Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/pUYd3j2ALT8toLyFlLqFuf3Rd8Y.roa
File:                     pUYd3j2ALT8toLyFlLqFuf3Rd8Y.roa (download)
Hash identifier:          YJdYpK2gtMfP6ompyxShV4B5oVW4dVv+2jtjumB+TPk=
Subject key identifier:   A5:46:1D:DE:3D:80:2D:3F:2D:A0:BC:85:94:BA:85:B9:FD:D1:77:C6
Certificate issuer:       /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial:       0E3DB0D0
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/pUYd3j2ALT8toLyFlLqFuf3Rd8Y.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 195.68.242.0/24 maxlen: 24
    2: 195.68.243.0/24 maxlen: 24
    3: 195.68.242.0/23 maxlen: 23

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238923984 (0xe3db0d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
        Validity
            Not Before: Jan  1 02:52:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5461dde3d802d3f2da0bc8594ba85b9fdd177c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:0a:36:f9:3d:00:78:cc:34:41:d5:ca:c1:
                    76:bf:99:d1:ac:8b:e3:4b:92:9c:90:7b:81:ae:07:
                    7d:7d:17:16:94:9f:95:27:f8:39:64:9a:3e:c0:8a:
                    a3:98:0b:5b:f3:2b:eb:d9:71:c1:e1:11:89:59:74:
                    e1:3f:8f:14:7a:d8:96:ab:e7:05:74:f6:be:0b:1d:
                    ed:c8:63:13:7a:01:75:14:6c:21:2f:64:97:2b:f3:
                    c6:ee:6e:62:d2:b7:d5:c8:c8:51:cb:a7:60:19:97:
                    21:b9:41:4e:c5:cf:6d:14:b8:e7:d5:7f:f9:17:4a:
                    e6:86:35:fb:b2:0b:b7:d0:ef:8f:94:54:ca:56:76:
                    ff:95:e4:ed:ac:cf:9c:47:77:76:0e:41:80:17:8c:
                    8c:29:d5:1c:6d:03:7f:08:90:a4:7b:4b:7d:22:da:
                    ea:dd:36:38:35:20:94:98:f7:67:19:3b:86:c7:c9:
                    a5:8d:58:66:67:ea:9e:e5:e6:3a:91:27:58:51:40:
                    48:30:48:fd:ee:ec:0c:d4:28:70:af:44:63:f5:7f:
                    38:ba:f4:71:88:b0:02:33:da:ac:b8:02:90:57:64:
                    95:92:a4:0f:e7:3e:2c:eb:b7:44:84:ff:08:93:ac:
                    20:f2:36:08:79:e4:20:35:9a:81:ec:9a:fa:4d:be:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A5:46:1D:DE:3D:80:2D:3F:2D:A0:BC:85:94:BA:85:B9:FD:D1:77:C6
            X509v3 Authority Key Identifier: 
                keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/pUYd3j2ALT8toLyFlLqFuf3Rd8Y.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.68.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:a2:d8:d4:bc:a1:cd:56:47:4e:0c:7d:01:b0:c4:47:71:f7:
         44:07:d9:b6:74:18:a8:6e:ea:41:02:b2:31:16:e2:80:f7:a2:
         79:84:c0:a7:2d:f3:67:37:c9:dd:f0:0a:d1:6a:66:7f:eb:13:
         61:8b:1d:72:32:48:15:73:f3:63:b7:8b:7b:8b:c8:66:df:cf:
         25:c8:57:22:97:69:59:64:cf:ce:0c:4d:1a:c8:ac:f4:59:88:
         54:c2:ed:a8:44:65:50:31:53:c7:4e:4e:4c:8f:bd:f1:65:3a:
         3d:45:17:e3:f8:44:d1:a8:be:66:55:e1:e5:c3:a7:d6:4a:a2:
         80:ce:b1:56:bc:ba:c2:81:20:82:04:53:f9:ee:bf:a5:cb:bd:
         c1:49:93:f6:9c:7b:c6:71:66:bd:3c:f4:6e:3a:78:8c:a2:7d:
         fa:97:ab:56:ad:da:5d:59:73:35:70:e6:d1:fc:4a:30:4f:0c:
         0a:a5:ce:3f:e8:cb:61:fb:83:f2:e6:6d:73:e2:3e:91:45:6d:
         ca:cb:80:dc:80:1f:73:99:0e:21:5f:9c:25:2a:97:b0:08:f7:
         c3:15:b4:da:9f:51:1d:79:b5:0c:46:19:f7:81:0c:fe:77:c7:
         f2:87:9d:da:2f:37:1b:0c:82:87:9e:d9:97:e6:04:f0:02:36:
         08:ec:17:14
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDj2w0DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZTVkNDU2MDQ0OGY3OGE0ZGNkY2I3OTFhMDdkYWQyMTYzYTA4Y2RmMB4XDTIyMDEw
MTAyNTIzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTU0NjFkZGUzZDgw
MmQzZjJkYTBiYzg1OTRiYTg1YjlmZGQxNzdjNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALv+Cjb5PQB4zDRB1crBdr+Z0ayL40uSnJB7ga4HfX0XFpSf
lSf4OWSaPsCKo5gLW/Mr69lxweERiVl04T+PFHrYlqvnBXT2vgsd7chjE3oBdRRs
IS9klyvzxu5uYtK31cjIUcunYBmXIblBTsXPbRS459V/+RdK5oY1+7ILt9Dvj5RU
ylZ2/5Xk7azPnEd3dg5BgBeMjCnVHG0DfwiQpHtLfSLa6t02ODUglJj3Zxk7hsfJ
pY1YZmfqnuXmOpEnWFFASDBI/e7sDNQocK9EY/V/OLr0cYiwAjParLgCkFdklZKk
D+c+LOu3RIT/CJOsIPI2CHnkIDWageya+k2+XDkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSlRh3ePYAtPy2gvIWUuoW5/dF3xjAfBgNVHSMEGDAWgBTOXUVgRI94pNzc
t5Ggfa0hY6CM3zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3psMUZZRVNQZUtUYzNMZVJvSDJ0SVdPZ2pOOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDQvMjdjYmQwLWE3YjktNDVmYi05OTU0LTc4ZDExNDRhZDk2Ny8x
L3BVWWQzajJBTFQ4dG9MeUZsTHFGdWYzUmQ4WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQv
MjdjYmQwLWE3YjktNDVmYi05OTU0LTc4ZDExNDRhZDk2Ny8xL3psMUZZRVNQZUtU
YzNMZVJvSDJ0SVdPZ2pOOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcNE8jANBgkqhkiG9w0BAQsFAAOC
AQEArKLY1LyhzVZHTgx9AbDER3H3RAfZtnQYqG7qQQKyMRbigPeieYTApy3zZzfJ
3fAK0Wpmf+sTYYsdcjJIFXPzY7eLe4vIZt/PJchXIpdpWWTPzgxNGsis9FmIVMLt
qERlUDFTx05OTI+98WU6PUUX4/hE0ai+ZlXh5cOn1kqigM6xVry6woEgggRT+e6/
pcu9wUmT9px7xnFmvTz0bjp4jKJ9+perVq3aXVlzNXDm0fxKME8MCqXOP+jLYfuD
8uZtc+I+kUVtysuA3IAfc5kOIV+cJSqXsAj3wxW02p9RHXm1DEYZ94EM/nfH8oed
2i83GwyCh57Zl+YE8AI2COwXFA==
-----END CERTIFICATE-----
Generated at Fri Dec 9 02:14:34 2022 by rpki-client.