Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/SvuufRijj4pgkUB-Jd59ZX5MiD4.roa
File:                     SvuufRijj4pgkUB-Jd59ZX5MiD4.roa (download)
Hash identifier:          mR7s8FU+y4/qyCdEV3FpaQppoz3arGs5mFXU7EMWObE=
Subject key identifier:   4A:FB:AE:7D:18:A3:8F:8A:60:91:40:7E:25:DE:7D:65:7E:4C:88:3E
Certificate issuer:       /CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Certificate serial:       CBD8B0
Authority key identifier: 56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/SvuufRijj4pgkUB-Jd59ZX5MiD4.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 188.214.157.0/24 maxlen: 24
    2: 86.105.182.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13359280 (0xcbd8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56641d162079efd3c560a5de9e9226b2f2f0b097
        Validity
            Not Before: Jan  1 05:53:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4afbae7d18a38f8a6091407e25de7d657e4c883e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:b5:87:a4:3c:f6:a4:33:72:26:b7:20:3a:
                    fe:02:73:80:61:2e:7a:31:17:10:0a:98:2a:cf:69:
                    51:a9:47:e2:00:69:6c:09:95:8f:9e:d6:97:31:b3:
                    52:a3:81:63:d9:91:67:79:44:4d:49:33:43:12:cc:
                    0b:93:a0:3e:bc:5e:06:54:27:1c:3b:cb:3c:97:5a:
                    d3:2a:fe:13:b9:f1:8a:19:9f:dc:dd:16:16:92:18:
                    c1:33:2a:f0:e2:f0:49:5f:9e:22:b7:60:fc:ea:44:
                    62:ce:50:69:ef:57:e6:eb:58:cf:4d:ed:6a:d6:fc:
                    f2:29:8d:a0:fa:66:e6:ac:c7:dc:98:fb:20:fb:1c:
                    c6:d9:7a:26:53:a5:a4:5a:01:66:1c:c2:d8:5b:56:
                    c8:68:62:84:09:2e:38:f8:d2:b7:3b:d4:b6:07:d2:
                    1e:4d:74:58:96:41:36:b3:80:10:7a:71:9b:fa:17:
                    5a:23:37:3d:74:86:5c:34:12:c9:e8:1a:8a:ef:ba:
                    6f:77:57:b1:26:dc:d0:b4:2c:d4:04:89:70:1f:50:
                    9c:cf:31:3c:e0:2b:56:57:6d:d1:9f:cd:a0:b7:81:
                    8f:80:47:86:b0:d3:47:a1:04:c0:86:23:f7:0a:57:
                    f7:12:d5:8e:4b:d3:8c:63:b0:31:ed:ea:17:78:2d:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4A:FB:AE:7D:18:A3:8F:8A:60:91:40:7E:25:DE:7D:65:7E:4C:88:3E
            X509v3 Authority Key Identifier: 
                keyid:56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/SvuufRijj4pgkUB-Jd59ZX5MiD4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.105.182.0/24
                  188.214.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:95:f3:ea:bf:4a:ac:95:82:0f:fa:cb:01:2b:f3:ab:46:f1:
         4d:1e:d1:9f:f0:42:77:3a:ec:f0:94:17:64:8f:11:7b:0f:d3:
         94:e4:ed:81:a0:54:0d:e6:2b:79:11:be:0c:d8:8b:5c:3f:0a:
         2f:4b:1b:04:54:98:f6:df:24:d5:63:c8:80:3e:86:b1:0b:71:
         a8:56:eb:ca:9d:d4:3d:4d:3f:39:d4:aa:6a:9d:c9:6d:ac:d4:
         bf:2b:5e:51:05:e3:55:13:f3:ca:c9:6a:8e:dc:91:ec:f6:c4:
         9e:ce:41:fc:5e:81:a0:4c:c2:55:1e:a0:f6:35:23:05:12:2c:
         4e:48:34:4a:f9:a1:9c:44:f2:f7:33:74:65:79:60:8e:e7:66:
         3a:6c:b5:4b:c5:8e:56:39:11:b3:a8:da:2b:6a:3f:4d:72:2a:
         81:fd:f0:e4:5d:4c:7c:f3:a0:38:dc:a2:08:cf:a0:a8:cd:54:
         36:0c:d8:cc:4d:5a:23:4a:13:54:68:a4:aa:84:52:a9:76:da:
         57:bf:14:2e:6e:b5:a2:b2:3e:d6:28:93:07:92:e9:c5:e8:32:
         b0:9a:ef:60:2a:57:56:5d:0b:a0:4c:96:f3:59:81:3f:18:de:
         69:2f:6c:9e:38:36:56:f5:06:be:c2:21:b7:67:ae:a3:f2:07:
         ba:5f:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 18:45:07 2022 by rpki-client.