Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/C67t9fR9K__Dk2enzBdewNtQYb8.roa
File:                     C67t9fR9K__Dk2enzBdewNtQYb8.roa (download)
Hash identifier:          6VuCfc7KAYSEuat1JURlYzAUDCPPw/1TutSWWEGaR+Q=
Subject key identifier:   0B:AE:ED:F5:F4:7D:2B:FF:C3:93:67:A7:CC:17:5E:C0:DB:50:61:BF
Certificate issuer:       /CN=17e30280ae22443406f6b63cf5e0d8e061d6bbca
Certificate serial:       EE976A
Authority key identifier: 17:E3:02:80:AE:22:44:34:06:F6:B6:3C:F5:E0:D8:E0:61:D6:BB:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-MCgK4iRDQG9rY89eDY4GHWu8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/C67t9fR9K__Dk2enzBdewNtQYb8.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 212.24.123.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15636330 (0xee976a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e30280ae22443406f6b63cf5e0d8e061d6bbca
        Validity
            Not Before: Jan  1 05:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0baeedf5f47d2bffc39367a7cc175ec0db5061bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:8a:a5:d7:01:8e:9b:6e:30:e7:79:54:dd:
                    48:10:c3:5c:94:f8:df:4d:f7:be:7c:4d:f3:cc:cc:
                    f3:9d:25:28:29:58:49:81:ad:6a:ed:4f:33:8b:f5:
                    67:53:40:b3:ac:b7:a1:65:a2:6b:59:98:8d:5d:b9:
                    4e:d4:5a:cd:e1:90:70:c0:00:93:1c:d2:d6:55:81:
                    6d:52:b0:ae:0e:36:71:f9:76:16:f8:cb:7a:af:dd:
                    2e:7d:b9:b2:04:ba:68:9a:27:69:df:14:9f:e7:5b:
                    ef:17:20:c9:d8:14:a2:d1:af:0e:51:33:57:2d:8c:
                    7c:5c:89:67:b9:55:c6:25:f3:f6:42:54:6b:15:9e:
                    73:f4:04:2e:be:86:ba:9c:ef:2f:10:2e:ab:d9:ed:
                    b0:10:b6:6e:4b:4f:a9:ab:85:98:86:ee:74:8c:16:
                    00:75:1d:a1:f8:2f:f4:92:37:6d:1b:d5:9d:d5:65:
                    51:b3:27:8e:f2:04:e3:ec:8c:a8:18:cb:11:a6:b2:
                    f9:a4:0d:8c:b8:1d:fd:4d:15:3a:61:77:34:0b:00:
                    df:6e:77:73:b2:ab:46:b4:a4:06:73:ef:98:98:92:
                    33:59:ee:27:88:b9:8f:df:bd:dc:f3:5a:4e:41:b4:
                    97:73:5d:85:1e:83:4d:5a:4b:7f:4f:c2:1b:74:49:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0B:AE:ED:F5:F4:7D:2B:FF:C3:93:67:A7:CC:17:5E:C0:DB:50:61:BF
            X509v3 Authority Key Identifier: 
                keyid:17:E3:02:80:AE:22:44:34:06:F6:B6:3C:F5:E0:D8:E0:61:D6:BB:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-MCgK4iRDQG9rY89eDY4GHWu8o.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/C67t9fR9K__Dk2enzBdewNtQYb8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.24.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:b8:c7:dd:a0:e6:4f:e1:5a:49:8e:97:ca:77:59:e5:b1:46:
         11:5a:9b:2a:89:0c:5c:ba:4a:b4:33:81:72:85:90:06:84:8c:
         ab:03:2f:76:05:06:5c:35:ce:c0:2a:85:af:69:45:7a:bf:69:
         99:99:65:d7:0c:25:3b:98:3f:7e:a8:08:2f:95:7d:35:3b:d9:
         eb:33:dd:7c:19:12:4a:53:20:ce:53:80:1e:79:48:f4:2c:64:
         94:bc:64:5a:77:cb:73:d6:d5:1b:d3:82:58:64:f1:18:1e:3b:
         03:3b:b0:c9:1f:7e:3c:2a:ae:9b:62:fb:11:69:92:34:12:6a:
         89:74:df:59:38:f4:9a:80:1a:0f:a2:53:ab:2f:6f:15:3a:81:
         a5:87:97:a9:23:a6:9d:c4:10:f1:04:cd:96:c5:3e:ac:4d:1c:
         1b:57:52:81:9a:7c:20:98:11:dc:a3:f9:ac:cb:be:18:67:e0:
         f6:3c:bc:dc:f9:4e:78:36:8d:b2:49:50:64:d4:ef:96:4b:f1:
         88:75:7b:f9:97:55:e9:f3:31:f1:a2:0f:55:15:d3:fe:46:c4:
         37:32:72:80:1d:02:f4:fc:a5:15:f9:8b:c8:47:63:69:d6:08:
         a1:f6:87:5a:96:e3:d1:41:06:00:a8:b6:b0:ca:9e:f7:86:19:
         70:58:b9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 09:14:00 2022 by rpki-client.