Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38332e302f32342d3234203d3e203230343733.roa
File:                     3139322e3134352e38332e302f32342d3234203d3e203230343733.roa (download)
Hash identifier:          U5C17c0cmTergif9vSvAq92AGaY5PPw+nTdoEeAeVXo=
Subject key identifier:   ED:33:6F:94:8F:CC:EC:82:F1:57:57:AB:E1:38:E8:B0:38:98:07:3E
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3647F62BE8DB5D48A314477ADBC5B0EF79981E53
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38332e302f32342d3234203d3e203230343733.roa
ROA valid until:          Oct 21 04:33:15 2023 GMT
asID:                     20473
IP address blocks:
    1: 192.145.83.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:47:f6:2b:e8:db:5d:48:a3:14:47:7a:db:c5:b0:ef:79:98:1e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:15 2022 GMT
            Not After : Oct 21 04:33:15 2023 GMT
        Subject: CN=ED336F948FCCEC82F15757ABE138E8B03898073E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:f5:1f:0a:22:c4:62:c6:ce:d2:d3:3e:56:
                    24:3a:fd:7a:f6:ab:f6:aa:77:54:18:6f:37:1f:75:
                    22:74:3d:01:5b:72:47:ca:52:8e:7e:47:f8:d9:9c:
                    5a:d2:e9:05:51:f0:19:42:0a:bf:47:c0:86:1f:08:
                    9a:c7:70:5f:13:37:97:25:6a:24:19:87:56:cc:ae:
                    82:6b:71:f4:62:05:ee:da:8c:de:ea:87:bf:e3:f0:
                    94:ab:15:6b:a2:d4:a9:fa:04:13:8a:42:1d:eb:fb:
                    02:72:80:9e:d3:b1:b6:74:1d:4f:8a:a7:98:6f:5f:
                    c5:63:e0:9a:c6:e5:ff:03:25:2b:fe:c1:14:6d:c2:
                    ba:1c:15:c2:a9:db:aa:4e:ca:f1:2a:92:b7:ea:b7:
                    24:03:84:14:97:a1:65:1c:14:cd:8f:72:1e:54:0f:
                    79:51:9e:2a:76:30:15:10:35:77:4c:35:ce:5f:ff:
                    40:0c:f7:a4:a1:47:16:bc:bb:f1:66:c1:39:b8:8c:
                    cb:00:d9:de:9a:1a:bb:af:29:22:c5:5e:92:00:84:
                    2d:5c:ae:13:6f:80:a5:e0:cf:22:77:87:85:b0:55:
                    dd:0f:4d:35:83:44:56:aa:2f:78:5a:66:17:17:e4:
                    18:e7:be:c8:57:24:27:dc:73:84:77:61:62:e4:eb:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                ED:33:6F:94:8F:CC:EC:82:F1:57:57:AB:E1:38:E8:B0:38:98:07:3E
            X509v3 Authority Key Identifier: 
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38332e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:9f:d9:31:dc:c2:7f:62:c9:0b:51:ff:a6:e0:f1:1b:a3:20:
         68:ed:ba:1f:bf:f0:7d:2f:61:3f:57:13:40:6d:4e:42:61:e1:
         28:42:51:5f:b0:ea:e6:31:44:1e:0c:6a:d3:9d:54:5f:5c:23:
         ac:23:46:7d:fd:67:a3:f6:97:e8:99:93:5b:90:cb:f1:50:0d:
         0e:02:f2:ef:91:30:eb:4c:07:4e:cc:ec:5f:a8:cc:a8:2c:78:
         03:8b:fb:ba:fc:0a:50:5f:75:77:77:bf:97:28:e5:fe:49:1b:
         9d:5a:e0:d3:bf:87:ee:e1:47:aa:ab:2f:23:4f:f9:0c:1e:dd:
         94:aa:c8:2e:bb:df:df:6a:7e:06:5f:60:41:46:01:b4:03:ea:
         ce:81:ee:4c:21:a7:b8:f5:cd:f5:93:6c:36:71:df:ad:34:24:
         b7:ac:33:7e:ee:c4:8c:d8:a8:0d:a9:9e:ac:8a:a4:00:3c:ce:
         fc:44:11:f3:3b:e6:a5:16:bd:a4:fe:fb:c1:2e:9b:0d:7c:9e:
         20:88:4a:5d:17:c0:c7:a2:f2:53:30:0a:fd:08:47:7f:27:e2:
         9e:49:ef:6d:8b:85:96:fb:09:5e:29:20:e9:c7:fe:19:6e:f6:
         d9:8e:5c:ba:95:26:d0:24:34:0c:ce:8e:b8:6d:41:50:6d:ea:
         9d:63:1c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:46:24 2022 by rpki-client.