Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/xfav3aZNoet1mgwRgnirAyqZ-2o.roa
File:                     xfav3aZNoet1mgwRgnirAyqZ-2o.roa (download)
Hash identifier:          zk9gWRDwtxaPthiL8ZL1fs7T5jtzA+pZphdcN/oMiNo=
Subject key identifier:   C5:F6:AF:DD:A6:4D:A1:EB:75:9A:0C:11:82:78:AB:03:2A:99:FB:6A
Certificate issuer:       /CN=d26ae4e9b8b0fd994d2cc4be6c6f39cc8b9add89
Certificate serial:       BCD59C
Authority key identifier: D2:6A:E4:E9:B8:B0:FD:99:4D:2C:C4:BE:6C:6F:39:CC:8B:9A:DD:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mrk6biw_ZlNLMS-bG85zIua3Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/xfav3aZNoet1mgwRgnirAyqZ-2o.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 62.204.59.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12375452 (0xbcd59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26ae4e9b8b0fd994d2cc4be6c6f39cc8b9add89
        Validity
            Not Before: Jan  1 11:56:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c5f6afdda64da1eb759a0c118278ab032a99fb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:6f:2a:ea:f2:a8:ca:15:f0:d5:73:2f:57:
                    b3:c9:66:05:dd:a8:e9:29:0e:4f:8c:db:57:6b:8b:
                    5d:66:14:f1:10:6e:d4:90:bd:02:7a:85:03:69:59:
                    24:27:7e:f1:99:e3:d8:20:e9:ca:0c:37:3a:c5:98:
                    d5:0e:44:0b:89:c8:dd:a2:74:3d:df:78:a6:5f:ec:
                    a8:35:a0:27:f0:f5:85:e7:e0:24:57:f4:1e:b6:74:
                    53:bd:74:d0:0c:8f:58:66:00:54:2a:c6:4b:5f:4f:
                    5e:f4:55:cc:07:90:bf:19:e5:be:65:c7:31:89:ec:
                    c6:56:df:da:bb:25:be:71:90:bb:36:b1:94:11:34:
                    67:6f:ee:04:85:f6:30:4b:9b:b6:74:5f:9f:03:be:
                    d7:1b:48:cb:b8:54:08:05:09:a9:92:44:5f:ec:d2:
                    05:ef:76:d4:a0:a1:a0:eb:70:08:1a:a3:e4:e8:73:
                    fd:bf:88:c4:ad:84:63:ff:96:00:c2:7e:fd:be:fe:
                    86:ea:8c:d8:d4:85:a9:ee:b5:34:c2:fd:66:d6:4d:
                    6c:6b:e2:b3:63:a7:3e:8f:13:39:fb:d2:1a:6d:45:
                    0c:d9:f8:2c:8c:51:05:aa:72:f3:85:87:2a:00:58:
                    41:97:ef:50:19:fb:aa:17:4f:13:aa:e2:2e:08:c1:
                    38:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C5:F6:AF:DD:A6:4D:A1:EB:75:9A:0C:11:82:78:AB:03:2A:99:FB:6A
            X509v3 Authority Key Identifier: 
                keyid:D2:6A:E4:E9:B8:B0:FD:99:4D:2C:C4:BE:6C:6F:39:CC:8B:9A:DD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mrk6biw_ZlNLMS-bG85zIua3Yk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/xfav3aZNoet1mgwRgnirAyqZ-2o.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/0mrk6biw_ZlNLMS-bG85zIua3Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:7d:cc:63:7e:25:b6:74:b4:c2:f7:0a:64:7e:e2:f9:89:65:
         6c:18:76:a5:49:fe:ef:c8:32:40:05:d8:e3:a5:3d:14:7f:3a:
         d9:e9:bc:ee:51:c5:ea:42:f6:8d:ab:05:16:19:3c:55:22:36:
         b0:2d:cb:48:59:5e:b9:90:8b:b1:72:7b:24:c3:55:b7:02:c2:
         78:2f:2d:81:f2:32:e6:52:4e:fb:a9:53:94:d8:20:f6:3c:03:
         36:4d:28:64:02:92:08:c7:66:c5:2f:2f:8e:31:e6:6d:a7:f4:
         fd:3f:3b:e5:a9:fd:63:3f:7c:ba:23:6c:0e:6a:a7:d6:c8:1e:
         f1:bb:4a:b3:a8:15:ec:6a:3a:ae:f9:2d:04:42:48:e4:6b:77:
         d1:0d:36:ee:79:38:68:22:53:0d:54:1e:63:56:26:87:5b:1c:
         02:a3:c8:6a:7e:32:b8:7b:b0:69:db:a9:42:11:35:31:d5:49:
         e5:8c:ef:36:78:f4:fb:a4:09:7b:76:9c:ef:7d:7b:f0:8a:41:
         65:14:f3:e8:4b:ac:2c:4d:f7:c8:87:14:9f:28:18:4e:bf:54:
         46:5f:31:f3:0d:32:f1:e1:d8:9c:bd:02:b6:5a:74:e5:50:5a:
         63:93:69:76:01:4c:4b:31:94:4e:a8:d9:b8:fc:fc:bf:1d:50:
         31:71:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 09:51:25 2022 by rpki-client.