Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/qoXIvrahNxNKy7BYeMP2IKzrPHk.roa
File:                     qoXIvrahNxNKy7BYeMP2IKzrPHk.roa (download)
Hash identifier:          Y290ahPbEXCy4pPxmd+Qiv4uje2oBPhKD0N5xQ/DFE0=
Subject key identifier:   AA:85:C8:BE:B6:A1:37:13:4A:CB:B0:58:78:C3:F6:20:AC:EB:3C:79
Certificate issuer:       /CN=ff9f111bba32bc1439743df23e14ddd87101eb5d
Certificate serial:       CDC7E6
Authority key identifier: FF:9F:11:1B:BA:32:BC:14:39:74:3D:F2:3E:14:DD:D8:71:01:EB:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_58RG7oyvBQ5dD3yPhTd2HEB610.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/qoXIvrahNxNKy7BYeMP2IKzrPHk.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 193.163.192.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13486054 (0xcdc7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff9f111bba32bc1439743df23e14ddd87101eb5d
        Validity
            Not Before: Jan  1 09:01:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa85c8beb6a137134acbb05878c3f620aceb3c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:b3:4b:5e:66:86:62:d3:2e:37:f2:97:72:
                    e4:18:8a:f0:ba:07:58:aa:0a:87:a0:17:f5:01:75:
                    16:e0:65:56:06:d9:c2:01:7c:ab:63:51:1b:6b:00:
                    56:a9:d8:ec:51:a3:fb:8e:61:c4:fe:4c:7b:4d:2e:
                    04:8d:65:f1:08:69:25:3e:f0:d1:64:88:e6:3e:51:
                    c1:39:2d:f9:24:9c:79:cb:d5:3e:e6:b1:cf:49:8f:
                    87:ff:a5:46:05:1f:9c:cd:a5:20:18:9a:40:ed:1e:
                    92:fd:4e:a9:f7:95:f8:27:ce:da:c1:0b:75:fa:35:
                    7b:ea:c7:ce:02:8d:f8:d7:9b:3e:b4:96:63:9b:b6:
                    83:bf:18:c9:6d:0a:ee:13:ad:5c:28:8b:a7:0c:5d:
                    6e:a2:5c:7e:08:38:eb:90:4e:ec:8e:a9:34:b6:eb:
                    20:fc:85:3a:76:59:79:de:bf:26:c7:65:20:dc:c2:
                    e2:ad:c8:9e:3f:87:fc:16:25:f1:2b:a7:54:6a:a2:
                    c2:26:bd:9e:a3:22:b2:90:b5:23:2e:6f:f9:a3:24:
                    df:4f:37:f7:aa:95:c9:e8:e9:78:95:54:5a:cc:b7:
                    e4:ee:71:96:eb:79:71:9c:b5:ea:d3:f3:ba:7e:82:
                    08:31:8a:87:01:e2:ca:8f:fd:05:e5:6d:f8:13:d4:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AA:85:C8:BE:B6:A1:37:13:4A:CB:B0:58:78:C3:F6:20:AC:EB:3C:79
            X509v3 Authority Key Identifier: 
                keyid:FF:9F:11:1B:BA:32:BC:14:39:74:3D:F2:3E:14:DD:D8:71:01:EB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_58RG7oyvBQ5dD3yPhTd2HEB610.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/qoXIvrahNxNKy7BYeMP2IKzrPHk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/_58RG7oyvBQ5dD3yPhTd2HEB610.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:ec:29:37:0a:96:e6:34:a4:96:9d:a5:fe:55:85:08:0b:3f:
         ab:2d:2d:0a:0b:0f:14:ef:8c:4e:00:1a:cc:90:2b:00:07:3b:
         eb:e9:2f:fb:58:2a:eb:ca:81:45:9e:2f:0c:e5:70:f9:00:18:
         6a:53:94:ef:9a:80:52:da:2f:50:e7:6d:74:9d:70:51:1e:2e:
         d2:2e:2e:1d:8b:61:9e:a6:81:e9:4d:5a:24:14:b8:cd:1b:f5:
         70:1a:ab:4b:ca:5b:c5:8a:c0:10:95:6a:e0:04:46:59:b7:ce:
         16:57:79:34:4e:0f:21:ca:14:26:55:e4:9d:67:7d:fe:22:8b:
         2d:7e:39:b7:fa:87:d3:a8:7f:17:73:65:42:4d:ef:2a:aa:d5:
         ba:20:1e:c6:55:a5:50:9e:73:83:ae:d0:6e:1e:85:71:70:77:
         ce:43:dc:fd:70:2b:0f:4f:d6:ec:b9:b1:47:8f:3c:f1:4b:e5:
         a2:27:71:3a:64:22:e9:e0:c7:0f:6f:a7:14:43:92:04:ec:a9:
         86:cb:f3:e9:bb:f1:21:85:e7:36:31:f8:52:59:7c:dd:14:9e:
         04:0e:e5:f1:4a:48:be:6c:99:5c:18:67:ff:9c:47:03:a1:c1:
         df:96:c8:2f:ab:db:63:7f:09:ed:e7:d0:d0:40:63:c6:2e:34:
         28:d1:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 08:38:05 2022 by rpki-client.