Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gtHz9vTDDc1ZC66uTiEaI7bq4w8.roa
File:                     gtHz9vTDDc1ZC66uTiEaI7bq4w8.roa (download)
Hash identifier:          +/aT9SUt5CGDjRlp6Cymxi3ONhByB202iLhid2H1Hts=
Subject key identifier:   82:D1:F3:F6:F4:C3:0D:CD:59:0B:AE:AE:4E:21:1A:23:B6:EA:E3:0F
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       1E5326C9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gtHz9vTDDc1ZC66uTiEaI7bq4w8.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     48115
IP address blocks:
    1: 94.156.36.0/24 maxlen: 24
    2: 94.156.101.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508765897 (0x1e5326c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: May 10 10:23:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82d1f3f6f4c30dcd590baeae4e211a23b6eae30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:10:ec:8d:97:ed:73:5d:c3:82:b2:85:32:01:
                    bd:4e:2a:7e:56:46:b7:f0:9b:31:19:c9:99:df:0c:
                    ed:1b:b4:05:0d:0a:68:63:f1:89:ca:15:15:b1:ce:
                    7c:c1:fa:3c:ea:37:0c:4b:9c:3f:70:35:41:d7:26:
                    f2:1a:09:3b:29:30:38:b8:2b:6f:9c:d5:7a:df:ff:
                    f6:db:45:30:51:17:51:b2:83:1d:6d:52:b7:fd:0e:
                    80:6f:ed:d8:b9:34:5f:cc:9a:91:9b:e6:18:31:04:
                    33:9c:30:ec:cc:06:b2:0b:cd:49:30:73:58:f4:87:
                    e6:d4:21:eb:c5:57:d6:fe:7c:01:e2:74:39:fb:e8:
                    11:e1:7e:13:93:e8:98:6e:f4:f9:7d:c1:78:69:99:
                    f2:4d:88:93:33:93:0e:16:7f:14:c8:5e:30:ff:a3:
                    3f:b7:32:36:a2:0d:45:19:be:2d:f7:0a:4c:51:c5:
                    1f:0d:51:76:27:39:8b:4b:2f:51:d2:ce:81:78:c2:
                    92:8c:27:89:eb:87:61:96:ca:e9:e3:99:ef:47:d3:
                    c3:41:c0:e8:08:ba:85:34:39:40:90:d2:b4:c3:1f:
                    f7:16:d5:4d:17:ac:07:f5:59:fb:1b:d3:75:38:9c:
                    f5:d8:89:5f:3f:15:e9:62:27:d4:96:d7:7d:5f:6b:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                82:D1:F3:F6:F4:C3:0D:CD:59:0B:AE:AE:4E:21:1A:23:B6:EA:E3:0F
            X509v3 Authority Key Identifier: 
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gtHz9vTDDc1ZC66uTiEaI7bq4w8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.156.36.0/24
                  94.156.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:e6:84:cd:a4:68:ca:27:36:5c:b7:f9:d0:2e:b6:89:d3:
         c8:43:f3:78:fa:2a:d5:47:e3:d0:bd:57:11:3f:26:51:1c:c7:
         e1:ab:8b:48:5b:dd:76:f3:73:f5:90:2a:67:44:13:9e:01:81:
         fc:d6:a9:ef:36:12:92:10:80:f3:29:aa:46:42:67:0e:d7:a9:
         c5:6b:81:6a:06:eb:2d:1a:9c:6d:8c:e2:0d:25:a9:94:8d:41:
         fe:ea:e5:c3:de:d5:cb:f3:51:14:8f:8f:ca:dd:ec:40:cc:9d:
         9a:95:33:3f:4a:8c:5c:23:5d:6b:bb:1f:b0:cf:41:47:b0:fd:
         7b:3d:15:7f:6f:27:f4:1a:a6:32:85:17:96:de:51:20:37:18:
         83:2e:85:fa:e4:0b:0a:4a:a1:40:6a:2d:45:74:dc:8d:30:8d:
         15:98:b3:5d:60:28:dd:45:b3:08:4d:e9:e9:37:b1:b7:6b:2f:
         bd:12:81:9f:b7:e1:61:ff:a5:20:af:4e:a4:09:ec:d3:f6:c7:
         f6:03:5c:ee:c3:07:d6:48:8f:2d:52:08:1b:6c:9c:b8:a8:3c:
         a3:24:44:b7:fc:e5:6b:f2:b4:ee:e7:5e:82:0e:ba:ba:e9:e8:
         ec:9a:af:82:61:ce:f0:2e:f1:4c:33:40:e9:84:03:25:59:c2:
         8d:ab:2e:a1
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEHlMmyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDUx
MDEwMjMwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODJkMWYzZjZmNGMz
MGRjZDU5MGJhZWFlNGUyMTFhMjNiNmVhZTMwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIsQ7I2X7XNdw4KyhTIBvU4qflZGt/CbMRnJmd8M7Ru0BQ0K
aGPxicoVFbHOfMH6POo3DEucP3A1Qdcm8hoJOykwOLgrb5zVet//9ttFMFEXUbKD
HW1St/0OgG/t2Lk0X8yakZvmGDEEM5ww7MwGsgvNSTBzWPSH5tQh68VX1v58AeJ0
OfvoEeF+E5PomG70+X3BeGmZ8k2IkzOTDhZ/FMheMP+jP7cyNqINRRm+LfcKTFHF
Hw1Rdic5i0svUdLOgXjCkownieuHYZbK6eOZ70fTw0HA6Ai6hTQ5QJDStMMf9xbV
TResB/VZ+xvTdTic9diJXz8V6WIn1JbXfV9rVY0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSC0fP29MMNzVkLrq5OIRojturjDzAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L2d0SHo5dlRERGMxWkM2NnVUaUVhSTdicTR3OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF6cJAMEAF6cZTANBgkqhkiG9w0B
AQsFAAOCAQEAYnrmhM2kaMonNly3+dAutonTyEPzePoq1Ufj0L1XET8mURzH4auL
SFvddvNz9ZAqZ0QTngGB/Nap7zYSkhCA8ymqRkJnDtepxWuBagbrLRqcbYziDSWp
lI1B/urlw97Vy/NRFI+Pyt3sQMydmpUzP0qMXCNda7sfsM9BR7D9ez0Vf28n9Bqm
MoUXlt5RIDcYgy6F+uQLCkqhQGotRXTcjTCNFZizXWAo3UWzCE3p6Text2svvRKB
n7fhYf+lIK9OpAns0/bH9gNc7sMH1kiPLVIIG2ycuKg8oyREt/zla/K07udegg66
uuno7JqvgmHO8C7xTDNA6YQDJVnCjasuoQ==
-----END CERTIFICATE-----
Generated at Thu Dec 8 06:05:18 2022 by rpki-client.