Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/

$ rpki-client -vvf Ssz0Lf7BgzzjIs2Fe2TTUDabldE.roa
File:                     Ssz0Lf7BgzzjIs2Fe2TTUDabldE.roa (download)
Hash identifier:          1oHMUjP5fT2oRpZ2oDZml7Pt/rd251lsV9WWMI+BlAk=
Subject key identifier:   4A:CC:F4:2D:FE:C1:83:3C:E3:22:CD:85:7B:64:D3:50:36:9B:95:D1
Certificate issuer:       /CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
Certificate serial:       F23B97
Authority key identifier: 15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/Ssz0Lf7BgzzjIs2Fe2TTUDabldE.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 146.19.232.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15874967 (0xf23b97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
        Validity
            Not Before: Mar  7 17:31:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4accf42dfec1833ce322cd857b64d350369b95d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:90:81:12:d2:09:46:ee:10:1c:55:1f:5a:
                    f6:89:57:01:9f:d1:6e:34:74:8d:bb:74:91:98:c7:
                    da:a5:d0:e6:2e:8c:30:36:87:19:80:f1:e6:1d:7e:
                    c0:45:85:7a:a5:86:b9:6b:ed:15:79:3f:96:fe:1a:
                    c4:9c:92:4c:6c:be:60:3e:a3:90:ac:08:22:9c:10:
                    05:36:f9:80:1e:14:2b:c2:73:9f:0c:a1:66:c9:4f:
                    36:48:62:72:c8:89:d6:a6:a2:72:23:f9:0e:a2:27:
                    49:d0:ce:1b:9b:01:f5:07:20:20:58:42:75:95:ce:
                    e4:e7:c7:a8:2c:b3:19:22:81:99:3e:18:38:0a:54:
                    10:b8:9f:8c:95:d1:89:0e:64:67:bd:d2:6f:c0:e7:
                    0d:48:6a:da:92:bf:61:05:a7:b9:3e:d8:b0:59:3c:
                    bf:5e:81:5c:e4:61:38:a1:4e:a4:44:bc:1d:e9:be:
                    05:ff:18:56:63:aa:1a:35:62:61:28:bf:57:95:22:
                    e3:d4:f5:d2:2e:5a:b1:02:1c:c3:ff:7a:e6:d5:c5:
                    66:9a:ff:d1:8e:6f:d6:86:1f:a2:e9:0a:6f:fa:15:
                    fe:70:a1:4b:a5:19:40:dd:b8:a3:52:4f:16:55:af:
                    5e:7d:cc:ac:f2:b2:5a:c4:54:de:3f:91:1c:52:93:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4A:CC:F4:2D:FE:C1:83:3C:E3:22:CD:85:7B:64:D3:50:36:9B:95:D1
            X509v3 Authority Key Identifier: 
                keyid:15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/Ssz0Lf7BgzzjIs2Fe2TTUDabldE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:a1:32:7b:81:c2:c6:48:ad:61:06:67:59:24:87:12:7c:
         df:59:75:0f:ec:44:26:93:93:b8:93:b3:07:c0:40:4a:c9:5c:
         cf:1e:0a:95:3a:4f:ba:06:17:f5:16:ff:6d:9f:3c:66:81:e7:
         03:aa:ff:34:13:71:12:57:ae:a3:70:a1:db:09:ff:52:4c:3e:
         59:f1:6a:1b:36:db:bb:3f:f2:06:06:4d:ba:56:da:3b:98:b3:
         b7:dd:66:89:9c:b2:0a:bf:cf:7e:c8:1b:4f:d8:55:e0:cc:51:
         66:c1:8a:36:7c:3d:62:30:59:9e:ca:62:51:a4:c2:b9:ee:c2:
         0c:f8:1f:d4:58:21:7a:b7:08:b2:c2:4f:db:86:a4:f2:45:ed:
         12:bf:8d:04:40:fb:78:c3:c2:79:f0:fe:be:6e:9e:59:a0:98:
         b9:bd:ed:3a:8c:f3:d4:5d:75:84:86:1b:24:fb:06:70:de:a9:
         19:00:70:78:4a:b3:76:b9:67:ae:c6:86:d6:01:1d:d4:62:52:
         f4:5b:cb:d3:25:e0:f3:ea:3a:90:7f:b2:f9:d6:65:de:35:08:
         8d:09:f6:91:a0:a4:e5:8c:9e:bb:66:26:a4:5b:53:71:73:cc:
         e3:5d:f1:db:a0:c2:67:b8:ee:54:ad:87:42:16:62:3b:78:cd:
         bd:84:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 13:31:30 2022 by rpki-client.