Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/vQUQzqlVq_BCRjchmjDYof_AL1s.roa
File:                     vQUQzqlVq_BCRjchmjDYof_AL1s.roa (download)
Hash identifier:          lo/BSg0Vvg17T2c0nECYjK3B72dHCiU4eNP5IdJo96s=
Subject key identifier:   BD:05:10:CE:A9:55:AB:F0:42:46:37:21:9A:30:D8:A1:FF:C0:2F:5B
Certificate issuer:       /CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
Certificate serial:       0149EA68
Authority key identifier: B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/vQUQzqlVq_BCRjchmjDYof_AL1s.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 194.150.79.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21621352 (0x149ea68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
        Validity
            Not Before: Jan  1 11:04:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd0510cea955abf0424637219a30d8a1ffc02f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:6d:b9:10:af:ee:79:9f:45:72:d3:a1:e0:
                    81:ba:c8:b8:c4:8f:0e:15:8b:66:aa:5c:ed:10:fb:
                    a7:46:ca:51:f7:d0:6b:e5:9d:9a:ee:1f:4b:76:f5:
                    5d:89:df:17:89:72:03:e0:32:b9:a4:d4:bc:94:a5:
                    98:88:58:3c:66:33:f5:cb:42:54:26:7f:e6:ca:06:
                    80:4a:79:6d:09:3f:4f:e8:dc:98:22:12:67:2a:11:
                    25:1e:54:67:8c:dc:3e:cf:51:e7:6c:23:77:36:e8:
                    f6:db:76:b0:53:a0:77:39:25:3b:7a:32:50:80:f0:
                    28:76:4f:d2:7f:8e:b1:f8:e9:a5:23:b2:9c:ca:ac:
                    f6:e2:e5:d4:bb:ad:d6:d7:23:a0:aa:16:b3:41:8f:
                    de:9e:b3:bc:f5:39:d7:91:e2:8c:3b:4d:94:82:87:
                    dd:eb:2d:cb:f8:ba:c8:f8:52:8b:d8:80:ed:2f:50:
                    54:3b:61:12:79:54:78:20:4f:29:45:0c:c0:b6:68:
                    df:00:7d:3e:0c:d8:94:0d:1f:e4:c4:17:da:32:ff:
                    2a:b7:bd:12:e2:fa:bc:c6:c7:52:e0:6b:44:37:9b:
                    c8:7f:f9:50:e2:56:9e:51:32:29:a0:07:59:cd:34:
                    1d:6f:4e:14:80:4f:8a:96:f0:af:c4:85:e1:7b:5f:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:05:10:CE:A9:55:AB:F0:42:46:37:21:9A:30:D8:A1:FF:C0:2F:5B
            X509v3 Authority Key Identifier: 
                keyid:B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/vQUQzqlVq_BCRjchmjDYof_AL1s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/ssHUKM3uHrP_v23yMY-ZVN2IX_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:a3:10:3d:92:80:80:66:d8:e4:34:fe:c5:c4:1c:02:d6:5d:
         7f:c0:e3:d3:ae:6f:9f:14:33:32:e3:09:3a:bc:59:87:e4:bb:
         c5:03:c8:a4:c6:07:4c:6c:6b:c4:fc:d5:e5:52:64:95:54:6c:
         c1:70:ca:de:fd:57:8a:5e:7b:cb:05:61:98:1d:ba:53:ea:c2:
         a8:93:a5:70:55:9b:81:44:12:c0:10:88:0f:c2:c3:16:07:1a:
         a0:2c:5e:b5:69:61:86:b3:4b:2b:3e:0f:29:9b:df:e8:4d:76:
         50:11:37:14:81:78:a1:ee:19:80:e8:02:75:2a:12:e6:c2:0b:
         7f:09:7e:be:73:49:5a:ce:e9:5e:33:16:85:e1:95:45:56:15:
         3b:96:47:31:1c:df:94:44:16:21:b6:a6:9a:81:ee:33:fa:ec:
         a0:6e:89:ad:8f:b1:e2:b3:25:bd:13:31:34:6a:7a:b3:a1:80:
         e8:49:fd:69:37:40:7f:41:33:7b:8b:f5:71:f9:bf:29:74:7b:
         03:b9:0c:b7:0f:fa:2c:75:ea:b8:ad:6e:de:67:b8:aa:16:54:
         be:c9:05:fe:e1:ef:d7:a7:65:3d:4d:29:e7:9a:fd:da:af:5c:
         99:16:cd:63:d4:b0:ad:8e:a0:d8:91:bb:3f:f1:b5:1f:f6:56:
         91:03:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 09:54:21 2022 by rpki-client.