Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/

$ rpki-client -vvf jDJRMRpmNKqzLQlIObva5leaVqk.roa
File:                     jDJRMRpmNKqzLQlIObva5leaVqk.roa (download)
Hash identifier:          tQkC76L5jBVfMF9o+b5GLAD5HDx6f4yQgP88jOe0b6U=
Subject key identifier:   8C:32:51:31:1A:66:34:AA:B3:2D:09:48:39:BB:DA:E6:57:9A:56:A9
Certificate issuer:       /CN=226bcc0f87b32f74b838dc1f24d28e5823f60ff7
Certificate serial:       B224B1
Authority key identifier: 22:6B:CC:0F:87:B3:2F:74:B8:38:DC:1F:24:D2:8E:58:23:F6:0F:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImvMD4ezL3S4ONwfJNKOWCP2D_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/jDJRMRpmNKqzLQlIObva5leaVqk.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 91.242.246.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11674801 (0xb224b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226bcc0f87b32f74b838dc1f24d28e5823f60ff7
        Validity
            Not Before: Jan  1 11:56:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c3251311a6634aab32d094839bbdae6579a56a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:2f:3e:07:4a:31:be:ac:35:5d:d1:f2:0e:
                    6f:22:97:18:b5:00:a6:69:5b:a5:ad:0a:05:f9:94:
                    69:89:b3:55:ef:8f:61:2f:ad:94:25:2c:af:73:32:
                    73:d7:d9:2b:c4:c9:af:53:3e:10:b3:8c:5e:86:9e:
                    e5:69:aa:20:a4:dd:b9:0e:ca:dc:48:4d:bc:ff:38:
                    8a:04:82:aa:a1:f1:e4:0d:0f:8d:7f:94:e9:76:88:
                    bd:0f:bb:08:31:09:62:7c:86:b9:0a:97:c7:af:1e:
                    69:46:18:6a:fa:e4:8f:7b:81:db:c2:93:94:47:cf:
                    4d:4c:56:2d:ac:99:f8:ec:11:38:7c:1c:b5:e5:d8:
                    f7:bd:98:05:f8:3f:35:e9:1c:43:19:4f:4a:48:2c:
                    08:85:21:c8:05:57:15:f2:7f:3c:7c:c5:24:04:6e:
                    3a:30:87:95:34:ee:f3:11:f8:6c:99:ed:da:35:2f:
                    34:43:a4:3a:62:db:95:20:33:cc:31:39:05:96:ce:
                    9d:71:5d:91:ca:e8:e4:f2:b7:fb:d8:b0:9a:75:d4:
                    b3:a1:7b:14:48:e0:63:ca:52:c6:cd:55:92:f0:05:
                    eb:a1:22:72:18:05:2a:5c:a9:66:f1:b4:85:29:82:
                    bb:5c:07:b4:3c:f8:38:aa:72:91:6d:db:2a:09:6f:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8C:32:51:31:1A:66:34:AA:B3:2D:09:48:39:BB:DA:E6:57:9A:56:A9
            X509v3 Authority Key Identifier: 
                keyid:22:6B:CC:0F:87:B3:2F:74:B8:38:DC:1F:24:D2:8E:58:23:F6:0F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImvMD4ezL3S4ONwfJNKOWCP2D_c.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/jDJRMRpmNKqzLQlIObva5leaVqk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/ImvMD4ezL3S4ONwfJNKOWCP2D_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:24:3c:51:79:84:4b:84:bb:24:94:eb:44:fd:42:15:10:3e:
         1f:11:9f:82:0a:da:a2:d8:df:0a:32:6d:fb:f8:d9:93:0c:48:
         f6:fa:d4:e2:16:91:3f:7c:53:cf:ec:f4:b7:31:b2:bf:ba:df:
         4f:e5:58:16:8b:28:8b:e4:35:dd:f7:42:23:8d:0f:30:35:34:
         60:cc:1a:ae:e9:19:c3:08:e0:3c:7e:36:07:33:88:8b:75:7d:
         34:03:f5:08:ab:15:9f:ec:ff:dd:f7:fa:9d:ee:d2:07:c4:19:
         34:3a:d0:9a:fc:86:98:a8:28:7c:81:92:47:ae:c3:64:c5:82:
         aa:8b:b5:7e:6f:f8:ae:0c:63:7d:3a:9f:34:6b:6e:c6:95:3b:
         f5:40:92:54:8b:bb:11:b8:84:37:d2:06:c5:12:b0:c7:42:8b:
         34:35:d3:d6:87:e9:bc:a6:9f:8b:97:23:cd:3d:ff:ba:dd:d2:
         a5:dd:a0:92:7f:2d:6d:37:a8:b5:81:3b:cd:42:31:3a:f0:df:
         f4:d0:b2:46:bf:22:11:98:d3:fb:7a:d0:67:e5:22:75:fa:03:
         09:ab:88:60:c9:32:84:72:18:8d:ac:ce:72:d2:fa:e0:e4:dd:
         8e:82:a4:22:ee:95:6e:85:6b:fc:bf:29:d3:91:21:00:7e:53:
         db:7b:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 11:49:09 2022 by rpki-client.