Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/EK8PqozXPbbhARaPSaJmhWpI8gs.roa
File:                     EK8PqozXPbbhARaPSaJmhWpI8gs.roa (download)
Hash identifier:          /xFux33omB8AuEhyBalGbkEK/KEmG7b6QsuPVMAehMU=
Subject key identifier:   10:AF:0F:AA:8C:D7:3D:B6:E1:01:16:8F:49:A2:66:85:6A:48:F2:0B
Certificate issuer:       /CN=088612d4d36d62b09686d9eb8aab0527d4bbf741
Certificate serial:       012841E4
Authority key identifier: 08:86:12:D4:D3:6D:62:B0:96:86:D9:EB:8A:AB:05:27:D4:BB:F7:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIYS1NNtYrCWhtnriqsFJ9S790E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/EK8PqozXPbbhARaPSaJmhWpI8gs.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 185.213.194.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19415524 (0x12841e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088612d4d36d62b09686d9eb8aab0527d4bbf741
        Validity
            Not Before: Jan  1 05:53:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10af0faa8cd73db6e101168f49a266856a48f20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:a0:75:38:da:74:23:fc:11:60:5c:5d:ea:
                    b9:3a:84:a9:e3:46:2b:b7:6c:91:6d:77:bb:dc:14:
                    29:b2:47:53:e7:3a:15:ef:1c:18:f0:54:15:5d:4a:
                    e2:59:48:a7:c7:1a:27:38:17:7a:bb:73:18:d4:04:
                    86:ae:99:66:d0:39:1b:61:2d:b7:91:f6:ee:10:70:
                    3c:32:17:d0:06:f1:0c:72:23:99:de:23:c4:7e:df:
                    a8:ab:85:6b:ae:1e:ea:f2:f3:a1:ff:7c:8f:16:ad:
                    d3:9a:24:1b:fa:f0:87:2f:64:78:27:86:e7:5c:e0:
                    69:dd:de:e7:bb:93:f3:3e:fb:5b:90:b7:c4:80:b3:
                    6e:04:06:f3:21:7b:9c:e6:86:b8:01:52:c8:3b:b4:
                    50:bc:6e:6f:8b:b7:37:37:9d:b8:f6:5c:17:03:49:
                    7d:ce:96:d7:49:66:18:51:d1:a4:59:41:30:cf:31:
                    0f:f2:21:3a:ce:6d:aa:fa:c6:0b:27:61:7a:92:9b:
                    76:fa:c2:9e:d5:ed:39:69:3a:1b:b3:b4:8b:1d:e5:
                    4c:bb:16:cd:d8:66:04:4a:22:c6:52:06:a2:ce:14:
                    5b:2f:d1:23:16:3b:b7:fb:7e:8b:b7:cc:92:65:6a:
                    ed:41:f6:de:67:ad:09:d2:7e:5d:c9:94:d2:f7:a9:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                10:AF:0F:AA:8C:D7:3D:B6:E1:01:16:8F:49:A2:66:85:6A:48:F2:0B
            X509v3 Authority Key Identifier: 
                keyid:08:86:12:D4:D3:6D:62:B0:96:86:D9:EB:8A:AB:05:27:D4:BB:F7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYS1NNtYrCWhtnriqsFJ9S790E.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/EK8PqozXPbbhARaPSaJmhWpI8gs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/CIYS1NNtYrCWhtnriqsFJ9S790E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:82:27:6d:d6:7f:f8:93:75:5a:30:46:2d:2c:79:45:eb:48:
         f9:72:72:ca:d0:a8:1c:c0:f3:1e:28:30:7c:8e:92:0d:24:4d:
         8f:0a:f0:4a:eb:d1:fc:32:43:1a:c6:e4:95:05:16:20:ca:fb:
         36:09:96:fa:60:43:25:a4:3a:2c:cd:b9:40:9e:99:bd:f9:ac:
         8d:14:2d:64:8b:29:01:9b:0c:cf:d8:67:02:08:65:c2:a0:ec:
         7c:87:0b:f1:5d:20:dd:dc:ed:26:12:85:24:56:0b:3f:42:97:
         d5:7c:03:3d:f9:98:b5:a8:49:6c:9c:4c:a9:b9:61:76:2b:a1:
         86:eb:8c:5f:9e:a2:62:e9:42:25:96:f5:34:be:b5:f6:1b:69:
         95:7a:02:13:48:cf:92:f2:dd:5b:0f:1d:4b:62:53:39:89:1e:
         d9:e0:56:2d:15:72:11:76:f0:6b:ec:3a:24:63:7d:c6:01:f9:
         2a:5e:24:08:e8:fa:a3:1f:d6:c3:bb:ac:dd:ac:f4:9a:a6:ec:
         d5:e7:34:90:bb:01:94:70:5f:77:46:71:8f:f1:ce:dd:0b:bb:
         7b:1b:64:5d:44:86:d5:43:69:5c:b3:e9:57:f8:98:e3:81:54:
         89:8e:b4:7d:5b:f1:ab:da:7d:ef:03:92:f6:0b:a9:e1:57:c6:
         50:08:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 09:53:39 2022 by rpki-client.