Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/pTYL0sVrEwdOufI5duqUgEnY75o.roa
File:                     pTYL0sVrEwdOufI5duqUgEnY75o.roa (download)
Hash identifier:          enEaLug3TFzD5Vmnsk8qfb9QXN+E54xftqqaxYjc/+Y=
Subject key identifier:   A5:36:0B:D2:C5:6B:13:07:4E:B9:F2:39:76:EA:94:80:49:D8:EF:9A
Certificate issuer:       /CN=88f6580a229ccfd5369e19e252adcb728cdacd39
Certificate serial:       03165CE5
Authority key identifier: 88:F6:58:0A:22:9C:CF:D5:36:9E:19:E2:52:AD:CB:72:8C:DA:CD:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPZYCiKcz9U2nhniUq3LcozazTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/pTYL0sVrEwdOufI5duqUgEnY75o.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     399114
IP address blocks:
    1: 185.234.115.0/24 maxlen: 24
    2: 94.154.8.0/24 maxlen: 24
    3: 2a10:e580::/29 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51797221 (0x3165ce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f6580a229ccfd5369e19e252adcb728cdacd39
        Validity
            Not Before: Jan  3 16:02:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5360bd2c56b13074eb9f23976ea948049d8ef9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:c9:0f:d1:a1:5b:fa:93:ad:9f:20:6c:43:
                    a5:a6:43:3d:21:5a:ff:93:91:0c:ef:78:5e:ff:48:
                    bd:0f:79:0f:7f:42:90:75:ee:82:ae:54:8d:74:8e:
                    78:8c:7b:b6:50:4b:d3:65:46:15:9d:8e:dd:78:bc:
                    52:e8:b3:55:0e:9f:87:84:b6:a2:3e:21:c9:7e:d6:
                    d4:88:9c:4d:51:a9:f9:c0:b0:cd:e1:6f:8c:c0:4d:
                    4a:e9:0c:f3:a5:7d:88:bd:35:93:15:79:20:4e:07:
                    22:22:fc:5e:e0:9f:29:32:4c:a6:76:fc:9a:3a:e5:
                    12:28:49:ec:fe:a6:15:09:b3:a8:3a:23:73:30:6f:
                    ab:04:74:fd:3e:f3:a1:08:bb:e0:25:5c:5b:e7:c5:
                    e0:8e:7e:d5:7b:6d:95:29:c7:00:83:63:5d:01:32:
                    11:bb:14:3b:1a:ae:61:30:d2:80:a1:2b:ea:0f:c0:
                    c3:ff:52:5f:2a:6f:06:33:14:b1:57:57:1b:31:62:
                    a3:93:7c:5e:68:7b:bb:75:d3:5b:c9:21:46:81:aa:
                    7b:52:15:83:ad:74:fe:55:9d:3e:13:f2:4a:91:75:
                    d7:78:13:66:87:0d:01:c9:dc:79:d2:65:ea:df:9e:
                    aa:02:79:dc:3e:73:a0:33:08:07:d4:d2:a6:e3:71:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A5:36:0B:D2:C5:6B:13:07:4E:B9:F2:39:76:EA:94:80:49:D8:EF:9A
            X509v3 Authority Key Identifier: 
                keyid:88:F6:58:0A:22:9C:CF:D5:36:9E:19:E2:52:AD:CB:72:8C:DA:CD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPZYCiKcz9U2nhniUq3LcozazTk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/pTYL0sVrEwdOufI5duqUgEnY75o.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/iPZYCiKcz9U2nhniUq3LcozazTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.8.0/24
                  185.234.115.0/24
                IPv6:
                  2a10:e580::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:d3:41:55:6a:9b:a7:ca:63:85:3c:25:b8:15:36:32:09:98:
         18:83:87:76:cd:01:53:da:95:d4:2d:3f:50:6f:3d:73:fb:98:
         33:12:e8:d8:72:cf:d2:11:72:45:48:3f:fa:9b:a3:71:8c:7d:
         08:10:53:7a:fd:ef:45:d6:4b:18:b2:b6:04:80:36:e4:86:c3:
         54:75:06:9d:8c:5c:3e:58:bb:bd:58:d2:e1:eb:fa:33:2b:c0:
         e1:e9:b4:b0:6e:f9:73:b7:fe:5e:2e:3c:f1:c8:17:56:73:fb:
         9a:66:e2:57:d8:e1:5f:4f:6c:de:91:c4:cc:2e:77:2e:b2:e4:
         a3:ec:31:85:6f:2e:a5:d9:30:df:4e:18:31:05:e4:da:60:85:
         34:3e:7b:ca:0e:c0:36:67:3f:f5:20:5b:08:e3:a6:07:d5:56:
         a1:1b:08:e4:1a:76:57:a3:77:23:c3:42:7d:36:bd:f6:1d:28:
         c5:fd:2b:e5:63:44:97:40:0a:6f:d9:ad:fb:44:9c:f7:97:85:
         0d:c3:30:8f:4d:6f:e9:4f:83:ff:78:e5:2d:7b:3e:c4:99:5e:
         e1:d4:7e:87:29:33:64:52:5c:d9:18:b1:e0:64:28:68:4f:04:
         b2:82:3c:5a:9d:48:e0:9c:1b:4c:9b:e9:ce:62:07:a3:59:f9:
         47:a9:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 16:11:14 2022 by rpki-client.