Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/

$ rpki-client -vvf 3hsfHCsjQRg8aaxcsRk6339oeww.roa
File:                     3hsfHCsjQRg8aaxcsRk6339oeww.roa (download)
Hash identifier:          lQx0wL0Hj4WifjxsujkFdlFtsTLEQZBx3ng/9rsdl5Q=
Subject key identifier:   DE:1B:1F:1C:2B:23:41:18:3C:69:AC:5C:B1:19:3A:DF:7F:68:7B:0C
Certificate issuer:       /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial:       01399EE8
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/3hsfHCsjQRg8aaxcsRk6339oeww.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 185.230.246.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20553448 (0x1399ee8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
        Validity
            Not Before: Jan  1 06:01:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de1b1f1c2b2341183c69ac5cb1193adf7f687b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:0e:c3:14:b1:26:0e:5f:a1:00:55:c6:a2:
                    5d:b5:70:b7:8c:25:b8:47:bd:9a:19:80:b7:b4:13:
                    0b:9c:37:bf:aa:d7:4b:e1:d5:5b:21:cb:87:75:d9:
                    aa:90:a1:fd:b1:02:a9:3d:e8:41:60:9e:d9:0d:d9:
                    7c:7b:0a:1f:26:99:8e:56:4d:bb:42:e9:f0:92:d4:
                    6f:a6:6c:f9:87:c1:63:e5:f3:16:51:9b:26:59:d3:
                    a3:77:17:b7:2e:73:e8:ca:7c:4c:44:25:e2:45:79:
                    ea:9a:1f:d9:b4:8d:2b:c2:8a:98:cf:b8:8b:bd:ce:
                    e5:a8:9d:bb:24:2c:65:07:1c:63:a0:be:1d:a5:0d:
                    fa:76:5e:cd:21:08:96:e3:7e:72:fb:97:39:a0:cc:
                    49:ef:28:3c:ba:a5:82:a7:c7:a6:d4:a5:44:21:d0:
                    27:d9:55:f7:34:55:cd:79:18:85:19:22:16:f3:32:
                    c7:ab:4a:96:c5:ae:8b:48:ff:69:9b:3a:ad:cc:e7:
                    17:1b:48:bb:ee:8b:13:59:f1:86:74:bb:96:e6:0d:
                    49:bd:09:03:d4:e0:5a:9b:f3:37:52:64:cc:af:18:
                    09:c1:a6:90:2f:d5:8d:38:10:08:8e:a6:ee:f1:36:
                    e0:3d:50:70:be:1e:36:38:74:e9:7c:a4:c0:57:1f:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DE:1B:1F:1C:2B:23:41:18:3C:69:AC:5C:B1:19:3A:DF:7F:68:7B:0C
            X509v3 Authority Key Identifier: 
                keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/3hsfHCsjQRg8aaxcsRk6339oeww.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:95:c6:3b:fe:27:e0:cc:ed:bb:db:a2:ab:2e:15:23:82:1e:
         90:37:e7:9e:2c:ea:9a:bb:c9:ae:ca:c3:87:9c:a9:d5:5d:97:
         35:92:a1:c1:5d:37:ad:9f:be:55:39:a6:0c:0f:a5:5f:ca:98:
         a2:4c:0d:fe:f0:e4:25:3b:12:13:a5:86:dc:c4:01:75:1b:12:
         86:1b:0a:9a:33:58:cf:9f:7d:bc:8e:5f:e6:88:41:01:37:51:
         76:76:45:2f:03:e6:67:39:72:fb:2b:9d:42:64:f9:72:73:8c:
         29:42:f5:72:f8:8c:c6:5c:5f:a9:33:ee:b3:2f:03:66:5e:c5:
         81:77:fa:ee:07:5d:76:4d:37:52:8e:2e:8c:42:4d:9c:cb:63:
         79:54:aa:3a:08:fa:49:29:76:24:f0:87:70:52:22:b4:13:66:
         0e:16:b8:b7:3b:ff:c3:66:37:f0:4b:c9:b8:7d:1d:df:7f:53:
         2e:72:87:60:86:ce:f5:61:d7:e9:89:ba:f4:75:33:4f:42:dd:
         05:0d:37:21:4c:39:e0:b5:07:fa:0c:c2:1d:7c:f7:87:e4:0a:
         e4:f8:6a:a1:2e:8e:16:23:57:95:a5:59:0b:e3:b2:3c:a9:9c:
         22:d3:f3:51:a6:15:54:99:28:a8:8c:c7:81:46:9c:f7:03:1a:
         74:ff:31:2d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEATme6DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MDZkM2FiYmI0NzhiNzRlZjJhZGVmOWJiN2M0MzM2ZTM0MTExZDUxMB4XDTIyMDEw
MTA2MDEzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGUxYjFmMWMyYjIz
NDExODNjNjlhYzVjYjExOTNhZGY3ZjY4N2IwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJZeDsMUsSYOX6EAVcaiXbVwt4wluEe9mhmAt7QTC5w3v6rX
S+HVWyHLh3XZqpCh/bECqT3oQWCe2Q3ZfHsKHyaZjlZNu0Lp8JLUb6Zs+YfBY+Xz
FlGbJlnTo3cXty5z6Mp8TEQl4kV56pof2bSNK8KKmM+4i73O5aiduyQsZQccY6C+
HaUN+nZezSEIluN+cvuXOaDMSe8oPLqlgqfHptSlRCHQJ9lV9zRVzXkYhRkiFvMy
x6tKlsWui0j/aZs6rcznFxtIu+6LE1nxhnS7luYNSb0JA9TgWpvzN1JkzK8YCcGm
kC/VjTgQCI6m7vE24D1QcL4eNjh06XykwFcfsmkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTeGx8cKyNBGDxprFyxGTrff2h7DDAfBgNVHSMEGDAWgBRwbTq7tHi3TvKt
75u3xDNuNBEdUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NHMDZ1N1I0dDA3eXJlLWJ0OFF6YmpRUkhWRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvMGM2ZjQ3LTQ3MTMtNDQ3MS1iMDhmLWE0MjEzYzkzZjFmNy8x
LzNoc2ZIQ3NqUVJnOGFheGNzUms2MzM5b2V3dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
MGM2ZjQ3LTQ3MTMtNDQ3MS1iMDhmLWE0MjEzYzkzZjFmNy8xL2NHMDZ1N1I0dDA3
eXJlLWJ0OFF6YmpRUkhWRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnm9jANBgkqhkiG9w0BAQsFAAOC
AQEAt5XGO/4n4Mztu9uiqy4VI4IekDfnnizqmrvJrsrDh5yp1V2XNZKhwV03rZ++
VTmmDA+lX8qYokwN/vDkJTsSE6WG3MQBdRsShhsKmjNYz599vI5f5ohBATdRdnZF
LwPmZzly+yudQmT5cnOMKUL1cviMxlxfqTPusy8DZl7FgXf67gdddk03Uo4ujEJN
nMtjeVSqOgj6SSl2JPCHcFIitBNmDha4tzv/w2Y38EvJuH0d339TLnKHYIbO9WHX
6Ym69HUzT0LdBQ03IUw54LUH+gzCHXz3h+QK5PhqoS6OFiNXlaVZC+OyPKmcItPz
UaYVVJkoqIzHgUac9wMadP8xLQ==
-----END CERTIFICATE-----
Generated at Fri Dec 2 12:21:51 2022 by rpki-client.