Route Origin Authorization

$ cd rpki1.terratransit.de/repo/TerraTransit/8/

$ rpki-client -vvf 3138352e3139332e31362e302f32342d3234203d3e203230343733.roa
File:                     3138352e3139332e31362e302f32342d3234203d3e203230343733.roa (download)
Hash identifier:          QCUX85EVVR/kUysqD75zuEYX16/1XBr2FJYFsXavvg4=
Subject key identifier:   31:97:1C:44:76:67:04:8A:EC:C6:BE:E3:97:32:44:1A:A6:41:B2:7B
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       2F168C25F648E4031B2AA8EFC718F573D03CA70E
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3138352e3139332e31362e302f32342d3234203d3e203230343733.roa
ROA valid until:          Oct 21 04:34:02 2023 GMT
asID:                     20473
IP address blocks:
    1: 185.193.16.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:16:8c:25:f6:48:e4:03:1b:2a:a8:ef:c7:18:f5:73:d0:3c:a7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:02 2022 GMT
            Not After : Oct 21 04:34:02 2023 GMT
        Subject: CN=31971C447667048AECC6BEE39732441AA641B27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:69:04:3f:05:a8:8f:b7:70:a3:4b:dd:c5:
                    2a:03:9a:02:b3:03:6c:31:d8:6a:7b:39:43:af:1e:
                    fa:39:6c:24:82:60:91:b2:41:6a:a9:fc:e2:15:69:
                    85:4b:ea:60:f7:74:fc:eb:e8:c2:3c:6e:48:ad:33:
                    e0:c2:b2:04:be:11:d4:fe:04:f4:dc:20:54:3c:e3:
                    e8:b3:cd:bb:ee:1a:a8:91:bb:e2:23:ab:d2:7b:12:
                    ef:ec:59:31:03:e2:f2:64:77:f4:f9:46:ac:29:ab:
                    b5:0b:99:3d:9a:1d:44:33:9c:5b:95:b4:5f:0f:b0:
                    bf:b7:38:b3:40:da:c4:3d:5a:23:fe:76:36:81:4d:
                    59:cc:69:5c:c2:2f:ac:92:31:ab:97:82:1f:e1:1e:
                    bf:a4:d5:99:44:38:55:d2:16:75:d6:31:6c:03:23:
                    30:3a:f4:de:0f:ec:71:44:49:9a:58:bd:33:b3:7d:
                    f5:ca:71:04:5d:a3:83:43:78:d7:07:29:38:a5:8a:
                    bc:c0:7e:03:4c:87:df:f4:a4:3b:6e:6d:9a:f9:4b:
                    55:b1:98:79:cc:69:98:dc:ad:46:bd:3b:47:65:a4:
                    2c:84:ca:48:af:f7:f9:ae:27:ee:68:3f:80:75:f1:
                    e2:fe:86:7b:b8:0d:9c:a5:6b:94:04:ab:8c:b8:8b:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                31:97:1C:44:76:67:04:8A:EC:C6:BE:E3:97:32:44:1A:A6:41:B2:7B
            X509v3 Authority Key Identifier: 
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3138352e3139332e31362e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:ee:48:89:36:84:96:c8:84:7f:31:1a:14:ba:fa:da:ef:
         05:57:e5:85:77:92:ff:09:43:41:89:6a:f7:12:6d:00:51:a0:
         32:12:43:89:76:38:26:cc:69:b7:52:17:54:17:8e:51:67:b1:
         cd:47:76:8e:1a:18:db:b4:d7:3d:0a:3f:5c:01:55:c2:e2:19:
         29:89:14:1f:28:fe:f7:d3:52:f7:b0:21:51:40:a9:d0:38:92:
         23:d8:31:40:7c:a0:19:39:5b:f4:7a:88:b4:2e:b3:89:72:36:
         3f:87:e4:b3:50:a2:fc:eb:f2:fe:af:5a:2a:8a:cc:1a:18:88:
         de:60:cf:2e:7d:ce:73:9e:88:4f:78:12:39:03:a7:4f:8c:0c:
         f4:6b:6c:d4:9d:6f:5d:38:a5:5c:b7:72:01:74:dc:8c:71:00:
         ed:11:e7:54:1a:36:54:b8:47:6b:83:2f:9b:fb:a5:4b:af:cb:
         e7:8a:78:24:3b:a6:bd:5c:7d:7b:82:00:c3:04:f5:42:bb:87:
         57:88:55:61:26:df:ab:f6:e0:7e:be:2f:35:de:d7:9b:5d:de:
         65:0d:0a:5c:41:52:1b:d3:b5:c9:d4:4b:31:23:52:f6:0a:59:
         e8:13:b8:74:ff:95:ea:f6:37:94:cc:37:23:8b:f3:e0:26:6b:
         3f:b7:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 18:13:55 2022 by rpki-client.