Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/

$ rpki-client -vvf efBM_0izjp3H6uwIEA-NWD5HBWQ.roa
File:                     efBM_0izjp3H6uwIEA-NWD5HBWQ.roa (download)
Hash identifier:          804iOPWK+a5SZU6pb34yeXLl8MZOWYshbwa17npkxyo=
Subject key identifier:   79:F0:4C:FF:48:B3:8E:9D:C7:EA:EC:08:10:0F:8D:58:3E:47:05:64
Certificate issuer:       /CN=179d6d74584f8b75803107e5c42ff9ec6915e866
Certificate serial:       D9E96D
Authority key identifier: 17:9D:6D:74:58:4F:8B:75:80:31:07:E5:C4:2F:F9:EC:69:15:E8:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F51tdFhPi3WAMQflxC_57GkV6GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/efBM_0izjp3H6uwIEA-NWD5HBWQ.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 37.72.134.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14281069 (0xd9e96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179d6d74584f8b75803107e5c42ff9ec6915e866
        Validity
            Not Before: Jan  1 09:57:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79f04cff48b38e9dc7eaec08100f8d583e470564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:01:a9:8e:f0:26:c5:69:e6:76:92:26:a0:
                    5a:e4:84:2d:2d:0b:f1:8f:1d:0a:d8:c8:7c:85:1d:
                    25:07:cc:2a:21:32:f4:bc:93:e9:4b:a6:69:0b:d7:
                    07:a3:fe:ad:76:8f:fd:da:2f:f4:f0:38:8c:b2:b8:
                    83:be:8a:b1:51:8e:81:3f:f2:3f:3f:55:61:68:f7:
                    f9:b0:d2:79:91:ac:9f:1b:b4:ff:f4:ff:d0:e5:17:
                    d8:85:64:64:a1:e8:53:f7:01:01:58:9b:ed:aa:23:
                    72:59:d7:69:3f:20:79:00:42:b1:ca:9a:60:54:ef:
                    ed:4c:3a:6f:02:63:60:23:98:9b:47:a1:71:20:e6:
                    a1:27:22:9e:30:ef:dd:8d:ef:7b:e3:16:ea:71:90:
                    02:a3:83:25:ed:66:fd:14:87:71:c2:47:3a:9b:cd:
                    c7:4c:6c:b1:c5:d4:da:16:b6:3b:4f:e9:aa:ca:a0:
                    2b:d0:89:48:ef:3c:36:46:70:84:1c:a6:eb:48:99:
                    15:9c:51:f5:18:45:65:97:65:a2:52:4b:bd:7d:af:
                    47:ba:4c:15:ac:86:8a:91:1a:8e:ba:98:fa:e9:79:
                    55:6f:3e:75:a0:5f:de:ad:ba:f0:cd:23:fb:fb:13:
                    14:c8:c9:eb:24:ef:9a:e9:bf:7c:39:6e:5a:52:6f:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                79:F0:4C:FF:48:B3:8E:9D:C7:EA:EC:08:10:0F:8D:58:3E:47:05:64
            X509v3 Authority Key Identifier: 
                keyid:17:9D:6D:74:58:4F:8B:75:80:31:07:E5:C4:2F:F9:EC:69:15:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F51tdFhPi3WAMQflxC_57GkV6GY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/efBM_0izjp3H6uwIEA-NWD5HBWQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/F51tdFhPi3WAMQflxC_57GkV6GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:84:76:de:83:31:01:8a:7e:5f:20:c3:72:a1:62:87:27:08:
         d2:e1:c2:b3:a0:4c:e0:81:bd:ec:73:f5:ef:e7:d3:fd:6c:38:
         be:e2:2c:63:fd:1a:8f:7d:21:58:f4:84:c4:43:ab:7c:c2:9b:
         79:ba:aa:18:4d:5f:f6:f9:a4:06:2e:ee:02:ae:e0:50:ce:71:
         ff:0f:9f:e9:72:a6:7c:c4:b1:f0:6a:1d:63:ad:0f:d3:e7:da:
         eb:ae:0c:a8:f2:db:90:07:93:b8:0b:ba:d2:8d:78:1a:11:d6:
         b4:4d:5b:cb:3d:07:9a:69:f7:b9:2d:e9:19:ca:be:47:e7:d7:
         58:2a:be:f2:4a:88:5d:d2:d8:32:06:f2:d0:bb:e8:ca:38:7d:
         24:4b:b8:60:80:2b:38:0f:32:8a:7a:cb:99:61:13:48:11:69:
         7d:29:72:fa:7a:d7:4f:c5:05:1f:a3:b0:e3:10:a3:49:6a:42:
         b1:45:56:6a:b6:88:01:71:2f:5f:80:8d:be:7c:32:1b:cd:15:
         dc:1e:ee:bb:b3:fb:63:e5:33:b4:02:2f:0f:12:04:83:7f:c6:
         75:0b:9f:b1:73:ee:e5:fc:b6:c7:09:f9:11:8b:e2:63:d3:e9:
         e5:6e:e6:e9:93:a4:9c:ae:39:3e:da:4c:d6:99:fe:15:97:4a:
         0a:9c:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 12:23:36 2022 by rpki-client.