:0c:e9:
                    fb:8c:db:18:5a:3e:24:2e:c4:c8:5c:6a:2e:75:73:
                    a9:23:71:ec:16:e3:14:83:67:a5:47:41:80:b6:16:
                    d7:ba:d9:5e:15:50:1b:84:c6:f6:c7:2e:e6:6c:c1:
                    3e:a8:57:e9:77:40:41:1d:f5:76:7e:9c:4a:ed:35:
                    99:4d:20:66:8a:18:7e:0e:7a:34:f5:0a:5a:59:88:
                    76:97:89:58:b7:33:9b:14:40:65:b5:5c:9a:a7:20:
                    31:b5:ea:2e:c8:99:62:f0:1c:49:41:e5:6a:be:e2:
                    c2:cb:34:a8:b1:17:20:71:43:a3:60:f7:13:a5:97:
                    81:1a:a5:19:c4:26:cc:af:f3:b0:6d:a4:d4:7c:81:
                    8b:48:36:d8:37:d6:04:5c:bb:70:d8:f0:d4:b5:18:
                    6e:e2:cf:d0:01:37:89:fd:76:dc:29:42:37:c3:ce:
                    bb:68:fa:23:c5:8e:04:80:33:41:66:a6:cd:49:a7:
                    5e:e6:8a:3b:9a:72:25:db:6c:df:52:f5:08:fb:34:
                    4f:4b:89:ee:3c:78:b3:a1:0a:d6:6f:31:38:5a:9e:
                    14:2c:e0:4c:9d:19:f4:60:95:ce:da:f8:85:99:48:
                    a4:7d:b7:e0:5c:e6:8c:8d:f6:61:59:c1:dd:4a:70:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3C:42:7D:76:AE:91:9F:B1:84:8D:6D:04:62:69:44:4D:FC:E8:57:41
            X509v3 Authority Key Identifier: 
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231322e3130332e36332e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.103.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:d5:03:8c:79:5d:f6:d0:63:d5:6d:a2:d9:e0:f2:c5:0e:
         74:fb:38:b8:01:24:d9:6e:7d:52:55:16:6e:15:3c:e9:5e:01:
         e7:eb:94:96:b5:05:a3:d5:73:e4:41:77:b5:98:5a:d9:14:ca:
         cf:45:9c:f5:60:21:00:c8:bd:fd:87:f2:01:bc:24:db:e5:4c:
         8f:73:fd:5f:c4:6d:e4:b1:3b:8a:1f:83:f2:c6:93:9e:db:b6:
         b4:df:5e:03:5e:90:3d:2d:12:9a:fe:6c:52:03:b4:8f:ed:19:
         c2:a0:bc:57:5a:4e:68:d0:e4:59:0d:56:06:3c:b1:01:a6:ab:
         c0:41:48:6a:5a:21:68:57:57:b6:08:17:4c:56:05:8d:b6:1e:
         19:7d:9d:8a:81:51:17:86:2e:53:1b:96:f8:ec:73:2c:42:8f:
         b0:7c:d1:7a:b1:0b:ea:bc:02:5b:42:19:9b:4a:9c:43:4c:61:
         77:3f:26:6d:a5:f4:a0:64:c5:af:95:9b:99:41:44:12:76:73:
         f9:37:d8:31:77:c4:60:16:db:ee:37:99:42:90:c0:83:10:0d:
         20:42:2a:97:e0:6b:d8:6c:88:83:ad:93:de:22:2f:5d:80:5b:
         35:ef:20:2c:8f:c8:9e:a6:e7:80:23:64:19:3a:58:7f:8f:c2:
         f8:25:36:fc
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUPKAkLD69rBrCX0wtkUAQ1zKZUNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MjhaFw0yMzEwMjEwNDMzMjhaMDMxMTAvBgNV
BAMTKDNDNDI3RDc2QUU5MTlGQjE4NDhENkQwNDYyNjk0NDRERkNFODU3NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlhGi5WzxxucriYJcM6fuM2xha
PiQuxMhcai51c6kjcewW4xSDZ6VHQYC2Fte62V4VUBuExvbHLuZswT6oV+l3QEEd
9XZ+nErtNZlNIGaKGH4OejT1ClpZiHaXiVi3M5sUQGW1XJqnIDG16i7ImWLwHElB
5Wq+4sLLNKixFyBxQ6Ng9xOll4EapRnEJsyv87BtpNR8gYtINtg31gRcu3DY8NS1
GG7iz9ABN4n9dtwpQjfDzrto+iPFjgSAM0Fmps1Jp17mijuaciXbbN9S9Qj7NE9L
ie48eLOhCtZvMThanhQs4EydGfRglc7a+IWZSKR9t+Bc5oyN9mFZwd1KcLZ/AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUPEJ9dq6Rn7GEjW0EYmlETfzoV0EwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMjMxMzIyZTMxMzAzMzJlMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzIzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQA1Gc/MA0GCSqGSIb3DQEBCwUAA4IBAQCBoNUDjHld
9tBj1W2i2eDyxQ50+zi4ASTZbn1SVRZuFTzpXgHn65SWtQWj1XPkQXe1mFrZFMrP
RZz1YCEAyL39h/IBvCTb5UyPc/1fxG3ksTuKH4PyxpOe27a0314DXpA9LRKa/mxS
A7SP7RnCoLxXWk5o0ORZDVYGPLEBpqvAQUhqWiFoV1e2CBdMVgWNth4ZfZ2KgVEX
hi5TG5b47HMsQo+wfNF6sQvqvAJbQhmbSpxDTGF3PyZtpfSgZMWvlZuZQUQSdnP5
N9gxd8RgFtvuN5lCkMCDEA0gQiqX4GvYbIiDrZPeIi9dgFs17yAsj8iepueAI2QZ
Olh/j8L4JTb8
-----END CERTIFICATE-----

Generated at Sat Oct 22 06:56:14 2022 by LibreSSL & rpki-client.