Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/vVg6TtxbEAMUBF2jWGAsO6XqM5I.roa
File:                     vVg6TtxbEAMUBF2jWGAsO6XqM5I.roa (download)
Hash identifier:          64bHQoxjiSO+wL5lTLJxRRKkMzmzpLtDN6o/ESZuOAY=
Subject key identifier:   BD:58:3A:4E:DC:5B:10:03:14:04:5D:A3:58:60:2C:3B:A5:EA:33:92
Certificate issuer:       /CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Certificate serial:       012DC739
Authority key identifier: 14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/vVg6TtxbEAMUBF2jWGAsO6XqM5I.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 185.149.148.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19777337 (0x12dc739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
        Validity
            Not Before: Jan  1 05:03:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd583a4edc5b100314045da358602c3ba5ea3392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:2c:bf:45:3c:f6:b0:3e:ac:b7:85:1b:03:
                    1f:ba:34:c1:25:03:cb:6c:83:9a:fc:ea:51:12:56:
                    d0:b3:63:49:29:72:1a:88:f4:5a:a3:ed:4a:43:55:
                    80:31:89:e0:f9:76:9b:c4:3b:87:69:42:c5:b8:5a:
                    48:a3:d8:2c:47:02:e2:2f:b3:ca:b6:94:56:38:e1:
                    b4:db:7e:69:38:c7:1f:8c:77:5b:e7:0c:c5:a4:68:
                    78:41:78:e2:a0:8e:cd:86:2d:fd:58:78:b3:ff:5e:
                    20:f3:2c:eb:1e:ae:19:56:7f:96:4b:2d:4c:c3:2c:
                    b7:72:19:d3:b1:63:63:cd:f0:43:b8:b9:0d:7f:68:
                    ce:95:05:4e:ad:6c:4f:e8:b5:89:6a:c7:05:6c:e2:
                    f4:b0:48:67:e7:9c:62:04:91:f3:f6:d1:04:a2:a8:
                    7d:d1:73:3a:69:4f:12:a8:05:b9:ed:91:8a:50:d6:
                    f1:8c:65:70:c8:38:28:86:70:0a:51:84:a7:6d:c0:
                    22:ec:72:07:db:61:b5:cb:9f:0b:5a:8d:d9:9e:c4:
                    40:28:e9:55:55:7b:60:a9:71:24:5a:a4:89:49:25:
                    6f:2a:66:45:ec:54:4e:3b:10:82:7d:15:2d:a6:0e:
                    d0:ff:3d:a7:8f:59:79:85:01:22:11:3b:47:af:ae:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:58:3A:4E:DC:5B:10:03:14:04:5D:A3:58:60:2C:3B:A5:EA:33:92
            X509v3 Authority Key Identifier: 
                keyid:14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/vVg6TtxbEAMUBF2jWGAsO6XqM5I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:a9:6d:45:ca:3a:9c:fc:d0:4b:e2:5b:ea:26:e6:78:61:ae:
         5e:2e:54:01:4b:60:3b:8a:10:b2:a1:47:02:cd:27:99:65:e6:
         6d:96:1d:ef:ab:c6:64:af:99:95:ec:66:b2:1b:18:62:bf:ff:
         58:bd:35:1d:53:80:76:4f:7b:7b:f0:6f:25:62:dc:f7:3c:78:
         a8:a0:e2:63:df:22:ff:bb:c6:a1:f1:ae:0a:03:1b:16:53:b8:
         e3:1a:40:f1:ad:ec:c1:0e:b5:e1:6c:8b:27:c9:17:65:30:f2:
         91:dd:da:ee:e7:b8:a0:35:19:e8:94:a2:1c:06:f3:86:c3:a1:
         5c:77:df:8b:b1:d1:1f:36:c6:83:64:ea:58:ab:09:13:86:ca:
         c4:df:4d:9b:af:7c:1d:30:2a:a4:21:65:92:8e:a3:b3:cc:16:
         d4:af:29:ec:33:77:d7:0c:83:e0:a6:c1:65:6c:f8:81:fc:d3:
         52:d0:30:d8:b8:73:a6:19:94:69:75:bf:ce:26:20:15:f6:e6:
         2f:d1:e0:c7:f6:76:75:7f:d7:6b:53:53:b8:5a:ba:89:1e:80:
         52:6e:5c:ad:16:fe:3a:70:56:82:fd:67:32:67:e3:1a:fa:13:
         b3:fb:13:78:15:64:2d:b0:71:90:77:2e:2a:b4:4e:20:e5:37:
         37:18:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 09:54:07 2022 by rpki-client.