Route Origin Authorization
Location:                 rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3233203d3e2031323339.roa (download)

Subject key identifier:   5B:47:4D:A4:C0:9D:32:58:F4:69:6E:67:5C:2E:AD:75:2F:46:53:CF 
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
asID:                     AS1239
Prefixes:
    1: 194.195.88.0/23 maxlen: 23

--
$ test-roa -p rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3233203d3e2031323339.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4d:be:9c:65:4f:a5:22:b5:46:8e:6a:a1:90:a9:37:e5:b1:b9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:12 2022 GMT
            Not After : Oct 21 04:34:12 2023 GMT
        Subject: CN=5B474DA4C09D3258F4696E675C2EAD752F4653CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:d4:f0:b6:3d:cf:e1:23:0a:d3:d2:43:1b:
                    6a:a7:01:e3:65:12:a8:a7:53:6b:60:c0:d8:f1:72:
                    48:b3:a5:6d:dc:29:d8:7c:09:99:6b:4f:2c:cd:07:
                    d5:40:e5:5c:8f:a5:68:83:89:94:3c:c3:4a:9c:51:
                    80:1c:5f:94:c5:dd:ca:d2:90:cf:6f:9f:d5:1f:5c:
                    a0:11:42:67:9e:e9:84:92:f7:10:d8:79:a3:a3:ea:
                    be:b6:73:18:89:02:8d:39:36:ff:52:0c:40:4c:33:
                    b9:b5:ac:2f:df:54:d4:6f:b6:5c:4a:56:63:2d:81:
                    48:36:06:8a:3a:51:22:87:32:1d:d4:fd:b5:58:da:
                    08:e2:e3:d0:39:2d:ab:5f:d7:ab:b8:ea:cc:b6:d6:
                    15:d5:f6:6b:ba:e5:7e:b0:7b:2b:14:75:1a:72:fc:
                    12:23:2e:36:c8:d1:11:ae:a3:dd:6b:6c:34:78:56:
                    c3:28:7d:b7:bb:7e:d0:57:78:37:9e:34:2d:6a:88:
                    31:83:17:35:42:f4:f3:c7:00:18:8a:91:11:70:9e:
                    f2:22:08:78:39:49:fd:71:7b:71:1d:29:c8:4a:ce:
                    fd:a7:37:28:da:3b:d6:47:2e:52:5d:d1:3e:05:08:
                    e5:0b:27:ba:65:1d:10:2e:40:a0:96:36:e2:17:ec:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5B:47:4D:A4:C0:9D:32:58:F4:69:6E:67:5C:2E:AD:75:2F:46:53:CF
            X509v3 Authority Key Identifier: 
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32332d3233203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:60:c2:9b:d7:3d:18:7e:ec:67:76:09:0e:5e:b8:9c:9d:18:
         97:dc:27:ae:4e:55:a6:f0:b4:70:d2:fe:af:3e:a9:e7:53:05:
         a4:7c:30:b6:a0:d5:0b:04:68:34:17:39:fc:fd:ff:49:f9:01:
         cc:ca:89:79:d4:b1:48:d7:a3:b5:ea:e9:da:17:10:21:05:45:
         03:37:6a:48:ef:86:98:ef:7b:42:16:92:37:ad:31:c7:36:33:
         74:0f:60:94:b7:fc:92:94:30:d6:1a:39:4c:a2:58:50:b7:57:
         67:b8:d9:41:9d:9c:36:55:97:41:58:ef:15:30:32:e1:c5:d2:
         b9:c6:eb:9f:39:25:0a:75:29:fe:d8:c4:ec:a3:04:4d:fb:f1:
         da:81:8f:fe:7c:a4:86:69:d6:61:c4:38:2c:e5:5a:2b:f9:7f:
         db:b4:35:fb:19:d5:1f:2c:56:26:c3:6d:b8:e4:dd:9c:b8:7a:
         d0:f1:69:ad:bc:e2:7e:20:c0:65:56:52:40:f0:95:62:c5:b1:
         c4:19:bd:68:65:89:aa:d5:68:1e:bc:17:04:e9:b6:a1:13:2e:
         76:c9:e5:ac:a0:83:9e:fa:4d:a2:ac:10:8b:c4:74:fe:cb:47:
         50:9a:2c:7d:c3:81:6f:20:c1:55:77:93:35:12:fa:8f:fc:0d:
         61:2b:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Oct 22 06:56:30 2022 by LibreSSL & rpki-client.