Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/L2l8TxP738_Lacn1CiRh4Md-tL8.roa
File:                     L2l8TxP738_Lacn1CiRh4Md-tL8.roa (download)
Hash identifier:          GZFrD9uUqv0Qdf5XtPtTwIQ9t5aMxpwTjUZA+YgwyJs=
Subject key identifier:   2F:69:7C:4F:13:FB:DF:CF:CB:69:C9:F5:0A:24:61:E0:C7:7E:B4:BF
Certificate issuer:       /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial:       0182C488CC095E303F16111CA771E153FFD0
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/L2l8TxP738_Lacn1CiRh4Md-tL8.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 91.243.177.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c4:88:cc:09:5e:30:3f:16:11:1c:a7:71:e1:53:ff:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
        Validity
            Not Before: Aug 22 07:51:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f697c4f13fbdfcfcb69c9f50a2461e0c77eb4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:8a:29:50:97:d0:ab:43:28:eb:fa:06:d9:
                    86:96:28:f8:01:4c:49:13:5f:6e:a2:7e:86:ae:71:
                    ca:92:ca:51:1e:d0:34:b9:ff:ce:cf:5a:e5:c9:96:
                    6e:e5:8c:66:0a:62:2f:56:39:9f:26:85:cb:7e:05:
                    49:d8:d3:99:81:61:09:23:9a:24:75:12:51:2e:52:
                    7c:79:8f:71:91:7a:a3:39:b0:1b:31:dc:da:9c:57:
                    a1:d7:5b:09:64:db:81:c7:bb:9a:03:b0:f8:dc:01:
                    89:77:c7:48:4e:27:4f:6e:08:f6:91:b4:a2:cd:28:
                    10:18:3f:cd:ef:d8:57:da:8a:3a:ea:0f:c4:ed:2b:
                    41:33:e1:12:9e:0b:49:4a:17:b4:0d:5a:15:ff:68:
                    54:7a:10:61:98:45:db:86:b2:92:5e:4c:6e:05:ef:
                    f8:64:48:ad:37:92:3a:91:a4:4f:b1:31:73:56:4e:
                    e3:f0:7f:ff:78:6c:8d:19:86:76:63:02:b1:1e:6c:
                    58:4f:d3:1b:51:84:dd:69:d1:6a:84:d4:80:20:dd:
                    92:2e:30:9d:7c:6b:11:41:38:b0:6b:89:7a:da:02:
                    ea:6f:7d:41:2b:60:61:83:4c:8a:01:00:62:92:f6:
                    62:7a:c0:ba:ee:0c:3b:3b:80:f5:ae:c8:69:fc:00:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2F:69:7C:4F:13:FB:DF:CF:CB:69:C9:F5:0A:24:61:E0:C7:7E:B4:BF
            X509v3 Authority Key Identifier: 
                keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/L2l8TxP738_Lacn1CiRh4Md-tL8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.243.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:c1:11:23:00:68:a3:6f:dc:0e:9f:63:54:f5:3e:f9:05:
         3c:1e:04:73:5f:f3:39:cc:9e:94:07:25:08:ea:33:43:34:d7:
         d1:8a:f6:12:19:46:98:4d:09:bc:cf:25:9f:3c:07:e4:11:71:
         31:60:88:83:a7:ea:c8:7e:27:37:26:43:34:de:e9:34:5a:a5:
         f5:b6:cd:3b:d5:8c:68:3d:6f:4d:b3:61:13:d7:3c:49:b3:3b:
         68:b2:c5:4b:da:48:0a:fb:9e:35:ad:29:19:5a:d4:00:a9:ac:
         b4:b5:4b:61:90:c1:bc:93:30:71:7c:25:4d:7b:fe:e8:ef:0c:
         8e:8f:68:80:16:87:b0:20:1a:19:4e:83:de:7b:f5:e3:b5:02:
         63:b4:a6:c6:c4:3a:3e:44:4d:4c:68:20:3a:73:54:11:9d:33:
         9c:20:08:16:66:cb:e3:a9:3b:11:a3:95:5e:1f:95:65:06:9a:
         69:b5:0f:e2:90:f1:5f:1c:e0:b9:55:fa:20:22:ce:de:a7:e1:
         96:3f:df:a3:5d:c5:67:b0:2d:bc:39:19:0c:e5:87:c1:b3:c6:
         24:b6:85:99:c4:e8:66:fc:6b:09:2c:02:ea:0a:29:de:44:6f:
         89:66:1b:69:45:dd:33:e4:6a:c8:e0:d5:18:3e:b8:51:78:71:
         f8:bd:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:37:06 2022 by rpki-client.